{"id":"https://openalex.org/W4244537565","doi":"https://doi.org/10.5815/ijcnis.2022.01.03","title":"A Bayesian Attack-Network Modeling Approach to Mitigating Malware-Based Banking Cyberattacks","display_name":"A Bayesian Attack-Network Modeling Approach to Mitigating Malware-Based Banking Cyberattacks","publication_year":2021,"publication_date":"2021-02-08","ids":{"openalex":"https://openalex.org/W4244537565","doi":"https://doi.org/10.5815/ijcnis.2022.01.03"},"language":"en","primary_location":{"id":"doi:10.5815/ijcnis.2022.01.03","doi":"https://doi.org/10.5815/ijcnis.2022.01.03","is_oa":true,"landing_page_url":"https://doi.org/10.5815/ijcnis.2022.01.03","pdf_url":"http://www.mecs-press.org/ijcnis/ijcnis-v14-n1/IJCNIS-V14-N1-3.pdf","source":{"id":"https://openalex.org/S2501737937","display_name":"International Journal of Computer Network and Information Security","issn_l":"2074-9090","issn":["2074-9090","2074-9104"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computer Network and Information Security","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"http://www.mecs-press.org/ijcnis/ijcnis-v14-n1/IJCNIS-V14-N1-3.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069225628","display_name":"Aaron Zimba","orcid":"https://orcid.org/0000-0002-2587-106X","observed_orcids":["https://orcid.org/0000-0002-2587-106X"]},"institutions":[{"id":"https://openalex.org/I3132976927","display_name":"Mulungushi University","ror":"https://ror.org/02vmcxs72","country_code":"ZM","type":"education","lineage":["https://openalex.org/I3132976927"]}],"countries":["ZM"],"is_corresponding":true,"raw_author_name":"Aaron Zimba","raw_affiliation_strings":["Department of Computer Science and Information Technology, Mulungushi University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Technology, Mulungushi University","institution_ids":["https://openalex.org/I3132976927"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5069225628"],"corresponding_institution_ids":["https://openalex.org/I3132976927"],"apc_list":null,"apc_paid":null,"fwci":2.5616,"has_fulltext":true,"cited_by_count":26,"citation_normalized_percentile":{"value":0.9000778,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":88,"max":99},"biblio":{"volume":"14","issue":"1","first_page":"25","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8320000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8320000171661377,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.06639999896287918,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.04500000178813934,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/botnets","display_name":"botnets","score":0.6079999804496765},{"id":"https://openalex.org/keywords/phishing-emails","display_name":"phishing emails","score":0.8130000233650208},{"id":"https://openalex.org/keywords/cve","display_name":"CVE","score":0.8980000019073486},{"id":"https://openalex.org/keywords/financial-cybercrime","display_name":"financial cybercrime","score":0.7419999837875366},{"id":"https://openalex.org/keywords/attack-mitigation","display_name":"attack mitigation","score":0.6389999985694885},{"id":"https://openalex.org/keywords/conditional-probability","display_name":"conditional probability","score":0.5320000052452087},{"id":"https://openalex.org/keywords/node-degree","display_name":"node degree","score":0.5569999814033508},{"id":"https://openalex.org/keywords/exploitability","display_name":"exploitability","score":0.5170000195503235}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8739577531814575},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.8211739659309387},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7718784213066101},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6530854105949402},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.6388304233551025},{"id":"https://openalex.org/C200594392","wikidata":"https://www.wikidata.org/wiki/Q812529","display_name":"Bayesian game","level":4,"score":0.5812726616859436},{"id":"https://openalex.org/C2779390178","wikidata":"https://www.wikidata.org/wiki/Q29137","display_name":"Cybercrime","level":3,"score":0.5644311904907227},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4510851800441742},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4473895728588104},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2802017033100128},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.17026928067207336},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.1275695562362671},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C202556891","wikidata":"https://www.wikidata.org/wiki/Q1584646","display_name":"Repeated game","level":3,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.5815/ijcnis.2022.01.03","doi":"https://doi.org/10.5815/ijcnis.2022.01.03","is_oa":true,"landing_page_url":"https://doi.org/10.5815/ijcnis.2022.01.03","pdf_url":"http://www.mecs-press.org/ijcnis/ijcnis-v14-n1/IJCNIS-V14-N1-3.pdf","source":{"id":"https://openalex.org/S2501737937","display_name":"International Journal of Computer Network and Information Security","issn_l":"2074-9090","issn":["2074-9090","2074-9104"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computer Network and Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.5815/ijcnis.2022.01.03","doi":"https://doi.org/10.5815/ijcnis.2022.01.03","is_oa":true,"landing_page_url":"https://doi.org/10.5815/ijcnis.2022.01.03","pdf_url":"http://www.mecs-press.org/ijcnis/ijcnis-v14-n1/IJCNIS-V14-N1-3.pdf","source":{"id":"https://openalex.org/S2501737937","display_name":"International Journal of Computer Network and Information Security","issn_l":"2074-9090","issn":["2074-9090","2074-9104"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","poland-20","russia-white-list-2"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computer Network and Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4244537565.pdf","grobid_xml":"https://content.openalex.org/works/W4244537565.grobid-xml"},"referenced_works_count":43,"referenced_works":["https://openalex.org/W201786483","https://openalex.org/W403078489","https://openalex.org/W1521523431","https://openalex.org/W1977415353","https://openalex.org/W2009229808","https://openalex.org/W2018358859","https://openalex.org/W2066689719","https://openalex.org/W2067930537","https://openalex.org/W2112338095","https://openalex.org/W2129922376","https://openalex.org/W2156808008","https://openalex.org/W2158327591","https://openalex.org/W2257752426","https://openalex.org/W2287116719","https://openalex.org/W2292109892","https://openalex.org/W2295110967","https://openalex.org/W2485673576","https://openalex.org/W2546296060","https://openalex.org/W2577177274","https://openalex.org/W2602767565","https://openalex.org/W2762258958","https://openalex.org/W2765732179","https://openalex.org/W2768949220","https://openalex.org/W2784007581","https://openalex.org/W2883464778","https://openalex.org/W2915601373","https://openalex.org/W2921434519","https://openalex.org/W2946060609","https://openalex.org/W2946392683","https://openalex.org/W2966207595","https://openalex.org/W2979424058","https://openalex.org/W3007340300","https://openalex.org/W3016127024","https://openalex.org/W3038106507","https://openalex.org/W3046554645","https://openalex.org/W3061562950","https://openalex.org/W3095581948","https://openalex.org/W3103677769","https://openalex.org/W4237130931","https://openalex.org/W4244859338","https://openalex.org/W4253713475","https://openalex.org/W4391553409","https://openalex.org/W7037128325"],"related_works":["https://openalex.org/W2783206460","https://openalex.org/W4414256619","https://openalex.org/W2995773759","https://openalex.org/W6892408020","https://openalex.org/W2021517433","https://openalex.org/W2053944475","https://openalex.org/W4388347360","https://openalex.org/W4328053026","https://openalex.org/W2798600991","https://openalex.org/W6963049948"],"abstract_inverted_index":{"According":[0],"to":[1,7,11,39,41,149,174,182,187],"Cybersecurity":[2],"Ventures,":[3],"the":[4,21,31,36,43,54,70,84,94,104,150,183,188,206,213,220,224,229],"damage":[5],"related":[6],"cybercrime":[8],"is":[9,53,210,217],"projected":[10],"reach":[12,42],"$6":[13],"trillion":[14],"annually":[15],"by":[16,90],"2021.":[17],"The":[18,113],"majority":[19],"of":[20,33,69,81,108,116,122,197,223],"cyberattacks":[22,82],"are":[23,88,119,128,142,167,172,203],"directed":[24],"at":[25,61],"financial":[26,65,85,123,126],"institutions":[27],"as":[28,102,158,160,180],"this":[29,72,111,117],"reduces":[30],"number":[32],"intermediaries":[34],"that":[35,51,87,145,178,216,227],"attacker":[37],"needs":[38],"attack":[40,56,199],"target":[44],"-":[45],"monetary":[46],"proceeds.":[47],"Research":[48],"has":[49],"shown":[50],"malware":[52,97,109,118],"preferred":[55],"vector":[57],"in":[58,83,110,169,205],"cybercrimes":[59],"targeted":[60],"banks":[62],"and":[63,137,163],"other":[64],"institutions.":[66],"In":[67,153],"light":[68],"above,":[71],"paper":[73],"presents":[74],"a":[75],"Bayesian":[76],"Attack":[77],"Network":[78],"modeling":[79,184],"technique":[80],"sector":[86],"perpetuated":[89],"crimeware.":[91],"We":[92],"use":[93,100],"GameOver":[95],"Zeus":[96],"for":[98],"our":[99,154,191],"cases":[101],"it\u2019s":[103],"most":[105],"common":[106],"type":[107],"domain.":[112],"primary":[114],"targets":[115],"any":[120],"users":[121],"services.":[124],"Today,":[125],"services":[127],"accessed":[129],"using":[130],"personal":[131],"laptops,":[132],"institutional":[133],"computers,":[134],"mobile":[135],"phones":[136],"tablets,":[138],"etc.":[139],"All":[140],"these":[141],"potential":[143],"victims":[144],"can":[146],"be":[147],"enlisted":[148],"malware\u2019s":[151],"botnet.":[152],"approach,":[155],"phishing":[156],"emails":[157],"well":[159],"Common":[161],"Vulnerabilities":[162],"Exposures":[164],"(CVEs)":[165],"which":[166],"exhibited":[168],"various":[170,198],"systems":[171],"employed":[173],"derive":[175],"conditional":[176],"probabilities":[177],"serve":[179],"inputs":[181],"technique.":[185],"Compared":[186],"state-of-the-art":[189],"approaches,":[190],"method":[192],"generates":[193],"probability":[194,230],"density":[195,231],"curves":[196],"structures":[200],"whose":[201],"semantics":[202],"applied":[204],"mitigation":[207],"process.":[208],"This":[209],"based":[211],"on":[212],"level":[214],"exploitability":[215],"deduced":[218],"from":[219],"vertex":[221],"degrees":[222],"compromised":[225],"nodes":[226],"characterizes":[228],"curves.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":9},{"year":2024,"cited_by_count":9},{"year":2023,"cited_by_count":6},{"year":2022,"cited_by_count":1}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2022-05-12T00:00:00"}