Modern networks, laden with an array of smart devices and lightweight operating systems, are exposed to substantial cyber risks. Given the intricate interdependence of these systems’ vulnerabilities, it is difficult to quantify the risks. This study proposes a Bayesian Attack Graph methodology to effectively evaluate cyber risks over a modern network. It presents a practical framework for pricing the identified risks and develops an innovative approach to calculating the joint exploitation probability of vulnerabilities across the network. Additionally, it presents a sensitivity analysis of pricing strategies. The simulation studies overview discusses a variety of pricing strategies and briefly discusses the potential dependence among policyholders.
Zhang et al. (Mon,) studied this question.