The failure of even parts of the nation\u2019s power grid could cause rolling blackouts that paralyze health care, traffic and business systems. With the advent of \u201csmart\u201d infrastructures that send data to the internet, cybersecurity is becoming a prime concern of public officials.<\/p>\n
A pair of 51ÁÔÆæ professors is aiming to help utility companies prepare for that risk by making it easier for insurance companies to cover it.<\/p>\n
But insurance doesn\u2019t keep a disaster from happening. So how does quantifying the risk help protect people?<\/p>\n
It\u2019s an important first step in motivating operators and policymakers to invest more in cybersecurity assets, according to Lingfeng Wang, an associate professor of electrical engineering, and Wei Wei, an assistant professor of mathematics. The two have funding from the National Science Foundation to build predictive models that would put a monetary value on damage caused by potential cyberattacks to the nation\u2019s power grids.<\/p>\n
\u201cThe cyber insurance premiums will be high for those with low cybersecurity performance audits, based on our novel actuarial models,\u201d said Wang, who develops software tools that can find vulnerable spots in public infrastructure. \u201cConversely, utilities with high cybersecurity will enjoy low premiums.\u201d<\/p>\n
Currently, decision-makers at most electric utilities do not see the need for such investment because the latest measures would not guarantee complete protection. Yet, the cyberthreat landscape is continuously evolving, said Wang, requiring the development of forward-thinking defense and risk-transferring strategies.<\/p>\n
And building a model could illustrate just how risky cyberthreats are, added Wei.<\/p>\n
\u201cFor the past few years, people have thought that cyber risk is uninsurable,\u201d said Wei, who specializes in actuarial science \u2013 mathematical techniques for prediction and risk assessment. \u201cIt\u2019s uninsurable because we don\u2019t know much about the nature of the risk.\u201d<\/p>\n
For comparison, think about car insurance, he said. Companies have collected a lot of data about driving habits based on driver age, car model, location and more. Using that data, they can gauge the average amount of money a car accident might cost, and they can set their premiums accordingly.<\/p>\n
\u201cWhen it comes to cybersecurity and cyber risk, we don\u2019t have that much data and we can\u2019t wait for the data to be collected,\u201d said Wei.<\/p>\n
Instead, he said, they will investigate the structures and self-protection strategies of some companies and project potential losses. It\u2019s a project that blends expertise in electrical engineering, computer science, actuarial science and statistics.<\/p>\n
In the first phase of the study, Wang and his students will examine the existing power grid infrastructure and the cybersecurity measures utility companies already have in place. Then they\u2019ll come up with scenarios of what might happen should hackers breach those security provisions.<\/p>\n
The second part of the project is Wei\u2019s department.<\/p>\n
Besides calculating potential losses for each scenario, the researchers will construct a probabilistic model to quantify them.<\/p>\n
\u201cBased on that, we can apply some actuarial techniques to give the insurance premium,\u201d said Wei. \u201cWe hope to get a clear picture on how those risks interact with each other, and then we want to build an actuarial model to instruct practice.\u201d<\/p>\n
The two researchers also are investigating the idea of introducing incentives, much like good-driver discounts in auto insurance, based on how much utility companies invest in measures like firewalls and security infrastructure.<\/p>\n
While their model could make cyber insurance more palatable for wary insurance companies, the work also could improve existing models of risk for other kinds of disaster, said Wei.<\/p>\n
\u201cIf it works, we can also generalize this model to other fields of the same nature, like internet-based cyber risk,\u201d he said. \u201cThat model can also interact with existing models for traditional catastrophic events,\u00a0like hurricanes or earthquakes.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"
The failure of even parts of the nation’s power grid could cause rolling blackouts that paralyze health care, traffic and business systems. A pair of 51ÁÔÆæ professors are aiming to help utilities prepare for that risk by making it easier for insurance companies to cover it. <\/p>\n","protected":false},"author":40008,"featured_media":57058,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":"","uwm_wg_additional_authors":[]},"categories":[174,175],"tags":[249],"section":[139],"display_categories":[114,116],"related-coverage":[],"uwmnews-feed":[167,149,158],"class_list":["post-57057","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","category-research","tag-community-engagement","section-science-technology","display_categories-top-story-primary","display_categories-top-story-section","uwmnews-feed-alumni-association","uwmnews-feed-engineering-applied-science","uwmnews-feed-letters-science"],"yoast_head":"\n