暨南学报(哲学社会科学版)

作者：周瑞珏

单位：北京航空航天大学工业和信息化法治研究院。

关键词：网络安全损失险,损失填补,营业中断损失,网络勒索赎金

基金：国家社会科学基金重大项目“信息法基础”(16ZDA075)。

网络安全损失险作为网络安全风险治理的重要“市场”工具,能够有效填补立法规制与技术预防等既有治理路径的不足。然而,面对因果关系复杂的各类网络安全风险,网络安全损失险能够填补的网络安全损失范围始终存有争议。从损失类型来看,事实层面的网络安全经济损失并不当然均属于保险法中损失填补的基本范畴,按照“实际损失”和“合理费用”的基本划分,网络安全损失险所遵循的损失填补逻辑实际上是以“有限补偿”为主:对于营业中断损失而言,保险责任仅以被保险人无法有效处置的网络安全故障为限;对于网络勒索赎金这类损失而言,保险责任则以“支付赎金行为属于避免损失扩大的最佳方式”为前提。网络安全损失险本质上是对《民法典》侵权责任编等制度工具难以全面回应网络安全态势的补充,故而其“补偿”的理想效果是填补网络安全事件发生前后的营业能力差异及其经济利润差额。"/>template{display:none;}.mag-rich-xref-fn { cursor: pointer;}//长视频$(document).ready(function(){if($("#showLongArticleVideo") && $("#showLongArticleVideo").length && $("#showLongArticleVideo").length>0){mag_ajax_update({ele_id:'showLongArticleVideo',url:mag_currentQikanUrl() + "/CN/article/showLongArticleVideo.do?id="+$("#articleId").val()});}});$(document).ready(function(){window.metaData = {"journal":{"issn":"1000-5072","qiKanMingCheng_CN":"暨南学报（哲学社会科学版）","id":2,"qiKanMingCheng_EN":"Jinan Journal"},"fundList_cn":["国家社会科学基金重大项目“信息法基础”(16ZDA075)。"],"article":{"keywordList_cn":["网络安全损失险","损失填补","营业中断损失","网络勒索赎金"],"juan":"46","zhaiyao_cn":"网络安全损失险作为网络安全风险治理的重要“市场”工具,能够有效填补立法规制与技术预防等既有治理路径的不足。然而,面对因果关系复杂的各类网络安全风险,网络安全损失险能够填补的网络安全损失范围始终存有争议。从损失类型来看,事实层面的网络安全经济损失并不当然均属于保险法中损失填补的基本范畴,按照“实际损失”和“合理费用”的基本划分,网络安全损失险所遵循的损失填补逻辑实际上是以“有限补偿”为主:对于营业中断损失而言,保险责任仅以被保险人无法有效处置的网络安全故障为限;对于网络勒索赎金这类损失而言,保险责任则以“支付赎金行为属于避免损失扩大的最佳方式”为前提。网络安全损失险本质上是对《民法典》侵权责任编等制度工具难以全面回应网络安全态势的补充,故而其“补偿”的理想效果是填补网络安全事件发生前后的营业能力差异及其经济利润差额。","endNoteUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/article/getTxtFile.do?fileType=EndNote&id=6919","reference":"","bibtexUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/article/getTxtFile.do?fileType=BibTeX&id=6919","articleType":"","abstractUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/10.11778/j.jnxb.20230809","qi":"2","id":6919,"nian":2024,"bianHao":"1709109691338-46706679","zuoZheEn_L":"ZHOU Ruijue","juanUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/Y2024","shouCiFaBuRiQi":"2024-02-28","qiShiYe":"149","qiUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/Y2024/V46/I2","lanMu_cn":"数字法治","pdfSize":"1895","zuoZhe_CN":"周瑞珏","risUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/article/getTxtFile.do?fileType=Ris&id=6919","title_cn":"网络安全损失险的损失补偿逻辑与保险责任认定","doi":"10.11778/j.jnxb.20230809","jieShuYe":"164","keywordList_en":["cybersecurity loss insurance","compensation for losses","business interruption loss","cyber extortion"],"endNoteUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/article/getTxtFile.do?fileType=EndNote&id=6919","zhaiyao_en":"In modern society, the popularization and application of network communication technology has reshaped social structure and social relations, but it has also produced post-modern social risks-cybersecurity risks. Diversified governance tools such as law, technology, and market have become the core elements of current cybersecurity governance. Under the guidance of market governance, cybersecurity loss insurance has gradually received attention, and policies such as theOpinions on Promoting the Standardized and Healthy Development of Cyber Security Insurancewere released one after another. However, most of existing studies discuss issues such as risk insurability and insurance product design from an insurance perspective. In particular, there is a lack