{"id":{"repo_id":"uiuc","oai_identifier":"oai:www.ideals.illinois.edu:2142/120418"},"canonical_url":"https://search.dev.ndltd.org/etd/uiuc/oai:www.ideals.illinois.edu:2142/120418","repository":{"repo_id":"uiuc","name":"University of Illinois - Urbana-Champaign","base_url":"https://www.ideals.illinois.edu/oai-pmh"},"display":{"title":"Applications of actuarial and data science techniques to emerging topics in risk management","abstract":"Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2025-05-01","abstract_html":"Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2025-05-01","abstract_has_math":false,"creators":["Zhang, Linfeng"],"institution":"University of Illinois at Urbana-Champaign","degree_name":"Ph.D.","degree_level":"Dissertation","degree_discipline":"Mathematics","degree_department":null,"school":null,"contributors":["Feng, Runhuan","Chong, Wing Fung","Quan, Zhiyu","Bashir, Masooda"],"advisors":[],"committee_chairs":[],"committee_members":[],"year":2023,"date_issued":"2023-05","date_published":"2023-05","updated_at":"2026-07-22T22:24:57Z","subjects":["Actuarial Science","Emerging Risks","Data Science","Pandemic","Cyber Risk","Privacy","Risk Management"],"languages":["en","eng"],"rights":["Copyright 2023 Linfeng Zhang"],"rights_urls":[],"identifier_entries":[]},"links":{"outbound_url":"https://hdl.handle.net/2142/120418","outbound_label":"Handle","outbound_source":"dc:identifier"},"metadata_groups":[{"id":"people","label":"People","entries":[{"key":"dc:contributor","label":"Contributor","values":["Feng, Runhuan","Chong, Wing Fung","Quan, Zhiyu","Bashir, Masooda"]},{"key":"dc:creator","label":"Author","values":["Zhang, Linfeng"]}]},{"id":"academic_context","label":"Academic Context","entries":[{"key":"dc:date","label":"Dc Date","values":["2023-05","2023-04-28"]},{"key":"dc:type","label":"Dc Type","values":["text","Thesis"]},{"key":"thesis:degree_discipline","label":"Discipline","values":["Mathematics"]},{"key":"thesis:degree_level","label":"Degree Level","values":["Dissertation"]},{"key":"thesis:degree_name","label":"Degree Name","values":["Ph.D."]},{"key":"thesis:institution_name","label":"Thesis Institution Name","values":["University of Illinois at Urbana-Champaign"]}]},{"id":"subjects_keywords","label":"Subjects and Keywords","entries":[{"key":"dc:subject","label":"Dc Subject","values":["Actuarial Science","Emerging Risks","Data Science","Pandemic","Cyber Risk","Privacy","Risk Management"]}]},{"id":"language_rights","label":"Language and Rights","entries":[{"key":"dc:language","label":"Dc Language","values":["en","eng"]},{"key":"dc:rights","label":"Dc Rights","values":["Copyright 2023 Linfeng Zhang"]}]},{"id":"identifiers","label":"Identifiers","entries":[{"key":"dc:identifier","label":"Identifier","values":["https://hdl.handle.net/2142/120418"]}]},{"id":"additional","label":"Additional Metadata","entries":[{"key":"dc:description","label":"Description","values":["Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2025-05-01","The student, Linfeng Zhang, accepted the attached license on 2023-04-26 at 22:57.","The student, Linfeng Zhang, submitted this Dissertation for approval on 2023-04-26 at 23:26.","This Dissertation was approved for publication on 2023-04-28 at 10:53.","DSpace SAF Submission Ingestion Package generated from Vireo submission #19166 on 2023-09-01 at 17:14:54","With the ever-advancing developments in industrialization and technologies across the globe, risks and threats that were previously not a central focus of actuarial studies have quickly emerged. Some risks are new, such as cyber and privacy risks, and because they have distinct features from traditional risks, these risks impose the requirement for innovative management tools on enterprises. Some risks have been in existence, but because of their rapidly growing financial and economic impacts, they bring new challenges to risk managers, such as the pandemic risk. In this thesis, we focus on how the actuarial principles for capital allocation and risk sharing can be adopted to solve organizational and societal problems resulting from the aforementioned emerging risks, i.e., cyber, privacy, and pandemic risks. For pandemic risk management, we proposed a three-pillar framework, which includes predictions on resource demands using epidemic compartment models, stockpiling and distribution of resources across time, and allocation of resources across regions. The optimal stockpiling and allocation strategies are solved to minimize the costs associated with the spatial and temporal shortage or surplus of resources. To establish the connection between cybersecurity and economic losses resulting from cyber incidents and provide guidance on making investments in cybersecurity controls, we proposed a cyber risk assessment and management framework. It utilizes the relationship among cyber threats, vulnerabilities, and assets to associate the expenditures on patching vulnerabilities with the consequential cyber losses. In addition, we showed how to balance the competing interests in cyber risk management, including optimal ex-ante investment and ex-post-loss reserve allocations, via the holistic approach. Other than reducing and retaining cyber risks through cybersecurity investment and reserving, cyber insurance is also a viable tool for organizations to transfer their cyber risks. Based on our observations about practices in the cyber insurance industry, although policies specific to different types of cyber incidents are offered on the market, neither insurers nor policyholders have a scientifically sound way to determine how those incident-specific risks should be shared between the two parties. To address this issue, we developed a method to calculate incident-specific coverage for the Pareto optimality of the insurer and the insured. The approach is coherent with