IDEAS home Printed from https://ideas.repec.org/a/wly/syseng/v18y2015i2p146-161.html
   My bibliography  Save this article

Modeling the Ripple Effects of IT‐Based Incidents on Interdependent Economic Systems

Author

Listed:
  • Jalal Ali
  • Joost R. Santos

Abstract

The information technology (IT) sector is one of the most critically utilized infrastructures within the U.S. economic system. The IT sector is vulnerable to man‐made attacks and it is challenging to assess the consequences of disruptions to the production and delivery of essential IT services to other economic systems. In this paper, we developed a dynamic model based on economic input–output analysis to assess time‐varying disruptions on the IT sector over multiple periods. The model is applied in an ex post analysis of an actual denial‐of‐service (DoS) attack scenario on the IT infrastructure to estimate the consequences propagated to interdependent economic systems. The model uses Bureau of Economic Analysis data to simulate the effects of IT‐based incidents and subsequently identify the critically affected economic sectors. Key results of the case study include assessments of ripple effects to vulnerable sectors in the form of inoperability and economic loss measures. An investigation of the DoS attack in year 2000 using the proposed dynamic model revealed significant losses that are consistent with the magnitude of losses from previous studies. Furthermore, the model is capable of depicting the breakdown of losses across various economic sectors, which is a significant improvement relative to previously published results. This research also extends into a multiyear trend analysis (1999–2009) to aid in developing policies for reducing the effects of IT risks across the interdependent sectors of the U.S. economy.

Suggested Citation

  • Jalal Ali & Joost R. Santos, 2015. "Modeling the Ripple Effects of IT‐Based Incidents on Interdependent Economic Systems," Systems Engineering, John Wiley & Sons, vol. 18(2), pages 146-161, March.
    • Handle: RePEc:wly:syseng:v:18:y:2015:i:2:p:146-161
    DOI: 10.1002/sys.21293
    as

    Download full text from publisher

    File URL: https://doi.org/10.1002/sys.21293
    Download Restriction: no
    File URL: https://libkey.io/10.1002/sys.21293?utm_source=ideas
    LibKey link: if access is restricted and if your library uses this service, LibKey will redirect you to where you can use your library subscription to access this item
    ---><---

    References listed on IDEAS

    as
    1. Linda K. Nozick & Mark A. Turnquist & Dean A. Jones & Jennifer R. Davis & Craig R. Lawton, 2005. "Assessing the performance of interdependent infrastructures and optimising investments," International Journal of Critical Infrastructures, Inderscience Enterprises Ltd, vol. 1(2/3), pages 144-154.
    2. Stephanie E. Chang & Timothy L. McDaniels & Joey Mikawoz & Krista Peterson, 2007. "Infrastructure failure interdependencies in extreme events: power outage consequences in the 1998 Ice Storm," Natural Hazards: Journal of the International Society for the Prevention and Mitigation of Natural Hazards, Springer;International Society for the Prevention and Mitigation of Natural Hazards, vol. 41(2), pages 337-358, May.
    3. Joanna Resurreccion & Joost R. Santos, 2012. "Multiobjective Prioritization Methodology and Decision Support System for Evaluating Inventory Enhancement Strategies for Disrupted Interdependent Sectors," Risk Analysis, John Wiley & Sons, vol. 32(10), pages 1673-1692, October.
    4. Stanley Kaplan & B. John Garrick, 1981. "On The Quantitative Definition of Risk," Risk Analysis, John Wiley & Sons, vol. 1(1), pages 11-27, March.
    5. Jennifer L. Bayuk & Barry M. Horowitz, 2011. "An architectural systems engineering methodology for addressing cyber security," Systems Engineering, John Wiley & Sons, vol. 14(3), pages 294-304, September.
    6. Chenyang Lian & Yacov Y. Haimes, 2006. "Managing the risk of terrorism to interdependent infrastructure systems through the dynamic inoperability input–output model," Systems Engineering, John Wiley & Sons, vol. 9(3), pages 241-258, September.
    7. René Krikhaar & Wim Mosterman & Niels Veerman & Chris Verhoef, 2009. "Enabling system evolution through configuration management on the hardware/software boundary," Systems Engineering, John Wiley & Sons, vol. 12(3), pages 233-264, September.
    8. Yacov Y. Haimes & Stan Kaplan & James H. Lambert, 2002. "Risk Filtering, Ranking, and Management Framework Using Hierarchical Holographic Modeling," Risk Analysis, John Wiley & Sons, vol. 22(2), pages 383-397, April.
    9. Yacov Y. Haimes, 1991. "Total Risk Management," Risk Analysis, John Wiley & Sons, vol. 11(2), pages 169-171, June.
    10. Chenyang Lian & Joost R. Santos & Yacov Y. Haimes, 2007. "Extreme Risk Analysis of Interdependent Economic and Infrastructure Sectors," Risk Analysis, John Wiley & Sons, vol. 27(4), pages 1053-1064, August.
    Full references (including those not matched with items on IDEAS)

