SECONDO: A Platform for Cybersecurity Investments and Cyber Insurance Decisions | SpringerLink
Skip to main content
Springer Nature Link
Log in

SECONDO: A Platform for Cybersecurity Investments and Cyber Insurance Decisions

  • Conference paper
  • First Online:
Trust, Privacy and Security in Digital Business (TrustBus 2020)

Part of the book series: Lecture Notes in Computer Science ((LNSC,volume 12395))

Included in the following conference series:

Abstract

This paper represents the SECONDO framework to assist organizations with decisions related to cybersecurity investments and cyber-insurance. The platform supports cybersecurity and cyber-insurance decisions by implementing and integrating a number of software components. SECONDO operates in three distinct phases: (i) cyber-physical risk assessment and continuous monitoring; (ii) investment-driven optimized cyber-physical risk control; and (iii) blockchain-enabled cyber-insurance contract preparation and maintenance. Insurers can leverage SECONDO functionalities to actively participate in the management of cyber-physical risks of a shipping company to reduce their insured risk.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
¥17,985 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
JPY 3498
Price includes VAT (Japan)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
JPY 5719
Price includes VAT (Japan)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
JPY 7149
Price includes VAT (Japan)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Similar content being viewed by others

Notes

  1. 1.

    http://www.olistic.io/.

  2. 2.

    https://maritimecyberadvisors.com/_files/200000086-a389ca4859/MaritimeCyberInsurnace052019.pdf.

  3. 3.

    https://www.lmalloyds.com/LMA/Wordings/NMA2914A_C.aspx.

  4. 4.

    https://www.forbes.com/sites/leemathews/2017/08/16/notpetya-ransomware-attack-cost-shipping-giant-maersk-over-200-million/.

  5. 5.

    http://coras.sourceforge.net/coras_language.html.

  6. 6.

    https://www.cisecurity.org/controls/.

  7. 7.

    https://iumi.com/news/news/bimco-the-guidelines-on-cyber-security-onboard-ships.

References

  1. Fielder, A., Panaousis, E., Malacaria, P., Hankin, C., Smeraldi, F.: Decision support approaches for cyber security investment. Decis. Support Syst. 86, 13–23 (2016)

    Article  Google Scholar 

  2. Panou, A., Ntantogian, C., Xenakis, C.: RiSKi: A framework for modeling cyber threats to estimate risk for data breach insurance. In: Proceedings of the 21st Pan-Hellenic Conference on Informatics. 1–6 (2017)

    Google Scholar 

  3. Fielder, A., König, S., Panaousis, E., Schauer, S., Rass, S.: Risk assessment uncertainties in cybersecurity investments. Games 9(2), 34 (2018)

    Article  MathSciNet  Google Scholar 

  4. Chronopoulos, M., Panaousis, E., Grossklags, J.: An options approach to cybersecurity investment. IEEE Access 6, 12175–12186 (2017)

    Article  Google Scholar 

  5. Panda, S., Panaousis, E., Loukas, G., Laoudias, C.: Optimizing Investments in Cyber Hygiene for Protecting Healthcare Users. In: Di Pierro, A., Malacaria, P., Nagarajan, R. (eds.) From Lambda Calculus to Cybersecurity Through Program Analysis. LNCS, vol. 12065, pp. 268–291. Springer, Cham (2020). https://doi.org/10.1007/978-3-030-41103-9_11

    Chapter  Google Scholar 

  6. Laszka, A., Panaousis, E., Grossklags, J.: Cyber-insurance as a signaling game: self-reporting and external security audits. In: Bushnell, L., Poovendran, R., Başar, T. (eds.) GameSec 2018. LNCS, vol. 11199, pp. 508–520. Springer, Cham (2018). https://doi.org/10.1007/978-3-030-01554-1_29

    Chapter  Google Scholar 

  7. Oppliger, R.: Quantitative risk analysis in information security management: a modern fairy tale. IEEE Secur. Priv. 13(6), 18–21 (2015)

    Article  Google Scholar 

  8. Nespoli, P., Papamartzivanos, D., Mármol, F.G., Kambourakis, G.: Optimal countermeasures selection against cyber attacks: a comprehensive survey on reaction frameworks. IEEE Commun. Sur. Tutor. 20(2), 1361–1396 (2017)

    Article  Google Scholar 

  9. Böhme, R., Schwartz, G., et al.: Modeling cyber-insurance: Towards a unifying framework. In: WEIS. (2010)

    Google Scholar 

  10. Woods, D., Agrafiotis, I., Nurse, J.R.C., Creese, S.: Mapping the coverage of security controls in cyber insurance proposal forms. J. Int. Serv. Appl. 8(1), 1–13 (2017). https://doi.org/10.1186/s13174-017-0059-y

    Article  Google Scholar 

  11. Marotta, A., Martinelli, F., Nanni, S., Orlando, A., Yautsiukhin, A.: Cyber-insurance survey. Comput. Sci. Rev. 24, 35–61 (2017)

    Article  Google Scholar 

  12. Romanosky, S., Ablon, L., Kuehn, A., Jones, T.: Content analysis of cyber insurance policies: how do carriers price cyber risk? J. Cyber. Sec. 5(1) (2019)