modern actuarial practices and can be easily adapted to quantitative risk management practices. We also investigated the impact of one particular type of cyber incident, data breaches, on personal privacy, and how data controllers should manage the risk of such privacy losses. To facilitate the measurements of privacy, information-theoretic utility and privacy loss metrics are proposed in the context of information sharing between the data controller and the data user and a data breach from the data user to an adversary. Classic privacy-preserving techniques often overlook the utility aspect of data and the trade-off between keeping data private and keeping data usable. We formulate the choice of a data masking strategy in this process of information flow as an optimization problem that the privacy loss shall be minimized in the data breach with a constraint on the data utility in the information sharing stage."]},{"key":"dc:format","label":"Dc Format","values":["application/pdf"]},{"key":"dc:title","label":"Title","values":["Applications of actuarial and data science techniques to emerging topics in risk management"]}]}],"canonical_facts":{"dc:contributor":["Feng, Runhuan","Chong, Wing Fung","Quan, Zhiyu","Bashir, Masooda"],"dc:creator":["Zhang, Linfeng"],"dc:date":["2023-05","2023-04-28"],"dc:description":["Submission published under a 24 month embargo labeled 'U of I Access', the embargo will last until 2025-05-01","The student, Linfeng Zhang, accepted the attached license on 2023-04-26 at 22:57.","The student, Linfeng Zhang, submitted this Dissertation for approval on 2023-04-26 at 23:26.","This Dissertation was approved for publication on 2023-04-28 at 10:53.","DSpace SAF Submission Ingestion Package generated from Vireo submission #19166 on 2023-09-01 at 17:14:54","With the ever-advancing developments in industrialization and technologies across the globe, risks and threats that were previously not a central focus of actuarial studies have quickly emerged. Some risks are new, such as cyber and privacy risks, and because they have distinct features from traditional risks, these risks impose the requirement for innovative management tools on enterprises. Some risks have been in existence, but because of their rapidly growing financial and economic impacts, they bring new challenges to risk managers, such as the pandemic risk. In this thesis, we focus on how the actuarial principles for capital allocation and risk sharing can be adopted to solve organizational and societal problems resulting from the aforementioned emerging risks, i.e., cyber, privacy, and pandemic risks. For pandemic risk management, we proposed a three-pillar framework, which includes predictions on resource demands using epidemic compartment models, stockpiling and distribution of resources across time, and allocation of resources across regions. The optimal stockpiling and allocation strategies are solved to minimize the costs associated with the spatial and temporal shortage or surplus of resources. To establish the connection between cybersecurity and economic losses resulting from cyber incidents and provide guidance on making investments in cybersecurity controls, we proposed a cyber risk assessment and management framework. It utilizes the relationship among cyber threats, vulnerabilities, and assets to associate the expenditures on patching vulnerabilities with the consequential cyber losses. In addition, we showed how to balance the competing interests in cyber risk management, including optimal ex-ante investment and ex-post-loss reserve allocations, via the holistic approach. Other than reducing and retaining cyber risks through cybersecurity investment and reserving, cyber insurance is also a viable tool for organizations to transfer their cyber risks. Based on our observations about practices in the cyber insurance industry, although policies specific to different types of cyber incidents are offered on the market, neither insurers nor policyholders have a scientifically sound way to determine how those incident-specific risks should be shared between the two parties. To address this issue, we developed a method to calculate incident-specific coverage for the Pareto optimality of the insurer and the insured. The approach is coherent with modern actuarial practices and can be easily adapted to quantitative risk management practices. We also investigated the impact of one particular type of cyber incident, data breaches, on personal privacy, and how data controllers should manage the risk of such privacy losses. To facilitate the measurements of privacy, information-theoretic utility and privacy loss metrics are proposed in the context of information sharing between the data controller and the data user and a data breach from the data user to an adversary. Classic privacy-preserving techniques often overlook the utility aspect of data and the trade-off between keeping data private and keeping data usable. We formulate the choice of a data masking strategy in this process of information flow as an optimization problem that the privacy loss shall be minimized in the data breach with a constraint on the data utility in the information sharing stage."],"dc:format":["application/pdf"],"dc:identifier":["https://hdl.handle.net/2142/120418"],"dc:language":["en","eng"],"dc:rights":["Copyright 2023 Linfeng Zhang"],"dc:subject":["Actuarial Science","Emerging Risks","Data Science","Pandemic","Cyber Risk","Privacy","Risk Management"],"dc:title":["Applications of actuarial and data science techniques to emerging topics in risk management"],"dc:type":["text","Thesis"],"thesis:degree_discipline":["Mathematics"],"thesis:degree_level":["Dissertation"],"thesis:degree_name":["Ph.D."],"thesis:institution_name":["University of Illinois at Urbana-Champaign"]},"updated_at":"2026-07-22T22:24:57Z"}