1. Cyberonomics
Measuring the true cost of Cybercrime
Shahar Geiger Maor

3. https://twitter.com/Op_Israel/status/320957190309543938
B
(daily)

4. Why Measuring Cyber Security?
in :

6. “…Cybercrime Cost is estimated $1 Trillion
worldwide”
http://www.whitehouse.gov/video/President-Obama-on-Cybersecurity#transcript
http://www.forbes.com/sites/andygreenberg/ /mcafee-explains-
the-dubious-math-behind-its-unscientific- -trillion-data-loss-claim

7. Risk
Landscap
e
(2013)
http://www3.weforum.org/docs/WEF_GlobalRisks_Report_2013.pdf

8. 1.8%
Of
GDP
UK =
27B₤
IL =
4.5B$
The Cost Of Cybercrime in Israel
(#1)
-industry-and-government-joint-crime-cyber-of-cost-https://www.gov.uk/government/publications/the

9. The Cost Of Cybercrime in Israel
(#1)
4.5B$
http://www.slideshare.net/jimmyschwarzkopf/stki-summit-2012-israeli-it-market
4.5B$
~66%
of
6.7B$

10. Why Measuring Cyber Security Is So
Problematic?
Too many sources of data
The problems of under-recording and under/over-reporting
Cybercrime surveys (lack of methodology)
Conflicts of interest
Terminology and rhetorics
What to measure? (impact, loss)
http://www.law.leeds.ac.uk/assets/files/staff/FD .pdf

11. The Costs Of Cybercrime To Society
Defense costs
Indirect losses
Direct
losses
Cybercrime Supporting Infra.
Criminal revenue
Cost to
society
http://weis2012.econinfosec.org/papers/Anderson_WEIS2012.pdf +customizations
Terrorist’s gain
Vendor revenue

12. 0.19%
Of
GDP
UK =
4.5B₤
IL =
460M$
http://weis2012.econinfosec.org/papers/Anderson_WEIS2012.pdf

13. The Cost Of Cybercrime in Israel (#2)
460M$
http://mops.gov.il/Documents/Publications/CrimeDamage/CrimeDamageReports/CrimeDamageReport2011.pdf
Total cost of crime
in Israel (2012):
4B$ Sex Crimes:
170M$
Murder: 100M$
Fraud+ ​Property
: 1,960M$
x2.
7
x4.
2
23
%

14. Some Insights From An Israeli Security
Survey
This survey refers to 2009-2011 (included)
Market Average: 2 incidents in 3 years Per organization
Market score: ~400 incidents in 2011
An average security incident looks like this:
• Inside factor or known vulnerability/threat
• ~50 working hours per incident
• ~50K$ per incident (~~~~~~~~~~~)
http://www.slideshare.net/shaharmaor/information-security-stki-summit-2012shahar-geiger-maor-12059675

15. The Cost Of Cybercrime in Israel (#3)
20M$

16. http://hackingdefined.org/opisrael/rss.xml
A Brave New Economic Model
Scope Target Impact Timing Reputation
Economic
gains

17. Government’s Role In Cyber
Economic Measurement
Quantitative risk assessment may improve cyber security controls and mitigation.
So:
Regulators should encourage the use of cyber economic
measurement tools
One methodology
One focal point
Discreet reporting

18. Thank You!