    Google Scholar 

  13. Organization, I.M.: Guidelines on maritime cyber risk manageme. http://www.imo.org/en/OurWork/Security/Guide_to_Maritime_Security/Pages/Default.aspx

  14. Cimpean, D., Meire, J., Bouckaert, V., Vande Casteele, S., Pelle, A., Hellebooge, L.: Analysis of cyber security aspects in the maritime sector. (2011)

    Google Scholar 

  15. EIOPA: Cyber risk for insurers– challenges and opportunities. https://eiopa.europa.eu/Publications/Reports/EIOPA_Cyber%20risk%20for%20insurers_Sept2019.pdf

  16. Balance small business, T.: What does a cyber liability policy cover? https://www.becyberawareatsea.com/awareness

  17. SANS: Bridging the insurance/infosec gap: The sans 2016 cyber insurance survey. https://www.advisenltd.com/2016/06/21/bridging-the-insuranceinfosec-gap-the-sans-2016-cyber-insurance-survey/

  18. Mrakovic, I., Vojinovic, R.: Maritime cyber security analysis - how to reduce threats? Trans. Marit. Sci. 8(1), 132–139 (2019)

    Article  Google Scholar 

Download references

Acknowledgment

This research has been funded by the European Union’s Horizon 2020 research and innovation programme under the Marie Sklodowska-Curie SECONDO grant agreement No. 823997.

Author information

Authors and Affiliations

  1. University of Piraeus, Piraeus, Greece

    Aristeidis Farao, Farnaz Mohammadi, John Polley & Christos Xenakis

  2. University of Surrey, Guildford, UK

    Sakshyam Panda

  3. Ubitech Limited, Limassol, Cyprus

    Sofia Anna Menesidou & Entso Veliou

  4. Fogus Innovations & Services, Kaisariani, Greece

    Nikolaos Episkopos

  5. Lstech Espana SL, Barcelona, Spain

    George Kalatzantonakis

  6. Cromar Insurance Brokers Ltd., Marousi, Greece

    Nikolaos Georgopoulos

  7. Cyprus University of Technology, Limassol, Cyprus

    Michael Sirivianos, Nikos Salamanos, Spyros Loizou & Michalis Pingos

  8. Imperial College London, London, UK

    Andrew Fielder

  9. University of Greenwich, London, UK

    Emmanouil Panaousis

Authors
  1. Aristeidis Farao
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Sakshyam Panda
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Sofia Anna Menesidou
    View author publications

    You can also search for this author in PubMed Google Scholar

  4. Entso Veliou
    View author publications

    You can also search for this author in PubMed Google Scholar

  5. Nikolaos Episkopos
    View author publications

    You can also search for this author in PubMed Google Scholar

  6. George Kalatzantonakis
    View author publications

    You can also search for this author in PubMed Google Scholar

  7. Farnaz Mohammadi
    View author publications

    You can also search for this author in PubMed Google Scholar

  8. Nikolaos Georgopoulos
    View author publications

    You can also search for this author in PubMed Google Scholar

  9. Michael Sirivianos
    View author publications

    You can also search for this author in PubMed Google Scholar

  10. Nikos Salamanos
    View author publications

    You can also search for this author in PubMed Google Scholar

  11. Spyros Loizou
    View author publications

    You can also search for this author in PubMed Google Scholar

  12. Michalis Pingos
    View author publications

    You can also search for this author in PubMed Google Scholar

  13. John Polley
    View author publications

    You can also search for this author in PubMed Google Scholar

  14. Andrew Fielder
    View author publications

    You can also search for this author in PubMed Google Scholar

  15. Emmanouil Panaousis
    View author publications

    You can also search for this author in PubMed Google Scholar

  16. Christos Xenakis
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Aristeidis Farao .

Editor information

Editors and Affiliations

  1. School of Engineering, University of the Aegean, Karlovassi, Samos, Greece

    Stefanos Gritzalis

  2. SBA Research, Vienna, Wien, Austria

    Edgar R. Weippl

  3. Johannes Kepler University of Linz, Linz, Oberösterreich, Austria

    Gabriele Kotsis

  4. Vienna University of Technology, Vienna, Wien, Austria

    A Min Tjoa

  5. Johannes Kepler University of Linz, Linz, Oberösterreich, Austria

    Ismail Khalil

Copyright information

© 2020 Springer Nature Switzerland AG

About this paper

Check for updates. Verify currency and authenticity via CrossMark

Cite this paper

Farao, A. et al. (2020). SECONDO: A Platform for Cybersecurity Investments and Cyber Insurance Decisions. In: Gritzalis, S., Weippl, E.R., Kotsis, G., Tjoa, A.M., Khalil, I. (eds) Trust, Privacy and Security in Digital Business. TrustBus 2020. Lecture Notes in Computer Science(), vol 12395. Springer, Cham. https://doi.org/10.1007/978-3-030-58986-8_5

Download citation

  • DOI: https://doi.org/10.1007/978-3-030-58986-8_5

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-030-58985-1

  • Online ISBN: 978-3-030-58986-8

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation