{"id":"https://openalex.org/W6659698","doi":null,"title":"Leaking confidential information by non-malicious user behavior in Enterprise Systems - an empirical study","display_name":"Leaking confidential information by non-malicious user behavior in Enterprise Systems - an empirical study","publication_year":2011,"publication_date":"2011-01-01","ids":{"openalex":"https://openalex.org/W6659698","mag":"6659698"},"language":"en","primary_location":{"id":"pmh:oai:ub-madoc.bib.uni-mannheim.de:3172","doi":null,"is_oa":true,"landing_page_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","pdf_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","source":{"id":"https://openalex.org/S4377196315","display_name":"MADOC (University of Mannheim)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I177802217","host_organization_name":"University of Mannheim","host_organization_lineage":["https://openalex.org/I177802217"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Arbeitspapier"},"volume":null,"type":"report","is_traditional":false,"indexed_in":[],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047618780","display_name":"Frank Hadasch","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I177802217","display_name":"University of Mannheim","ror":"https://ror.org/031bsb921","country_code":"DE","type":"education","lineage":["https://openalex.org/I177802217"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Frank Hadasch","raw_affiliation_strings":["University of Mannheim, Mannheim, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Mannheim, Mannheim, Germany","institution_ids":["https://openalex.org/I177802217"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080792995","display_name":"Alexander Maedche","orcid":"https://orcid.org/0000-0001-6546-4816","observed_orcids":["https://orcid.org/0000-0001-6546-4816"]},"institutions":[{"id":"https://openalex.org/I177802217","display_name":"University of Mannheim","ror":"https://ror.org/031bsb921","country_code":"DE","type":"education","lineage":["https://openalex.org/I177802217"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Alexander Maedche","raw_affiliation_strings":["University of Mannheim"],"raw_orcid":"https://orcid.org/0000-0001-6546-4816","affiliations":[{"raw_affiliation_string":"University of Mannheim","institution_ids":["https://openalex.org/I177802217"]}]},{"author_position":"last","author":{"id":null,"display_name":"Benjamin M\u00fcller","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I177802217","display_name":"University of Mannheim","ror":"https://ror.org/031bsb921","country_code":"DE","type":"education","lineage":["https://openalex.org/I177802217"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Benjamin M\u00fcller","raw_affiliation_strings":["Univ Mannheim, University of Mannheim"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Univ Mannheim, University of Mannheim","institution_ids":["https://openalex.org/I177802217"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I177802217"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11045","display_name":"Privacy, Security, and Data Protection","score":0.0020000000949949026,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/information-leakage","display_name":"information leakage","score":0.9459999799728394},{"id":"https://openalex.org/keywords/confidential-information","display_name":"confidential information","score":0.7599999904632568},{"id":"https://openalex.org/keywords/enterprise-systems","display_name":"enterprise systems","score":0.8610000014305115},{"id":"https://openalex.org/keywords/information-security","display_name":"information security","score":0.5239999890327454},{"id":"https://openalex.org/keywords/security-breaches","display_name":"security breaches","score":0.7680000066757202},{"id":"https://openalex.org/keywords/information-flow","display_name":"information flow","score":0.6200000047683716},{"id":"https://openalex.org/keywords/user-behavior","display_name":"user behavior","score":0.5600000023841858},{"id":"https://openalex.org/keywords/information-asset-protection","display_name":"information asset protection","score":0.5379999876022339},{"id":"https://openalex.org/keywords/security-management","display_name":"security management","score":0.32499998807907104}],"concepts":[{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.7478901147842407},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.7352690100669861},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6742892861366272},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.6463878154754639},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5623384714126587},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.549751341342926},{"id":"https://openalex.org/C180198813","wikidata":"https://www.wikidata.org/wiki/Q121182","display_name":"Information system","level":2,"score":0.4883091449737549},{"id":"https://openalex.org/C148976360","wikidata":"https://www.wikidata.org/wiki/Q1662500","display_name":"Information security management","level":5,"score":0.4750775694847107},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.44844892621040344},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.4416099786758423},{"id":"https://openalex.org/C2777042071","wikidata":"https://www.wikidata.org/wiki/Q6509304","display_name":"Leakage (economics)","level":2,"score":0.42404696345329285},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.19460657238960266},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.11824482679367065},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.09938138723373413},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:ub-madoc.bib.uni-mannheim.de:3172","doi":null,"is_oa":true,"landing_page_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","pdf_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","source":{"id":"https://openalex.org/S4377196315","display_name":"MADOC (University of Mannheim)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I177802217","host_organization_name":"University of Mannheim","host_organization_lineage":["https://openalex.org/I177802217"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Arbeitspapier"},{"id":"pmh:oai:MAUB:3172","doi":null,"is_oa":false,"landing_page_url":"http://madoc.bib.uni-mannheim.de/madoc/volltexte/2011/3172/","pdf_url":null,"source":{"id":"https://openalex.org/S4377196315","display_name":"MADOC (University of Mannheim)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I177802217","host_organization_name":"University of Mannheim","host_organization_lineage":["https://openalex.org/I177802217"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Institute for Enterprise Systems: InES Working Papers ; No. 001","raw_type":"ResearchPaper"},{"id":"mag:6659698","doi":null,"is_oa":false,"landing_page_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","pdf_url":null,"source":{"id":"https://openalex.org/S4306420505","display_name":"Mediterranean Conference on Information Systems","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":"Mediterranean Conference on Information Systems","raw_type":null}],"best_oa_location":{"id":"pmh:oai:ub-madoc.bib.uni-mannheim.de:3172","doi":null,"is_oa":true,"landing_page_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","pdf_url":"https://ub-madoc.bib.uni-mannheim.de/3172/1/InES_Working_Paper_No1.pdf_1.pdf","source":{"id":"https://openalex.org/S4377196315","display_name":"MADOC (University of Mannheim)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I177802217","host_organization_name":"University of Mannheim","host_organization_lineage":["https://openalex.org/I177802217"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Arbeitspapier"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W6659698.pdf","grobid_xml":"https://content.openalex.org/works/W6659698.grobid-xml"},"referenced_works_count":41,"referenced_works":["https://openalex.org/W117432202","https://openalex.org/W1489771250","https://openalex.org/W1524237663","https://openalex.org/W1536398137","https://openalex.org/W1537923806","https://openalex.org/W1545612752","https://openalex.org/W1550000763","https://openalex.org/W1559498407","https://openalex.org/W1563631419","https://openalex.org/W1598226182","https://openalex.org/W1602619638","https://openalex.org/W1863383349","https://openalex.org/W1863670505","https://openalex.org/W1881586696","https://openalex.org/W1968488071","https://openalex.org/W1979074206","https://openalex.org/W1982981577","https://openalex.org/W1993418651","https://openalex.org/W1997893140","https://openalex.org/W2006553501","https://openalex.org/W2009784329","https://openalex.org/W2010902645","https://openalex.org/W2012352432","https://openalex.org/W2020989719","https://openalex.org/W2055847123","https://openalex.org/W2056075452","https://openalex.org/W2067261320","https://openalex.org/W2072047708","https://openalex.org/W2094873755","https://openalex.org/W2098925541","https://openalex.org/W2099647042","https://openalex.org/W2105992541","https://openalex.org/W2107966619","https://openalex.org/W2125636031","https://openalex.org/W2129100925","https://openalex.org/W2135692804","https://openalex.org/W2140649679","https://openalex.org/W2145071552","https://openalex.org/W2148277253","https://openalex.org/W2156565637","https://openalex.org/W3146559281"],"related_works":["https://openalex.org/W2581769386","https://openalex.org/W7057812062","https://openalex.org/W2586673189","https://openalex.org/W2277915225","https://openalex.org/W2228114086","https://openalex.org/W3208673202","https://openalex.org/W1972074093","https://openalex.org/W7070877785","https://openalex.org/W192389052","https://openalex.org/W3194731525"],"abstract_inverted_index":{"Information":[0],"assets":[1],"of":[2,37,53,97,166],"enterprises":[3],"are":[4,59,136,158],"vulnerable":[5],"to":[6,10,13,17,22,27,61,86,95,147,160],"theft":[7],"and":[8,91,133,151],"need":[9],"be":[11,117,131],"protected":[12],"avoid":[14],"information":[15,25,30,63,70,168],"leakage":[16,96,169],"unauthorized":[18],"parties.":[19],"Technical":[20],"countermeasures":[21],"protect":[23],"confidential":[24,98,167],"fall":[26],"short,":[28],"as":[29],"leaks":[31],"can":[32],"emerge":[33],"from":[34,138],"non-malicious":[35,172],"behavior":[36,174],"users":[38,58],"while":[39],"they":[40],"execute":[41],"a":[42,65,82],"business":[43],"process":[44],"in":[45,56,64,105,123,175],"an":[46,73],"Enterprise":[47,121,176],"System.":[48],"Our":[49],"study":[50],"investigates":[51],"characteristics":[52],"security":[54,118,128],"incidents":[55],"which":[57],"authorized":[60],"access":[62],"secure":[66],"domain,":[67],"but":[68],"cause":[69],"flow":[71],"into":[72,163],"unsecure":[74],"domain":[75],"without":[76],"any":[77],"malicious":[78],"objectives.":[79],"We":[80,100,141],"use":[81],"qualitative":[83],"research":[84],"method":[85],"explore":[87],"the":[88,112,124,143,149,153,164],"context,":[89],"activities,":[90],"behaviors":[92],"that":[93],"lead":[94],"information.":[99],"will":[101,116,130],"collect":[102],"empirical":[103],"data":[104,150],"three":[106],"sequential":[107],"phases":[108],"with":[109],"interviews.":[110],"In":[111],"first":[113],"phase":[114,126],"informants":[115],"consultants":[119],"for":[120],"Systems,":[122],"second":[125],"company\u2019s":[127],"managers":[129],"interviewed":[132],"finally":[134],"narratives":[135],"collected":[137],"end":[139],"users.":[140],"employ":[142],"grounded":[144],"theory":[145],"approach":[146],"analyze":[148],"formulate":[152],"theoretical":[154],"framework.":[155],"The":[156],"findings":[157],"expected":[159],"provide":[161],"insights":[162],"sources":[165],"caused":[170],"by":[171],"user":[173],"Systems.":[177]},"counts_by_year":[{"year":2015,"cited_by_count":1}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2016-06-24T00:00:00"}