International Workshop on CyberSecurity with UNSW, 2015 July 8th
How much is your phone-number, living address or date of your birth ?
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Todays’ talk ! • • •
! • • •
! • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
2
3. The Compensation in Real World and Analysis
Japan Pension Service Information Breach 2015 May ! •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
3
3. The Compensation in Real World and Analysis
! • • •
! •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
4
3. The Compensation in Real World and Analysis
! • • •
• • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
5
3. The Compensation in Real World and Analysis
Cyber Insurance ! • • • • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
6
INSURANCE ! • • •
! • • • • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
7
3. The Compensation in Real World and Analysis
! •
• •
•
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
8
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART1 ! • •
12,000
In this graph, more than 10,000 yen are plotted as 10,000 yen.
10,000
8,000
6,000
4,000
2,000
0 2001/04
2004/01
2006/10
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
2009/07
2012/04
2014/12
2017/09
9
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART1 ! • Year
High Comp.
Company
JO model
2002
TBC
35,000 Yen
66,000 Yen
2007
JAL Labor Union
10,000 Yen
606,000 Yen
2009
Mitsubishi UFJ Securities
10,000 Yen
180,000 Yen
2009
Alico Japan
10,000 Yen
26,000 Yen
Year
Lawsuit
Actual Cost
Company
1998
Uzi City
1998
Waseda University
2002
TBC
2004
Yahoo BB!
2007
JAL Labor Union
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Actual Cost
JO model
15,000 Yen
66,000 Yen
5,000 Yen
606,000 Yen
35,000 Yen
66,000 Yen
6,000 Yen
12,000 Yen
10,000 Yen
606,000 Yen 10
1. Introduction
Related Research (ROSI) ! • • • • •
!
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
11
1. Introduction
Related Research ! •
•
• Latham & Watkins(2014) • Cyber insurance: A last line of defense when technology fails. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
12
2. What is JO Model?
What is JO Model? ! • • •
! • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
13
2. What is JO Model?
What is JO Model? !
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
14
2. What is JO Model?
The Factors of JO Model !
!
!"#(10↑#−1 +5↑'−1 )
! !
Degree of Ease in Identifying Individual Name AND Address
6
Name OR Address + Phone Number
3
Others
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
15
2. What is JO Model?
The Factors of JO Model !
Social Responsibility Degree Higher than Normal
2
Normal
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.
16
2. What is JO Model?
The Factors of JO Model !
Post Incident Response Appraisal Inappropriate
2
Normal
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
It is judged based on qualitative reasons such as “response speed” and “the existence of the inquiry.”
17
2. What is JO Model?
Application of JO Model ! • • • • • •
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
18
2. What is JO Model?
Application of JO Model !
Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
19
2. What is JO Model?
Application of JO Model !
39,000=)**+×()*(-*↑-−- +)↑.−- ) ×. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
20
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART2 ! • 50,000 45,000 40,000
But, more than 50,000 yen are plotted as 50,000 yen.
35,000 30,000 25,000
20,000 15,000 10,000 5,000 0
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
21
3. The Compensation in Real World and Analysis
! •
• •
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
22
4. Wrap-Up
Wrap-Up ! •
•
! • •
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
23
Thank you for your attention, now Q&A
Actuary Math ! Cyber Actuary Economics “Personal Data in CyberSpace " Gas/Oil in Internet world” by Makoto SHIROTA
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
26
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
27
1. Introduction
The Background of Research ! •
! • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
28
1. Introduction
Related Research !
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
29
1. Introduction
Related Research (ROSI) ! • • • • •
!
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
30
1. Introduction
Related Research (CyberTab) !
! • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
31
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
32
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
33
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
34
1. Introduction
Related Research ! •
•
• Latham & Watkins(2014) Cyber insurance: A last line of defense when technology fails. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
35
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
36
2. What is JO Model?
What is JO Model? ! • • •
! • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
37
2. What is JO Model?
What is JO Model? !
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
38
2. What is JO Model?
The Factors of JO Model !
!
!"#(10↑#−1 +5↑'−1 )
! !
Degree of Ease in Identifying Individual Name AND Address
6
Name OR Address + Phone Number
3
Others
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
39
2. What is JO Model?
The Factors of JO Model !
Social Responsibility Degree Higher than Normal
2
Normal
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Public sector, leading company, and the industry defined by “Basic Policies related to the Protection of Personal Information” are included.
40
2. What is JO Model?
The Factors of JO Model !
Post Incident Response Appraisal Inappropriate
2
Normal
1
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
It is judged based on qualitative reasons such as “response speed” and “the existence of the inquiry.”
41
2. What is JO Model?
Application of JO Model ! • • • • • •
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
42
2. What is JO Model?
Application of JO Model !
Since car information is leaked, “Degree of Ease in Identifying the Individual” is defined as 3. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
43
2. What is JO Model?
Application of JO Model !
39,000=)**+×()*(-*↑-−- +)↑.−- ) ×. Copyright © 2015 Tomohisa Ishikawa All rights reserved.
44
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
45
3. The Compensation in Real World and Analysis
! •
• •
• •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
46
3. The Compensation in Real World and Analysis
! • • •
! •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
47
3. The Compensation in Real World and Analysis
! • • •
• • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
48
3. The Compensation in Real World and Analysis
Japan Pension Service Information Breach ! •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
49
3. The Compensation in Real World and Analysis
Cyber Insurance ! • • • • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
50
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART1 ! • •
12,000
In this graph, more than 10,000 yen are plotted as 10,000 yen.
10,000
8,000
6,000
4,000
2,000
0 2001/04
2004/01
2006/10
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
2009/07
2012/04
2014/12
2017/09
51
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART1 ! • Year
High Comp.
Company
JO model
2002
TBC
35,000 Yen
66,000 Yen
2007
JAL Labor Union
10,000 Yen
606,000 Yen
2009
Mitsubishi UFJ Securities
10,000 Yen
180,000 Yen
2009
Alico Japan
10,000 Yen
26,000 Yen
Year
Lawsuit
Actual Cost
Company
1998
Uzi City
1998
Waseda University
2002
TBC
2004
Yahoo BB!
2007
JAL Labor Union
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
Actual Cost
JO model
15,000 Yen
66,000 Yen
5,000 Yen
606,000 Yen
35,000 Yen
66,000 Yen
6,000 Yen
12,000 Yen
10,000 Yen
606,000 Yen 52
3. The Compensation in Real World and Analysis
The Analysis of Compensation in Real World PART2 ! • 50,000 45,000 40,000
But, more than 50,000 yen are plotted as 50,000 yen.
35,000 30,000 25,000
20,000 15,000 10,000 5,000 0
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
53
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
54
4. Wrap-Up
Consideration of Personal Identifiable Information Leakage ! • •
! • • •
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
55
4. Wrap-Up
Wrap-Up ! •
•
Copyright © 2015 Tomohisa Ishikawa All rights reserved.
56
Q&A
Thank you for your time & attention Feel Free to Contact Us
