Two-level system of on-line risk assessment in the national cyberspace

Abstract

The paper presents a hierarchical, two-level approach to on-line cyber risk assessment at the national level. It takes into account cyber threats and vulnerabilities identified at the lower level formed by essential service operators and digital service providers. A computational algorithm is proposed, making use of the local measurements and assessments and its asynchronous convergence is proved. At the end a case study concerning a system consisting of four entities is presented.