Saved in:
Bibliographic Details
Main Authors: Na, Shize, Jin, Zhuo, Xu, Ran, Yang, Hailiang
Format: Preprint
Published: 2025
Subjects:
Online Access:https://arxiv.org/abs/2509.23116
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866910002778734592
author Na, Shize
Jin, Zhuo
Xu, Ran
Yang, Hailiang
author_facet Na, Shize
Jin, Zhuo
Xu, Ran
Yang, Hailiang
contents In this paper, we formulate cyber risk management and mitigation as a stochastic optimal control problem under a stochastic Susceptible-Infected-Susceptible (SIS) epidemic model. To capture the dynamics and interplay of management and mitigation strategies, we introduce two stochastic controls: (i) a proactive risk management control to reduce external cyber attacks and internal contagion effects, and (ii) a reactive mitigation control to accelerate system recovery from cyber infection. The interplay between these controls is modeled by minimizing the expected discounted running costs, which balance proactive management expenses against reactive mitigation expenditures. We derive the associated Hamilton-Jacobi-Bellman (HJB) equation and characterize the value function as its unique viscosity solution. For numerical solutions, we propose a Policy Improvement Algorithm (PIA) and prove its convergence via Backward Stochastic Differential Equations (BSDEs). Finally, we present a comprehensive numerical analysis through a benchmark example, suboptimal control analysis, sensitivity analysis, and comparative statics.
format Preprint
id arxiv_https___arxiv_org_abs_2509_23116
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Cyber Risk Management and Mitigation via Controlled Stochastic SIS Dynamics: An Optimal Control Approach
Na, Shize
Jin, Zhuo
Xu, Ran
Yang, Hailiang
Optimization and Control
In this paper, we formulate cyber risk management and mitigation as a stochastic optimal control problem under a stochastic Susceptible-Infected-Susceptible (SIS) epidemic model. To capture the dynamics and interplay of management and mitigation strategies, we introduce two stochastic controls: (i) a proactive risk management control to reduce external cyber attacks and internal contagion effects, and (ii) a reactive mitigation control to accelerate system recovery from cyber infection. The interplay between these controls is modeled by minimizing the expected discounted running costs, which balance proactive management expenses against reactive mitigation expenditures. We derive the associated Hamilton-Jacobi-Bellman (HJB) equation and characterize the value function as its unique viscosity solution. For numerical solutions, we propose a Policy Improvement Algorithm (PIA) and prove its convergence via Backward Stochastic Differential Equations (BSDEs). Finally, we present a comprehensive numerical analysis through a benchmark example, suboptimal control analysis, sensitivity analysis, and comparative statics.
title Cyber Risk Management and Mitigation via Controlled Stochastic SIS Dynamics: An Optimal Control Approach
topic Optimization and Control
url https://arxiv.org/abs/2509.23116