{"id":"https://openalex.org/W3035405997","doi":null,"title":"A Framework to Support ICS Cyber Incident Response and Recovery","display_name":"A Framework to Support ICS Cyber Incident Response and Recovery","publication_year":2020,"publication_date":"2020-05-24","ids":{"openalex":"https://openalex.org/W3035405997","mag":"3035405997"},"language":"en","primary_location":{"id":"pmh:oai:eprints.lancs.ac.uk:143070","doi":null,"is_oa":true,"landing_page_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","pdf_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","source":{"id":"https://openalex.org/S4306401916","display_name":"Lancaster EPrints (Lancaster University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67415387","host_organization_name":"Lancaster University","host_organization_lineage":["https://openalex.org/I67415387"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Contribution to Conference"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5072919070","display_name":"Alexander Staves","orcid":"https://orcid.org/0000-0002-9861-0477","observed_orcids":["https://orcid.org/0000-0002-9861-0477"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alex Staves","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020331984","display_name":"Harry Balderstone","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Harry Balderstone","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100610717","display_name":"Benjamin Green","orcid":"https://orcid.org/0000-0002-1013-9933","observed_orcids":["https://orcid.org/0000-0002-1013-9933"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Benjamin Green","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-1013-9933","affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000804944","display_name":"Antonios Gouglidis","orcid":"https://orcid.org/0000-0002-4702-3942","observed_orcids":["https://orcid.org/0000-0002-4702-3942"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Antonios Gouglidis","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0002-4702-3942","affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5030962937","display_name":"David Hutchison","orcid":"https://orcid.org/0000-0001-6052-0559","observed_orcids":["https://orcid.org/0000-0001-6052-0559"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"David Hutchison","raw_affiliation_strings":[],"raw_orcid":"https://orcid.org/0000-0001-6052-0559","affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.118,"has_fulltext":true,"cited_by_count":8,"citation_normalized_percentile":{"value":0.77512724,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":88,"max":95},"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8622999787330627,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8622999787330627,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12221","display_name":"Cybersecurity and Cyber Warfare Studies","score":0.09269999712705612,"subfield":{"id":"https://openalex.org/subfields/3320","display_name":"Political Science and International Relations"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.016599999740719795,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-control-systems","display_name":"industrial control systems","score":0.8840000033378601},{"id":"https://openalex.org/keywords/incident-response","display_name":"incident response","score":0.9670000076293945},{"id":"https://openalex.org/keywords/incident-recovery","display_name":"incident recovery","score":0.7360000014305115},{"id":"https://openalex.org/keywords/critical-national-infrastructure","display_name":"critical national infrastructure","score":0.9900000095367432},{"id":"https://openalex.org/keywords/operational-resilience","display_name":"operational resilience","score":0.3659999966621399},{"id":"https://openalex.org/keywords/industrial-cybersecurity","display_name":"industrial cybersecurity","score":0.33500000834465027}],"concepts":[{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5927925109863281},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5805101990699768},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.5289875268936157},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.5130001902580261},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.5018517971038818},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4961586892604828},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.49279192090034485},{"id":"https://openalex.org/C2985105721","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident response","level":2,"score":0.4878537654876709},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4373501241207123},{"id":"https://openalex.org/C2780589192","wikidata":"https://www.wikidata.org/wiki/Q7285140","display_name":"Raising (metalworking)","level":2,"score":0.43533506989479065},{"id":"https://openalex.org/C182306322","wikidata":"https://www.wikidata.org/wiki/Q1779371","display_name":"Order (exchange)","level":2,"score":0.42442619800567627},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.42367759346961975},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4166269600391388},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3495542109012604},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.27985483407974243},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.15815645456314087},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.07478851079940796},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:eprints.lancs.ac.uk:143070","doi":null,"is_oa":true,"landing_page_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","pdf_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","source":{"id":"https://openalex.org/S4306401916","display_name":"Lancaster EPrints (Lancaster University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67415387","host_organization_name":"Lancaster University","host_organization_lineage":["https://openalex.org/I67415387"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Contribution to Conference"},{"id":"mag:3035405997","doi":null,"is_oa":false,"landing_page_url":"https://eprints.lancs.ac.uk/id/eprint/143070/","pdf_url":null,"source":null,"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":null}],"best_oa_location":{"id":"pmh:oai:eprints.lancs.ac.uk:143070","doi":null,"is_oa":true,"landing_page_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","pdf_url":"https://eprints.lancs.ac.uk/id/eprint/143070/1/iscram.pdf","source":{"id":"https://openalex.org/S4306401916","display_name":"Lancaster EPrints (Lancaster University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67415387","host_organization_name":"Lancaster University","host_organization_lineage":["https://openalex.org/I67415387"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Contribution to Conference"},"sustainable_development_goals":[{"score":0.428600013256073,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320314707","display_name":"Government of the United Kingdom","ror":"https://ror.org/05wnh3t63"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3035405997.pdf","grobid_xml":"https://content.openalex.org/works/W3035405997.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4205700270","https://openalex.org/W2785413268","https://openalex.org/W2841928204","https://openalex.org/W2773037341","https://openalex.org/W4288828701","https://openalex.org/W2618548686","https://openalex.org/W7125261189","https://openalex.org/W4410050946","https://openalex.org/W7207851759","https://openalex.org/W7214431864"],"abstract_inverted_index":{"During":[0],"the":[1,59,67,78,100,139],"past":[2],"decade":[3],"there":[4],"has":[5],"been":[6],"a":[7,31,48,71,115,127],"steady":[8],"increase":[9],"in":[10,42,47,99,129,138],"cyber":[11,118],"attacks":[12],"targeting":[13],"Critical":[14],"National":[15],"Infrastructure.":[16],"In":[17,106],"order":[18],"to":[19,44,134],"better":[20,135],"protect":[21],"against":[22],"an":[23,109],"ever-expanding":[24],"threat":[25],"landscape,":[26],"governments,":[27],"standards":[28],"bodies,":[29],"and":[30,53,96,121,143],"plethora":[32],"of":[33,62,80,111,141],"industry":[34],"experts":[35],"have":[36],"produced":[37],"relevant":[38],"guidance":[39,91,113],"for":[40],"operators":[41,87,137],"response":[43,120,142],"incidents.":[45],"However,":[46],"context":[49],"where":[50,86],"safety,":[51],"reliability,":[52],"availability":[54],"are":[55],"key,":[56],"combined":[57],"with":[58,114],"industrial":[60],"nature":[61],"operational":[63],"systems,":[64],"advice":[65],"on":[66,85,117],"right":[68],"practice":[69],"remains":[70],"challenge.":[72],"This":[73],"is":[74,123,132],"further":[75],"compounded":[76],"by":[77],"volume":[79],"available":[81],"guidance,":[82],"raising":[83],"questions":[84],"should":[88,93],"start,":[89],"which":[90],"set":[92],"be":[94,104],"followed,":[95],"how":[97],"confidence":[98],"adopted":[101],"approach":[102],"can":[103],"established.":[105],"this":[107],"paper,":[108],"analysis":[110],"existing":[112],"focus":[116],"incident":[119],"recovery":[122,144],"provided.":[124],"From":[125],"this,":[126],"work":[128],"progress":[130],"framework":[131],"posited,":[133],"support":[136],"development":[140],"operations.":[145]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":1}],"updated_date":"2026-10-16T09:59:22.235173","created_date":"2020-06-19T00:00:00"}