Towards better management of organizational cybersecurity
| dc.contributor.advisor | Whinston, Andrew B. | |
| dc.contributor.committeeMember | Novak, Gordon S | |
| dc.contributor.committeeMember | Lee, Gene Moo | |
| dc.contributor.committeeMember | Miikkulainen, Risto | |
| dc.creator | Choi, Yun-Sik | |
| dc.date.accessioned | 2024-05-22T01:55:26Z | |
| dc.date.available | 2024-05-22T01:55:26Z | |
| dc.date.issued | 2019-05 | |
| dc.date.submitted | May 2019 | |
| dc.date.updated | 2024-05-22T01:55:27Z | |
| dc.description.abstract | Cybersecurity poses a serious risk to organizations. To manage and improve organizational cybersecurity, one needs to have a technical comprehension of security threats along with an economic understanding of strategies employed by cyber attackers and defenders. In this dissertation, we take both empirical and theoretical approaches to deepen our understanding on the strategies of cybersecurity in three related chapters. First, we conduct an empirical analysis on publicly observed security incidents and developed an organizational security rating system. The rating is composed of botnet, spam, and phishing data from four data sources. By conducting a large-scale field experiment using the rating system, we find a causal relationship between security awareness and protection level. Second, we develop a game-theoretical model that characterizes a real-time dynamic interaction between an unidentified attacker and a defender in Internet Service Provider (ISP) level. Specifically, we propose a Bayesian Nash game in a network security setting. In this game, a deceptive attacker tries to maximize its profit, and the defender tries to detect the attacker’s identity. Our equilibrium suggests that the strategic defense of ISP is necessary for the viability of an Internet-based society. Third, we develop a data-driven prediction model for security event detection. We construct a large composite dataset of externally observable organizational security posture and historical cyber incidents. In addition, we use LDA topic modeling on disclosed annual risk reports from organizations (Form 10-K Item 1A) to extract topic features. By leveraging these data, our model effectively predicts future security incidents. | |
| dc.description.department | Computer Science | |
| dc.format.mimetype | application/pdf | |
| dc.identifier.uri | ||
| dc.identifier.uri | https://hdl.handle.net/2152/125377 | |
| dc.identifier.uri | https://doi.org/10.26153/tsw/51968 | |
| dc.language.iso | en | |
| dc.subject | Cybersecurity | |
| dc.subject | Deep learning | |
| dc.subject | Machine learning | |
| dc.subject | Randomized field experiment | |
| dc.subject | Game theory | |
| dc.title | Towards better management of organizational cybersecurity | |
| dc.type | Thesis | |
| dc.type.material | text | |
| local.embargo.lift | 2020-05-01 | |
| local.embargo.terms | 2020-05-01 | |
| thesis.degree.department | Computer Sciences | |
| thesis.degree.grantor | The University of Texas at Austin | |
| thesis.degree.name | Doctor of Philosophy |
Access full-text files
Original bundle
1 - 1 of 1