{"id":"https://openalex.org/W2981014813","doi":"https://doi.org/10.1093/cybsec/tyz010","title":"Embracing and controlling risk dependency in cyber-insurance policy underwriting","display_name":"Embracing and controlling risk dependency in cyber-insurance policy underwriting","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2981014813","doi":"https://doi.org/10.1093/cybsec/tyz010","mag":"2981014813"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyz010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyz010","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/5/1/tyz010/30247290/tyz010.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/5/1/tyz010/30247290/tyz010.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078967045","display_name":"Mohammad Mahdi Khalili","orcid":null},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Mohammad Mahdi Khalili","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI 48109, USA"],"raw_orcid":"https://orcid.org/0000-0002-4223-3254","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI 48109, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101967011","display_name":"Mingyan Liu","orcid":"https://orcid.org/0000-0003-3295-9200"},"institutions":[{"id":"https://openalex.org/I27837315","display_name":"University of Michigan","ror":"https://ror.org/00jmfr291","country_code":"US","type":"education","lineage":["https://openalex.org/I27837315"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mingyan Liu","raw_affiliation_strings":["Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI 48109, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Computer Science, University of Michigan, Ann Arbor, MI 48109, USA","institution_ids":["https://openalex.org/I27837315"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002725626","display_name":"Sasha Romanosky","orcid":null},"institutions":[{"id":"https://openalex.org/I1309849503","display_name":"RAND Corporation","ror":"https://ror.org/00f2z7n96","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I1309849503"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sasha Romanosky","raw_affiliation_strings":["RAND Corporation, Arlington, VA 22202, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"RAND Corporation, Arlington, VA 22202, USA","institution_ids":["https://openalex.org/I1309849503"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5078967045"],"corresponding_institution_ids":["https://openalex.org/I27837315"],"apc_list":{"value":2094,"currency":"USD","value_usd":2094},"apc_paid":{"value":2094,"currency":"USD","value_usd":2094},"fwci":3.5065,"has_fulltext":true,"cited_by_count":27,"citation_normalized_percentile":{"value":0.94071972,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"5","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10270","display_name":"Blockchain Technology Applications and Security","score":0.9918000102043152,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9714000225067139,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/underwriting","display_name":"Underwriting","score":0.8897663950920105},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.6439391374588013},{"id":"https://openalex.org/keywords/actuarial-science","display_name":"Actuarial science","score":0.6091983914375305},{"id":"https://openalex.org/keywords/auto-insurance-risk-selection","display_name":"Auto insurance risk selection","score":0.5349771976470947},{"id":"https://openalex.org/keywords/interdependence","display_name":"Interdependence","score":0.5181307196617126},{"id":"https://openalex.org/keywords/business-interruption-insurance","display_name":"Business interruption insurance","score":0.44934308528900146},{"id":"https://openalex.org/keywords/group-insurance","display_name":"Group insurance","score":0.42853373289108276},{"id":"https://openalex.org/keywords/insurance-policy","display_name":"Insurance policy","score":0.41380584239959717},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.41313862800598145},{"id":"https://openalex.org/keywords/key-person-insurance","display_name":"Key person insurance","score":0.41228681802749634},{"id":"https://openalex.org/keywords/general-insurance","display_name":"General insurance","score":0.36287128925323486},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2594243586063385},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.12665870785713196}],"concepts":[{"id":"https://openalex.org/C26503482","wikidata":"https://www.wikidata.org/wiki/Q1898080","display_name":"Underwriting","level":2,"score":0.8897663950920105},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.6439391374588013},{"id":"https://openalex.org/C162118730","wikidata":"https://www.wikidata.org/wiki/Q1128453","display_name":"Actuarial science","level":1,"score":0.6091983914375305},{"id":"https://openalex.org/C62172701","wikidata":"https://www.wikidata.org/wiki/Q4826138","display_name":"Auto insurance risk selection","level":4,"score":0.5349771976470947},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.5181307196617126},{"id":"https://openalex.org/C172195485","wikidata":"https://www.wikidata.org/wiki/Q4443488","display_name":"Business interruption insurance","level":5,"score":0.44934308528900146},{"id":"https://openalex.org/C4430244","wikidata":"https://www.wikidata.org/wiki/Q5611238","display_name":"Group insurance","level":5,"score":0.42853373289108276},{"id":"https://openalex.org/C68799949","wikidata":"https://www.wikidata.org/wiki/Q977871","display_name":"Insurance policy","level":2,"score":0.41380584239959717},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.41313862800598145},{"id":"https://openalex.org/C29513703","wikidata":"https://www.wikidata.org/wiki/Q6398174","display_name":"Key person insurance","level":3,"score":0.41228681802749634},{"id":"https://openalex.org/C14293393","wikidata":"https://www.wikidata.org/wiki/Q2663825","display_name":"General insurance","level":3,"score":0.36287128925323486},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2594243586063385},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.12665870785713196},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C101615574","wikidata":"https://www.wikidata.org/wiki/Q17055997","display_name":"Income protection insurance","level":4,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/cybsec/tyz010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyz010","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/5/1/tyz010/30247290/tyz010.