of specialized research at the legal system level on matters that are prone to legal disputes such as the scope of loss compensation for this type of insurance.Since there are no judicial cases on cybersecurity loss insurance in China, this article uses judicial cases in the United States, where cybersecurity loss insurance is relatively developed, as an argument to analyze the U.S. courts' decisions on the purpose of insurance contracts, determination of insurance liability, and determination of the scope of cybersecurity losses. In addition, this article, based on the practical characteristics of cyber security losses,compares them with the concept of loss in traditional civil law theory. From this point of view, all cyber security economic losses at the factual level do not certainly belong to the basic scope of loss compensation in insurance law. According to the basic division of “actual losses” and “reasonable expenses”, the loss compensation logic followed by cybersecurity loss insurance is actually based on “limited compensation”, and its ideal “supplementary” effect is to compensate for the difference in operating capacity before and after the occurrence of cybersecurity incidents and the difference in actual economic profits.Compared with existing research, this article conducts a specialized analysis of two common types of security losses-business interruption losses and cyber extortion, and makes an expanded discussion on their corresponding insurance liabilities. First, for business interruption losses,insurance liability is limited to cybersecurity failures that the insured cannot effectively handle. As business interruption losses are in the nature of profit losses, the prerequisite for cybersecurity loss insurance to compensate for such losses is that the losses are caused or expanded due to reasons within the scope of liability of the main insurance clauses. Second, for losses such as cyber extortion, the assumption of insurance liability is based on the premise that “paying the ransom is the best way to avoid the expansion of losses”. Moreover, after the insured fulfills its notification obligation in a timely manner, the data to be protected by paying the ransom should be the data held hostage by the cyber extortion attack.This article reveals the compensation function of cybersecurity loss insurance for various types of cybersecurity losses, which helps to reduce legal disputes about the insurance liability clauses of this type of insurance in the practical pilot of cybersecurity loss insurance and realize the loss of cybersecurity insurance. The filling function is connected with the functions of the current cybersecurity legal system.","bibtexUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/article/getTxtFile.do?fileType=BibTeX&id=6919","abstractUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/10.11778/j.jnxb.20230809","zuoZheCn_L":"周瑞珏","juanUrl_cn":"https://jnxb.jnu.edu.cn/skb/CN/Y2024","lanMu_en":"","qiUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/Y2024/V46/I2","zuoZhe_EN":"ZHOU Ruijue","risUrl_en":"https://jnxb.jnu.edu.cn/skb/EN/article/getTxtFile.do?fileType=Ris&id=6919","title_en":"Loss Compensation Logic and Insurance Liability Determination of Cybersecurity Loss Insurance","hasPdf":"true"},"authorNotes_cn":["周瑞珏,北京航空航天大学工业和信息化法治研究院。"]