To avert the impending global Cyber-Finance Insurance Crisis based upon large-scale commercial reliance upon quantitative models with inherent model risks, tail risks, and systemic risks in current form, this post-doctoral thesis makes the following key contributions: Develops the first known...

The aim of this paper is to deepen the application of value at risk in the cyber domain, with particular attention to its potential role in security investment valuation. Cyber risk is a fundamental component of the overall risk faced by any organization. In order to plan the size of security...

The cost of cybersecurity incidents is large and growing. However, conventional methods for measuring loss and choosing mitigation strategies use simplifying assumptions and are often not supported by cyber attack data. In this paper, we present a multivariate model for different, dependent...