Estimating Economic Damages from Internet Incidents (인터넷 침해사고에 의한 피해손실 측정)

유진호; 지상호; 송혜인; 정경호; Lim Jong In (임종인)

Estimating Economic Damages from Internet Incidents

Informatization Policy
Abbr : 정보화정책
2008, 15(1), pp.3-18
Publisher : NIA
Research Area : Social Science > Public Policy

유진호 ¹, 지상호 ¹, 송혜인 ¹, 정경호 ¹, Lim Jong In ²

¹한국정보보호진흥원
²고려대학교

Accredited

ABSTRACT

With the rapid development of information technologies, informa tion security incidents like) attacks have become morefrequent and the scale of the economic damages from such incide nts is growing. However, there is no formalapproach to assess economic damages from information security i ncidents. This paper presents a framework toevelops formulas for each element to empiricallycalculate the economic damages. We also compared annual economi c damages of Korea with that of Japan andannual worldwide damages to test our approach and result.

KEYWORDS

Internet incidents, information security incidents, economic damages

Citation status

* References for papers published after 2023 are currently being built.

[book] 국가보안기술연구소 / 2005 / 사이버 공격으로 인한 경제적 피해비용 / 국가보안기술연구소

[book] 금융감독위원회 / 2004 / 금감원 2004 국정감사보도자료 / 금융감독위원회

[book] 신일순 / 2005 / IT 혁명과 기업활동의 변화 / 정보통신정책연구원

[book] 정보통신부 / 2003 / 정보통신망 침해사고 조사결과 / 정보통신부

[book] 한국정보보호진흥원 / 2006 / 2006년 정보보호 실태조사 / 한국정보보호진흥원

[book] 한국정보보호진흥원 / 2002 / 컴퓨터 해킹?바이러스 피해액 산출방법 연구 / 한국정보보호진흥원

[book] 한국정보보호진흥원 / 2004 / 바이러스 피해액 추정 모델 / 한국정보보호진흥원

[book] 한국정보보호진흥원 / 2005 / 인터넷 침해사고 피해액 산출모형 개발에 관한 연구 / 한국정보보호진흥원

[confproc] Anderson,R. / 2001 / Why Information Security is Hard- An Economic Perspective / 17th Annual Computer Security Applications Conference

[confproc] Butler,S.A. / 2002 / Security Attribute Evaluation Method: A Cost-Benefit Approach / Proceedings of the 24th International Conference on Software Engineering : 232~240

[other] CIC Security Working Group / 1998 / Incident Cost Analysis and Modeling Project Ⅰ

[web] / Counting the cost of Slammer / CnetNews.com / January 31 / http://www.news.com/2100-1001-982955.html

[journal] Cohen,F. / 1991 / A Cost Analysis of Typical Computer Viruses and Defenses / Computers & Security 10 : 239~250

[book] Computer Economics / 2006 / 2005 Malware Report: The Impact of Malicious Code Attacks

[book] Congressional Research Service / 2004 / The Economic Impact of Cyber-Attacks

[confproc] Dobson,J. / 1994 / Messages, Communication, Information Security and Value / Proceeding of the New Security Paradigms Workshop / IEEE : 10~18

[confproc] Farahmand,F. / 2005 / Assessing Damages of Information Security Incidents and Selecting Control Measures, a Case Study Approach / Workshop on the Economics of Information Security

[web] Garden,J / Large scale Network incidents- what can we do? / SANS Institute / SANS Institute / www.sans.org/reading_room/whitepapers/threats/928.php

[book] Gordon, L. A / 2006 / Managing Cybersecurity Resources: A Cost-Benefit Analysis

[web] Howard,J.D / An Analysis of Security Incidents On the Internet 1989-1995 / CMU, CERT / www.cert.org/research/JHThesis/

[book] IPA / 2006a / 2005년 기업대상 정보보안현상 피해액조사

[report] IPA / 2006 / 일본내 컴퓨터 바이러스 피해상황조사보고서

[report] IPA / 2006c / 정보보안관련 새로운 위협에 대한 의식조사보고서

[report] IPA / 2006 / 컴퓨터 바이러스 관련 피해상황 조사표

[report] IPA / 2001 / 정보보안 사고에 관한 조사

[other] mi2g / 2003 / SIPS Intelligent Briefing

[book] mi2g / 2004 / MyDoom becomes most damaging malware as SCO is paralysed / News Alert

[book] Smith,D.M. / 2003 / The Cost of Lost Data. The George L. Graziadio School of Business & Management Report / Pepperdine University

[journal] Toigo,J.W. / 2001 / Storage Disaster: Will You Recover / Network Computing 5

[other] USENIX Association / 2000 / Incident Cost Analysis and Modeling Project Ⅱ

[confproc] Weaver,N. / 2004 / A Worst-Case Worm / Third Annual Workshop on Economics and Information Security

KJCKorea
Journal Central

Informatization Policy 2023 KCI Impact Factor : 4.08