};if(window.metaData && (!window.metaData.authorNotesCommon_cn && !window.metaData.authorNotesCorresp_cn && window.metaData.authorNotes_cn)){window.metaData.authorNotesCommon_cn = window.metaData.authorNotes_cn;}if(window.metaData && (!window.metaData.authorNotesCommon_en && !window.metaData.authorNotesCorresp_en && window.metaData.authorNotes_en)){window.metaData.authorNotesCommon_en = window.metaData.authorNotes_en;}var _nlmdtdXml = $("#article_nlmdtdXml").val();var magDir = _nlmdtdXml.replace(/\/[^\/]+$/,'');window.metaData.magDir = magDir;new mag_vue({ el: '#metaVue', //dataUrl: mag_currentQikanUrl() + '/EN/article/getRichHtmlJson.do?articleId='+$("#articleId").val(), data:window.metaData, loading:true, doTextFun:function(text){ return doDataJsonText(text); }, doAfterFun:function(selector,jsonData){doMagVueAfter(selector,jsonData);}});var pars = {attachType:'PDF',id:$("#articleId").val(),json:true};jQuery.post($("#mag-common-contextPath").val()+"/CN/article/showArticleFile.do?" + new Date().getTime(), pars, function(data){var json=null;if(data.match(/^\[json\].*/g)){json=eval("("+data.replace(/^\[json\]/g,"")+")");}if(json && json.status == 1){//有权限}else{//无权限$("#no-access-div").show();}});mag_ajax({url:mag_currentQikanUrl() + '/CN/article/getRichHtmlJson.do',data:{articleId:$("#articleId").val(),token:'87506217189044c5bc86587500ddf4a6',referer:document.referrer},dataType:"json",async:"false",success:function(json){if(json.richHtmlJson && json.richHtmlJson.article){if(json.trans){var _nlmdtdXmlCN = $("#article_nlmdtdXmlCN").val();var magDirCN = _nlmdtdXmlCN.replace(/\/[^\/]+$/,'');json.richHtmlJson.magDir=magDirCN;}else{json.richHtmlJson.magDir=magDir;}new mag_vue({ el: '#bodyVue', data:json.richHtmlJson, doTextFun:function(text){ return doDataJsonText(text); }, doAfterFun:function(selector,jsonData){doMagVueAfter(selector,jsonData);}});}}});//altmetricif($.trim($("#article_doi").val())!=''){$.ajax({url:'https://api.altmetric.com/v1/doi/'+$.trim($("#article_doi").val())+'?callback=altmetric_callback',//url:'https://api.altmetric.com/v1/doi/10.1007/s13238-016-0264-7?callback=altmetric_callback',dataType:'jsonp'});}mag_rich_menu(jQuery);$(function(){ $('#autoMenu').autoMenu();})$("#autoMenu").niceScroll({cursorcolor: "#ccc", //滚动条的颜色cursoropacitymax: 0, //滚动条的透明度，从0-1 touchbehavior: false, //使光标拖动滚动像在台式电脑触摸设备 true滚动条拖动不可用 cursorwidth: "6px", //滚动条的宽度 单位默认px cursorborder: "0", // 游标边框css定义 cursorborderradius: "3px", //滚动条两头的圆角 autohidemode: true, //是否隐藏滚动条 true的时候默认不显示滚动条，当鼠标经过的时候显示滚动条 zindex: "auto", //给滚动条设置z-index值 railvalign:'defaul',railpadding: {top: 0,right: -6,left: 0,bottom: 0}, //滚动条的位置});window.autoMenuFlag=true;$("#relatedArticles").niceScroll({cursorcolor: "#ccc", //滚动条的颜色cursoropacitymax: 0, //滚动条的透明度，从0-1 touchbehavior: false, //使光标拖动滚动像在台式电脑触摸设备 true滚动条拖动不可用 cursorwidth: "6px", //滚动条的宽度 单位默认px cursorborder: "0", // 游标边框css定义 cursorborderradius: "3px", //滚动条两头的圆角 autohidemode: true, //是否隐藏滚动条 true的时候默认不显示滚动条，当鼠标经过的时候显示滚动条 zindex: "auto", //给滚动条设置z-index值 railvalign:'defaul',railpadding: {top: 0,right: -6,left: 0,bottom: 0}, //滚动条的位置});//公式序号 居右jQuery(".mag-xml-disp-formula").each(function() {var _this = jQuery(this);var _label= _this.children("label");if(typeof(_label.html())!