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyz010","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyz010","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/5/1/tyz010/30247290/tyz010.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Decent work and economic growth","score":0.46000000834465027,"id":"https://metadata.un.org/sdg/8"}],"awards":[{"id":"https://openalex.org/G1818979859","display_name":"TWC: Small: Understanding Network Level Malicious Activities: Classification, Community Detection and Inference of Security Interdependence","funder_award_id":"1422211","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G4919727899","display_name":"TTP: Small: Network-Level Security Posture Assessment and Predictive Analytics: From Theory to Practice","funder_award_id":"1616575","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G6660986853","display_name":"CPS:Small:Collaborative Research: Incentivizing Desirable User Behavior in a Class of CPS","funder_award_id":"1739517","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G7338776328","display_name":null,"funder_award_id":"FA8750-18-2-0011","funder_id":"https://openalex.org/F4320306110","funder_display_name":"U.S. Department of Homeland Security"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320306110","display_name":"U.S. Department of Homeland Security","ror":"https://ror.org/00jyr0d86"},{"id":"https://openalex.org/F4320338294","display_name":"Air Force Research Laboratory","ror":"https://ror.org/02e2egq70"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2981014813.pdf","grobid_xml":"https://content.openalex.org/works/W2981014813.grobid-xml"},"referenced_works_count":32,"referenced_works":["https://openalex.org/W1500450275","https://openalex.org/W1989706342","https://openalex.org/W2074035703","https://openalex.org/W2078309362","https://openalex.org/W2098376610","https://openalex.org/W2125428582","https://openalex.org/W2131832787","https://openalex.org/W2165913973","https://openalex.org/W2170940825","https://openalex.org/W2516247356","https://openalex.org/W2528904765","https://openalex.org/W2537905549","https://openalex.org/W2561247258","https://openalex.org/W2593948499","https://openalex.org/W2603653327","https://openalex.org/W2604936645","https://openalex.org/W2612324131","https://openalex.org/W2734999728","https://openalex.org/W2755041435","https://openalex.org/W2757072265","https://openalex.org/W2759577011","https://openalex.org/W2763277207","https://openalex.org/W2764126000","https://openalex.org/W2783270181","https://openalex.org/W2786873690","https://openalex.org/W2793107022","https://openalex.org/W2794377947","https://openalex.org/W2796875185","https://openalex.org/W3105114291","https://openalex.org/W3124467526","https://openalex.org/W4236841844","https://openalex.org/W4254318710"],"related_works":["https://openalex.org/W3123553328","https://openalex.org/W2736171364","https://openalex.org/W121432634","https://openalex.org/W2271008575","https://openalex.org/W2790207916","https://openalex.org/W2259390008","https://openalex.org/W779360494","https://openalex.org/W2097813980","https://openalex.org/W1702892360","https://openalex.org/W2351026734"],"abstract_inverted_index":{"Abstract":[0],"This":[1,17],"article":[2],"highlights":[3],"how":[4,180],"cyber":[5,62],"risk":[6,51,55],"dependencies":[7],"can":[8,91,111],"be":[9],"taken":[10],"into":[11],"consideration":[12],"when":[13,171],"underwriting":[14,99],"cyber-insurance":[15,198],"policies.":[16],"is":[18,31,41,185],"done":[19],"within":[20],"the":[21,50,54,80,89,101,109,117,132,138,152,156,161,167,176,181,189],"context":[22],"of":[23,134],"a":[24,72,84,120,149],"base":[25],"rate":[26],"insurance":[27,169],"policy":[28,199],"framework,":[29],"which":[30],"widely":[32],"used":[33],"in":[34,59,128],"practice.":[35],"Specifically,":[36],"we":[37,70,106,146],"show":[38,107,179],"that":[39,108],"there":[40],"an":[42,45,196],"opportunity":[43],"for":[44],"underwriter":[46],"to":[47,95,125,137,175,186,203],"better":[48],"control":[49],"dependency":[52],"and":[53,76,103,140,163,191,200,205],"spill-over,":[56],"ultimately":[57],"resulting":[58],"lower":[60],"overall":[61],"risks":[63],"across":[64],"its":[65,77,96,104,113,123,192],"portfolio.":[66],"To":[67],"do":[68],"so,":[69],"consider":[71,148],"Service":[73],"Provider":[74],"(SP)":[75],"customers":[78,158],"as":[79],"interdependent":[81],"insurer\u2019s":[82,182],"customers:":[83],"data":[85,202],"breach":[86],"suffered":[87],"by":[88,115],"SP":[90,102,118,190],"cause":[92],"business":[93,135],"interruption":[94,136],"customers.":[97,193],"In":[98],"both":[100,188],"customers,":[105,139],"insurer":[110,153],"increase":[112],"profit":[114],"incentivizing":[116],"(through":[119],"discount":[121],"on":[122],"premium)":[124],"invest":[126],"more":[127],"security,":[129],"thereby":[130],"decreasing":[131],"chance":[133],"increasing":[141],"social":[142],"welfare.":[143],"For":[144],"comparison,":[145],"also":[147],"scenario":[150],"where":[151],"underwrites":[154],"only":[155],"SP\u2019s":[157,168],"(but":[159],"not":[160],"SP),":[162],"receives":[164],"compensation":[165],"from":[166],"carrier":[170],"losses":[172],"are":[173],"attributed":[174],"SP.":[177],"We":[178,194],"best":[183],"strategy":[184],"underwrite":[187],"use":[195],"actual":[197],"claims":[201],"calibrate":[204],"substantiate":[206],"our":[207],"analytical":[208],"findings.":[209]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":3}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-10T00:00:00"}