    Citations

    Citations are extracted by the CitEc Project, subscribe to its RSS feed for this item.
    as


    Cited by:

    1. Joost R. Santos & John Frederick D. Tapia & Albert Lamberte & Christine Alyssa Solis & Raymond R. Tan & Kathleen B. Aviso & Krista Danielle S. Yu, 2022. "Uncertainty Analysis of Business Interruption Losses in the Philippines Due to the COVID-19 Pandemic," Economies, MDPI, vol. 10(8), pages 1-18, August.

    Most related items

    These are the items that most often cite the same works as this one and are cited by the same works as this one.
    1. Joost R. Santos & Lucia Castro Herrera & Krista Danielle S. Yu & Sheree Ann T. Pagsuyoin & Raymond R. Tan, 2014. "State of the Art in Risk Analysis of Workforce Criticality Influencing Disaster Preparedness for Interdependent Systems," Risk Analysis, John Wiley & Sons, vol. 34(6), pages 1056-1068, June.
    2. Matthew H. Henry & Yacov Y. Haimes, 2009. "A Comprehensive Network Security Risk Model for Process Control Networks," Risk Analysis, John Wiley & Sons, vol. 29(2), pages 223-248, February.
    3. Yacov Y. Haimes & Alfred Anderegg, 2015. "Sequential Pareto‐Optimal Decisions Made During Emergent Complex Systems of Systems: An Application to the FAA NextGen," Systems Engineering, John Wiley & Sons, vol. 18(1), pages 28-44, January.
    4. Maria Leung & James H. Lambert & Alexander Mosenthal, 2004. "A Risk‐Based Approach to Setting Priorities in Protecting Bridges Against Terrorist Attacks," Risk Analysis, John Wiley & Sons, vol. 24(4), pages 963-984, August.
    5. Kenneth G. Crowther & Yacov Y. Haimes & Gideon Taub, 2007. "Systemic Valuation of Strategic Preparedness Through Application of the Inoperability Input‐Output Model with Lessons Learned from Hurricane Katrina," Risk Analysis, John Wiley & Sons, vol. 27(5), pages 1345-1364, October.
    6. M. F. Leung & J. R. Santos & Y. Y. Haimes, 2003. "Risk Modeling, Assessment, and Management of Lahar Flow Threat," Risk Analysis, John Wiley & Sons, vol. 23(6), pages 1323-1335, December.
    7. Joanna Resurreccion & Joost R. Santos, 2012. "Multiobjective Prioritization Methodology and Decision Support System for Evaluating Inventory Enhancement Strategies for Disrupted Interdependent Sectors," Risk Analysis, John Wiley & Sons, vol. 32(10), pages 1673-1692, October.
    8. Sean S. Baggott & Joost R. Santos, 2020. "A Risk Analysis Framework for Cyber Security and Critical Infrastructure Protection of the U.S. Electric Power Grid," Risk Analysis, John Wiley & Sons, vol. 40(9), pages 1744-1761, September.
    9. James H. Lambert & Rachel K. Jennings & Nilesh N. Joshi, 2006. "Integration of risk identification with business process models," Systems Engineering, John Wiley & Sons, vol. 9(3), pages 187-198, September.
    10. Yacov Y. Haimes, 2012. "Systems‐Based Guiding Principles for Risk Modeling, Planning, Assessment, Management, and Communication," Risk Analysis, John Wiley & Sons, vol. 32(9), pages 1451-1467, September.
    11. James H. Lambert & Benjamin L. Schulte & Priya Sarda, 2005. "Tracking the complexity of interactions between risk incidents and engineering systems," Systems Engineering, John Wiley & Sons, vol. 8(3), pages 262-277, September.
    12. Stephanie E. Chang & Timothy McDaniels & Jana Fox & Rajan Dhariwal & Holly Longstaff, 2014. "Toward Disaster‐Resilient Cities: Characterizing Resilience of Infrastructure Systems with Expert Judgments," Risk Analysis, John Wiley & Sons, vol. 34(3), pages 416-434, March.
