Keywords
ransomware attack
cyber risk
insurance
COVID-19
cybersecurity insurance coverage
How to Cite
Abstract
The main purpose of this article is to analyze ransomware risk and its impact on the loss ratio in cyber insurance. To achieve this goal, the article indicates the scale of the threat of ransomware attacks and the prospects for change in the field of cyber insurance protection. Methodologically, the focus is on analysis and literature studies in order to properly describe and classify cyber threats, including ransomware risk. Statistical data were analyzed to find the scale of ransomware threats. Through the analysis, attention was drawn to the need for changes in the approach to cyber risk by both entrepreneurs and insurance companies. The originality of the study lies in its attempt to capture the necessity of changes in the field of cyber insurance, and justify their introduction. A research gap was identified, as the problem of ransomware attacks became particularly acute during the COVID-19 pandemic.
References
Allianz Global Corporate & Specialty (2021). Ransomware trends: Risks and Resilience, Munich.
Andress, J., Winterfeld, S. (2013). Cyber Warfare: Techniques, Tactics and Tools for Security Practitioners: second edition, Syngress, USA.
Bajpai, P., Sood, A.K., Enbody, R. (2018). A key-management-based taxonomy for ransomware, APWG Symposium on Electronic Crime Research (eCrime), IEEE.
Cert (2021). Poradnik ransomware 2021 [Access: 4.10.2022]. Access on the internet: https://cert.pl/uploads/docs/CERT_Polska_Poradnik_ransomware.pdf.
Check Point Research. (2022). Cyber Security Report.
Deloitte (2016). Beneath the surface of a cyberattack A deeper look at business impacts [Access: 7.10.2022]. Access on the internet: https://www2.deloitte.com/content/dam/Deloitte/us/Documents/risk/us-risk-beneath-the-surface-of-a-cyber-attack.pdf.
Gavėnaitė-Sirvydienė, J. (2019). Evaluation of cyber insurance as a risk management tool providing cyber-security. “Social Transformations in Contemporary Society”, 7.
Green, J. (2015). Cyber Warfare: A multidisciplinary analysis. New York: Routledge Taylor & Francis Group.
https://www.blackfog.com/the-state-of-ransomware-in-2020/ [Access: 08.10.2022].
https://www.businessinsurance.com/article/20211012/NEWS06/912345135/Ransomware-losses-disrupt-cyber-liability-market [Access: 14.10.2022].
https://www.ft.com/content/4f91c4e7-973b-4c1a-91c2-7742c3aa9922 [Access: 14.10.2022].
https://www.insurancebusinessmag.com/uk/news/cyber/current-cyber-insurance-model-is-ripe-for-change--cyber-advisors-317648.aspx [Access: 14.12.2022].
https://www.munichre.com/topics-online/en/digitalisation/cyber/cyber-insurance-risks-and-trends-2022.html [Access: 12.10.2022].
https://www.reuters.com/article/us-axa-cyber-idUSKCN2CX0B0 [Access: 17.12.2022].
https://www.reuters.com/markets/europe/insurers-run-ransomware-cover-losses-mount-2021-11-19/ [Access: 14.12.2022].
Kharraz, A., Robertson, W., Balzarotti, D., Bilge, L., Kirda, E. (2015). Cutting the gordian knot: A look under the hood of ransomware attacks. Detection of Intrusions and Malware, and Vulnerability Assessment, Springer, Milan. DOI: 10.1007/978-3-319-20550-2_1.
Leopando, J. (2016). Patch Your Flash: Another Zero-Day Vulnerability Hits Adobe Flash. In blog: “TrendLabs Security Intelligence Blog” [Access: 27.10.2016]. Access on the internet: http://blog.trendmicro.com/trendlabs-security-intelligence/patch-flash-another-zerodayvulnerability-hits-adobe-flash.
Liska, A., Gallo, T. (2016). Ransomware. Defending Against Digital Extortion. O’Reilly Media, USA.
Malinowska, K. (2018), Aspekty prawne ubezpieczenia cyber ryzyk. „Prawo asekuracyjne”, 2/2018 (95).
Marsh (2015). The role of insurance in managing and mitigating the risk. UK cyber security [Access: 10.10.2022]. Access on the internet: https://www.gov.uk/government/uploads/system/uploads/attachment_data/file/415354/ UK_Cyber_Security_Report_Final.pdf.
National Association of Insurance Commissioners (NAIC) (2021). Report on the Cybersecurity Insurance Market. USA.
Oosthoek, K., Cable, J., Smaragdakis, G. (2022). A Tale of Two Markets: Investigating the Ransomware Payments Economy. “Computer Science”. 10 May 2022. DOI: 10.48550/arXiv.2205.05028.
Sloan, R. (2017). Cyber Matters: The Importance of Cyber insurance for SMEs, Cubb INC USA [Access: 13.10.2022]. Access on the internet: https://www.cybersecurityjournal.org/cybermatters-he-importance-ofcyber insurance.
Sophos (2022). The state of ransomware 2022 [Access: 14.10.2022]. Access on the internet: https://assets.sophos.com/X24WTUEQ/at/4zpw59pnkpxxnhfhgj9bxgj9/sophos-state-of-ransomware-2022-wp.pdf.
World Economic Forum (2023). Global Cybersecurity Outlook 2023. Insight Report.
All texts published in the journal Humanities and Social Sciences are available in the full version on the website of HSS.
Open Access – CC BY 4.0
This is an open access journal which means that all content is freely available without charge to the user or his/her institution. The articles are published under the terms of the Creative Commons licence (CC-BY 4.0), including the following fields of exploitation comprising:
1) the right to publish the Work in print in book and digital form and to distribute it in book and digital form, including by displaying, playing, broadcasting, making it publicly available by the Publisher and third parties,
2) the right to record and reproduce all or part of the Work on paper and in the form of a digital record and in any other possible way by the Publisher,
3) the right to enter the Work into computer memory and save the Work in the IT systems of the Publisher and other entities distributing digital content,
4) the right to archive the Work and make copies of the Work on electronic media by the Publisher, without quantitative restrictions,
5) the right to digitise the Work and to perform conversions/transformations of the Work in electronic form into other digital formats by the Publisher and third parties,
6) the right to distribute the Work, including via the Internet or other ICT networks by the Publisher and other third parties, in a way that allows viewing, reading, copying the content of the Work in electronic form, i.e. all elements belonging to it, whereby copying shall be understood as the saving of the Work made available to an interested person on a medium of their choice,
7) the right to store the Work in the database of the Publisher and other entities distributing the Work in any form, as well as its processing in the database of the Publisher and third parties,
8) right to translate and publish the Work in one of the modern languages in any form by the Publisher and third parties.
The full text of the license is available at the following link: https://creativecommons.org/licenses/by/4.0/deed.en