论文标题
物联网供应链中的问责制和保险
Accountability and Insurance in IoT Supply Chain
论文作者
论文摘要
供应链安全已成为物联网（IoT）系统的安全风险分析越来越关注的问题。它们高度连接的结构已大大扩大了攻击表面，因此很难跟踪恶意或受损供应商带来的风险。本章提出了一个系统科学框架，以研究物联网供应链中的问责制，并在技术和社会经济上提供了整体风险分析。我们开发了风格化的模型和定量方法来评估供应商的问责制。两项案例研究用于说明单一和多种代理的方案的问责措施。最后，我们将合同设计和网络保险作为减轻供应链风险的经济解决方案。它们是激励兼容的机制，可以鼓励供应商的真相销售，并促进买方可靠的问责调查。
Supply chain security has become a growing concern in security risk analysis of the Internet of Things (IoT) systems. Their highly connected structures have significantly enlarged the attack surface, making it difficult to track the source of the risk posed by malicious or compromised suppliers. This chapter presents a system-scientific framework to study the accountability in IoT supply chains and provides a holistic risk analysis technologically and socio-economically. We develop stylized models and quantitative approaches to evaluate the accountability of the suppliers. Two case studies are used to illustrate accountability measures for scenarios with single and multiple agents. Finally, we present the contract design and cyber insurance as economic solutions to mitigate supply chain risks. They are incentive-compatible mechanisms that encourage truth-telling of the supplier and facilitate reliable accountability investigation for the buyer.
