In just one day, the WannaCry crypto worm infected more than 200,000 computer equipment in 150 countries, including those of different multinationals, banks, health services … In essence, this variety of malicious software, called ransomware, encrypts the victim’s data and asks for a ransom, in this case in bitcoins , so that you can access them. Although attacks of this type occur every year, the virulence and scope of WannaCry has led the authorities to launch different initiatives to try to deal with this problem. Thus, a new research project promoted by the European Commission aims to significantly improve the security of communication networks and systems and prevent cyberattacks . Professor David Ríos, from the Institute of Mathematical Sciences (ICMAT), in Madrid, participates in it as scientific director.
In a statement, this researcher points out that the program, called CYBECO –Supporting Cyberinsurance from a Behavioral Choice Perspective–, will try to ” transfer the mathematical models that are being successfully applied in the field of physical security to the world of cybersecurity .” For this, his team will have an investment of two million euros that the European Union has granted them through its Horizon 2020 program. “Attacks such as WannaCry can leave companies out of the market for a longer or shorter period of time, since many of their activities depend on computer systems ; they can also steal compromised information and, as a consequence, they can lose reputation and with it customers or clients. business opportunities, “says Ríos. This also ensures that if some key infrastructures are affected, there may even be a drop in the electricity supply or in the water purification systems.
The truth is that defense measures are becoming more and more necessary . Those responsible for the National Institute of Cybersecurity, based in León, warn that in 2016 this body managed more than 115,000 computer attacks and that of the tens of thousands resolved in the first half of 2017, 247 were directed against strategic objectives. In just three months, cyber attacks increased 45% .
Ríos emphasizes that mathematics facilitates the development of risk analysis models that make it possible to determine the best protection measures that each organization must use to face attacks. To do this, it is a matter of anticipating the behavior of both the perpetrators and their targets. With this, it is not only possible to determine the possible risks, but also to improve the choice of insurance and the offer of services of the entities that offer them.