    13. Yacov Y. Haimes, 2006. "On the Definition of Vulnerabilities in Measuring Risks to Infrastructures," Risk Analysis, John Wiley & Sons, vol. 26(2), pages 293-296, April.
    14. Hong Sun & Fangquan Yang & Peiwen Zhang & Yunxiang Zhao, 2023. "Flight Training Risk Identification and Assessment Based on the HHM-RFRM Model," Sustainability, MDPI, vol. 15(2), pages 1-20, January.
    15. Ioanna Ioannou & Jaime E. Cadena & Willy Aspinall & David Lange & Daniel Honfi & Tiziana Rossetto, 2022. "Prioritization of hazards for risk and resilience management through elicitation of expert judgement," Natural Hazards: Journal of the International Society for the Prevention and Mitigation of Natural Hazards, Springer;International Society for the Prevention and Mitigation of Natural Hazards, vol. 112(3), pages 2773-2795, July.
    16. Alexander A. Ganin & Phuoc Quach & Mahesh Panwar & Zachary A. Collier & Jeffrey M. Keisler & Dayton Marchese & Igor Linkov, 2020. "Multicriteria Decision Framework for Cybersecurity Risk Assessment and Management," Risk Analysis, John Wiley & Sons, vol. 40(1), pages 183-199, January.
    17. Barry M. Horowitz & Yacov Y. Haimes, 2003. "Risk‐based methodology for scenario tracking, intelligence gathering, and analysis for countering terrorism," Systems Engineering, John Wiley & Sons, vol. 6(3), pages 152-169.
    18. Kenneth G. Crowther & Yacov Y. Haimes, 2005. "Application of the inoperability input—output model (IIM) for systemic risk assessment and management of interdependent infrastructures," Systems Engineering, John Wiley & Sons, vol. 8(4), pages 323-341.
    19. Sivakumar, Senthilkumar, 2022. "A novel Integrated Risk Management Method for Airport operations," Journal of Air Transport Management, Elsevier, vol. 105(C).
    20. Barry Charles Ezell, 2007. "Infrastructure Vulnerability Assessment Model (I‐VAM)," Risk Analysis, John Wiley & Sons, vol. 27(3), pages 571-583, June.

    More about this item

    Statistics

    Access and download statistics

    Corrections

    All material on this site has been provided by the respective publishers and authors. You can help correct errors and omissions. When requesting a correction, please mention this item's handle: RePEc:wly:syseng:v:18:y:2015:i:2:p:146-161. See general information about how to correct material in RePEc.

    If you have authored this item and are not yet registered with RePEc, we encourage you to do it here. This allows to link your profile to this item. It also allows you to accept potential citations to this item that we are uncertain about.

    If CitEc recognized a bibliographic reference but did not link an item in RePEc to it, you can help with this form .

    If you know of missing items citing this one, you can help us creating those links by adding the relevant references in the same way as above, for each refering item. If you are a registered author of this item, you may also want to check the "citations" tab in your RePEc Author Service profile, as there may be some citations waiting for confirmation.

    For technical questions regarding this item, or to correct its authors, title, abstract, bibliographic or download information, contact: Wiley Content Delivery (email available below). General contact details of provider: https://doi.org/10.1002/(ISSN)1520-6858 .

    Please note that corrections may take a couple of weeks to filter through the various RePEc services.

    IDEAS is a RePEc service. RePEc uses bibliographic data supplied by the respective publishers.