="undefined"){_this.children("label").remove();_this.wrap("");_this.parent().parent().append(""+_label.html()+"");}});$('body').click(function(){$('.daochu_div').hide();$('.qipao').hide();})$('.qipao').click(function(event){event.stopPropagation();})/*参考文献显示隐藏*/$('.biaotijiantoush1').click(function(event){if($(this).attr('class')=='glyphicon glyphicon-triangle-top biaotijiantoush biaotijiantoush1'){$(this).parents('.mag_main_zhengwen_left_div_ckwx_table_benwenyiny').next('.mag_main_zhengwen_left_div_ckwx_table_ckwx_xiangqing').stop().slideUp();$(this).attr('class','glyphicon glyphicon-triangle-bottom biaotijiantoush biaotijiantoush1');}else if($(this).attr('class')=='glyphicon glyphicon-triangle-bottom biaotijiantoush biaotijiantoush1'){$(this).parents('.mag_main_zhengwen_left_div_ckwx_table_benwenyiny').next('.mag_main_zhengwen_left_div_ckwx_table_ckwx_xiangqing').stop().slideDown();$(this).attr('class','glyphicon glyphicon-triangle-top biaotijiantoush biaotijiantoush1');}event.stopPropagation();});//加载补充材料mag_ajax_update({ele_id:'showArticle_suppls',url:mag_currentQikanUrl() + '/CN/article/showArticleSuppls.do',data:{articleId:$("#articleId").val()}});//加载专题mag_ajax_update({ele_id:'showArticle_subjects',url:mag_currentQikanUrl() + '/CN/subject/showSubjectListByArticle.do',data:{articleId:$("#articleId").val(),forwardJsp:'showArticle'}});//渲染公式mag_mathJax();});function altmetric_callback(json){if(json && json.score){if(json.score - parseInt(json.score) > 0){$("#altmetric-score").html(parseInt(json.score)+1);}else{$("#altmetric-score").html(parseInt(json.score));}$(".main_content_center_right_duoweidu_div").css("width","25%");$("#altmetric-a").show();$("#altmetric-a").attr("href",json.details_url);}}function richClickAuthor(name){var searchSQL = "((("+mag_advSearchValReplace(name)+"[Author]) AND 2J[Journal]) AND year[Order])";mag_request({url:mag_currentQikanUrl() + '/CN/searchresult',data:{searchSQL:searchSQL}});}function richClickKeyword(keyword){var searchSQL = "((("+mag_advSearchValReplace(keyword)+"[Keyword]) AND 2J[Journal]) AND year[Order])";mag_request({url:mag_currentQikanUrl() + '/CN/searchresult',data:{searchSQL:searchSQL}});}function mag_share(){$("#bShare_more_a").click();}function loadRelatedArticles(){if($("#showRelatedArticles") && $("#showRelatedArticles").length>0){//加载过了}else{mag_loading();mag_ajax_update({ele_id:'relatedArticles-content',url:mag_currentQikanUrl() + '/CN/article/relatedArticle.do',data:{id:$("#articleId").val(), forwardJsp:'showArticle'},complete:function(){mag_layer_close();}});}}function showMetrics(){mag_window_location(mag_currentQikanUrl() + '/CN/metrics/'+$("#articleId").val());}function piaofuFn(a,fnId){var content=''+$("#mag-rich-fn-"+fnId).html()+'';piaofu(a,content);}function huoqukuanduimg(){//}function doDataJsonText(text){var str = text;//var _nlmdtdXml = $("#article_nlmdtdXml").val();//var magDir = _nlmdtdXml.replace(/\/[^\/]+$/,'');str = str.replace(/";ss += "";var shuomingTitle = "";var shuomingContent = '';if(fig.titleCn && fig.titleCn!=''){shuomingTitle = fig.titleCn;if(fig.titleContentCn && fig.titleContentCn!=''){shuomingContent += fig.titleContentCn;}}if(shuomingTitle==''){if(fig.titleEn && fig.titleEn!=''){shuomingTitle = fig.titleEn;}if(fig.titleContentEn && fig.titleContentEn!=''){shuomingContent += fig.titleContentEn;}}else{if(fig.titleEn && fig.titleEn!=''){shuomingContent += ""+fig.titleEn+"

来源：2024年第2期

《暨南学报(哲学社会科学版)》期刊编辑部

查看暨南学报(哲学社会科学版)杂志2024年第2期