IoT供应链中的责任和保险
Accountability and Insurance in IoT Supply Chain
摘要：
供应链安全已成为物联网（IoT）系统安全风险分析中日益关注的问题。它们高度连接的结构显著扩大了攻击面，使得难以追踪恶意或受损供应商构成的风险来源。本章提出了一个系统科学的框架来研究物联网供应链中的问责制，并提供了一个全面的风险分析技术和社会经济。我们开发程式化的模型和定量方法来评估供应商的责任。两个案例研究被用来说明问责制措施的情况下，单一和多个代理。最后，我们提出了合同设计和网络保险作为减轻供应链风险的经济解决方案。它们是鼓励供应商讲真话并促进对买方进行可靠的问责调查的激励相容机制。
英文摘要：
Supply chain security has become a growing concern in security risk analysis of the Internet of Things (IoT) systems. Their highly connected structures have significantly enlarged the attack surface, making it difficult to track the source of the risk posed by malicious or compromised suppliers. This chapter presents a system-scientific framework to study the accountability in IoT supply chains and provides a holistic risk analysis technologically and socio-economically. We develop stylized models and quantitative approaches to evaluate the accountability of the suppliers. Two case studies are used to illustrate accountability measures for scenarios with single and multiple agents. Finally, we present the contract design and cyber insurance as economic solutions to mitigate supply chain risks. They are incentive-compatible mechanisms that encourage truth-telling of the supplier and facilitate reliable accountability investigation for the buyer.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
