Semantically Rich Framework to Automate Cyber Insurance Services

Thumbnail Image

Files

1109.pdf (1.77 MB)

Links to Files

https://ieeexplore.ieee.org/abstract/document/9540368

Permanent Link

http://hdl.handle.net/11603/23098
 https://doi.org/10.1109/TSC.2021.3113272

Collections

UMBC Information Systems Department
UMBC Computer Science and Electrical Engineering Department
UMBC Faculty Collection

Author/Creator

Author/Creator ORCID

https://orcid.org/0000-0002-6354-1686

Date

2021

Type of Work

journal articles
preprints
Text

Department

Program

Citation of Original Publication

Sane, Ketki; Joshi, Karuna; Mittal, Sudip; Semantically Rich Framework to Automate Cyber Insurance Services; IEEE Transactions on Services Computing, page 1, 2021; https://doi.ieeecomputersociety.org/10.1109/TSC.2021.3113272

Rights

© 2021 IEEE.  Personal use of this material is permitted.  Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works

Subjects

UMBC Ebiquity Research Group

Abstract

With the rapid enhancements in technology and the adoption of web services, there has been a significant increase in cyber threats faced by organizations in cyberspace. Organizations want to purchase adequate cyber insurance to safeguard against the third-party services they use. However, cyber insurance policies describe their coverages and exclusions using legal jargon that can be difficult to comprehend. Parsing these policy documents and extracting the rules embedded in them is currently a very manual time-consuming process. We have developed a novel framework that automatically extracts the coverage and exclusion key terms and rules embedded in a cyber policy. We have built our framework using Information Retrieval and Artificial Intelligence techniques, specifically Semantic Web and Modal Logic. We have also developed a web interface where users can find the best matching cyber insurance policy based on particular coverage criteria. To validate our approach, we used industry standards proposed by the Federal Trade Commission document (FTC) and have applied it against publicly available policies of seven insurance providers. Our system will allow cyber insurance seekers to explore various policy documents and compare the paradigms mentioned in those documents while selecting the best relevant policy documents.