Abstract The aim of this article is to analyze the economic aspects of cybersecurity of critical infrastructure defined as physical or virtual systems and assets that are vital to a country’s functioning and whose incapacitation or destruction would have a debilitating impact on national, economic, military and public security. The functioning of modern states, firms and individuals increasingly relies on digital or cyber technologies and this trend has also materialized in various facets of critical infrastructure. Critical infrastructure presents a new cybersecurity area of attacks and threats that requires the attention of regulators and service providers. Deploying critical infrastructure systems without suitable cybersecurity might make them vulnerable to intrinsic failures or malicious attacks and result in serious negative consequences. In this article a fuller view of costs and losses associated with cyberattacks that includes both private and external (social) costs is proposed. An application of the cost-benefit analysis or the Return on Security Investment (ROSI) indicator is presented to evaluate the worthiness of cybersecurity efforts and analyze the costs associated with some major cyberattacks in recent years. The “Identify, Protect, Detect, Respond and Recover” (IPDRR) framework of organizing cybersecurity efforts is also proposed as well as an illustration as to how the blockchain technology could be utilized to improve security and efficiency within a critical infrastructure.

中文翻译：

---

关键基础设施的网络攻击：经济视角

摘要本文的目的是分析关键基础设施网络安全的经济方面，这些基础设施定义为对一个国家的运行至关重要的物理或虚拟系统和资产，其能力丧失或破坏将对国家，经济，军事和公众造成不利影响安全。现代国家，公司和个人的功能越来越依赖于数字或网络技术，这一趋势也已在关键基础设施的各个方面得以体现。关键基础设施提出了一个新的攻击和威胁网络安全领域，需要监管者和服务提供商的注意。在没有适当的网络安全性的情况下部署关键基础架构系统可能会使它们容易遭受固有故障或恶意攻击，并导致严重的负面后果。本文提出了与网络攻击相关的成本和损失的完整视图，其中包括私人和外部（社会）成本。提出了成本效益分析或安全投资回报率（ROSI）指标的应用程序，以评估网络安全工作的价值并分析近年来与一些主要网络攻击相关的成本。还提出了组织网络安全工作的“识别，保护，检测，响应和恢复”（IPDRR）框架，并举例说明了如何利用区块链技术来提高关键基础架构内的安全性和效率。提出了成本效益分析或安全投资回报率（ROSI）指标的应用程序，以评估网络安全工作的价值并分析近年来与一些主要网络攻击相关的成本。还提出了组织网络安全工作的“识别，保护，检测，响应和恢复”（IPDRR）框架，并举例说明了如何利用区块链技术来提高关键基础架构内的安全性和效率。提出了成本效益分析或安全投资回报率（ROSI）指标的应用，以评估网络安全工作的价值并分析近年来与一些主要网络攻击相关的成本。还提出了组织网络安全工作的“识别，保护，检测，响应和恢复”（IPDRR）框架，并举例说明了如何利用区块链技术来提高关键基础架构内的安全性和效率。