{"id":"https://openalex.org/W7225418604","doi":"https://doi.org/10.1016/j.epsr.2026.114488","title":"Optimal deployment of third-party cybersecurity tools for reducing risk in operational technology environments: A power plant use-case","display_name":"Optimal deployment of third-party cybersecurity tools for reducing risk in operational technology environments: A power plant use-case","publication_year":2026,"publication_date":"2026-11-07","ids":{"openalex":"https://openalex.org/W7225418604","doi":"https://doi.org/10.1016/j.epsr.2026.114488"},"language":"en","primary_location":{"id":"doi:10.1016/j.epsr.2026.114488","doi":"https://doi.org/10.1016/j.epsr.2026.114488","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.epsr.2026.114488","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0378779626017694/pdf","source":{"id":"https://openalex.org/S151498627","display_name":"Electric Power Systems Research","issn_l":"0378-7796","issn":["0378-7796","1873-2046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","dongbi-c","jufo-2","ki-jl-1","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electric Power Systems Research","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://www.sciencedirect.com/science/article/pii/S0378779626017694/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5078021776","display_name":"Giovanni Battista Gaggero","orcid":"https://orcid.org/0000-0001-6404-2451","observed_orcids":["https://orcid.org/0000-0001-6404-2451"]},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":true,"raw_author_name":"Giovanni Battista Gaggero","raw_affiliation_strings":["Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy"],"raw_orcid":"https://orcid.org/0000-0001-6404-2451","affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017443119","display_name":"Paola Girdinio","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Paola Girdinio","raw_affiliation_strings":["Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5105455325","display_name":"Marchese Mario","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I83816512","display_name":"University of Genoa","ror":"https://ror.org/0107c5v14","country_code":"IT","type":"education","lineage":["https://openalex.org/I83816512"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Mario Marchese","raw_affiliation_strings":["Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical, Electronic and Telecommunications Engineering, and Naval Architecture (DITEN), University of Genoa, Via all\u2019Opera Pia 11A, 16145, Genoa, Italy","institution_ids":["https://openalex.org/I83816512"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5078021776"],"corresponding_institution_ids":["https://openalex.org/I83816512"],"apc_list":{"value":2810,"currency":"USD","value_usd":2810},"apc_paid":{"value":2810,"currency":"USD","value_usd":2810},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"265","issue":null,"first_page":"114488","last_page":"114488"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.823199987411499,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.823199987411499,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.17000000178813934,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.00139999995008111,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/operational-technology-cybersecurity","display_name":"operational technology cybersecurity","score":0.9739999771118164},{"id":"https://openalex.org/keywords/power-plants","display_name":"power plants","score":0.6970000267028809},{"id":"https://openalex.org/keywords/portfolio-optimization","display_name":"portfolio optimization","score":0.9110000133514404},{"id":"https://openalex.org/keywords/diminishing-returns","display_name":"diminishing returns","score":0.7020000219345093},{"id":"https://openalex.org/keywords/attack-probability","display_name":"attack probability","score":0.5139999985694885},{"id":"https://openalex.org/keywords/production-losses","display_name":"production losses","score":0.9539999961853027},{"id":"https://openalex.org/keywords/risk-reduction","display_name":"risk mitigation","score":0.7580000162124634}],"concepts":[{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.863099992275238},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4964999854564667},{"id":"https://openalex.org/C4311470","wikidata":"https://www.wikidata.org/wiki/Q159719","display_name":"Power station","level":2,"score":0.4860999882221222},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.42089998722076416},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.41530001163482666},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.41179999709129333},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3970000147819519},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.3869999945163727},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3813000023365021},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.27410000562667847},{"id":"https://openalex.org/C11489865","wikidata":"https://www.wikidata.org/wiki/Q944806","display_name":"Operational risk","level":3,"score":0.27219998836517334},{"id":"https://openalex.org/C89227174","wikidata":"https://www.wikidata.org/wiki/Q2388981","display_name":"Electric power system","level":3,"score":0.25440001487731934},{"id":"https://openalex.org/C12174686","wikidata":"https://www.wikidata.org/wiki/Q1058438","display_name":"Risk assessment","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.epsr.2026.114488","doi":"https://doi.org/10.1016/j.epsr.2026.114488","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.epsr.2026.114488","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0378779626017694/pdf","source":{"id":"https://openalex.org/S151498627","display_name":"Electric Power Systems Research","issn_l":"0378-7796","issn":["0378-7796","1873-2046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","dongbi-c","jufo-2","ki-jl-1","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electric Power Systems Research","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.epsr.2026.114488","doi":"https://doi.org/10.1016/j.epsr.2026.114488","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.epsr.2026.114488","pdf_url":"https://www.sciencedirect.com/science/article/pii/S0378779626017694/pdf","source":{"id":"https://openalex.org/S151498627","display_name":"Electric Power Systems Research","issn_l":"0378-7796","issn":["0378-7796","1873-2046"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-scientific","cwts-core","dongbi-c","jufo-2","ki-jl-1","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Electric Power Systems Research","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.6773999929428101,"id":"https://metadata.un.org/sdg/9"}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320324632","display_name":"Ministero dello Sviluppo Economico","ror":"https://ror.org/011z3ff80"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225418604.pdf","grobid_xml":"https://content.openalex.org/works/W7225418604.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2321407374","https://openalex.org/W2768651693","https://openalex.org/W3021252296","https://openalex.org/W3023019431","https://openalex.org/W3110983522","https://openalex.org/W3118102518","https://openalex.org/W3129524550","https://openalex.org/W3161260464","https://openalex.org/W3215906478","https://openalex.org/W4312722626","https://openalex.org/W4313049033","https://openalex.org/W4391649861","https://openalex.org/W4404788257","https://openalex.org/W4407133112","https://openalex.org/W4415324928","https://openalex.org/W7162073592"],"related_works":["https://openalex.org/W7164633588","https://openalex.org/W2548441032","https://openalex.org/W4214895821","https://openalex.org/W7140074387","https://openalex.org/W7060817432","https://openalex.org/W3098856101","https://openalex.org/W2168711010","https://openalex.org/W7027682746","https://openalex.org/W3012556706","https://openalex.org/W1881322010"],"abstract_inverted_index":{"Operational":[0],"Technology":[1],"(OT)":[2],"cybersecurity":[3,35],"in":[4],"power":[5,93],"plants":[6],"increasingly":[7],"relies":[8],"on":[9,90,100],"third-party":[10],"monitoring":[11],"and":[12,18,37,51,60,79,104,107,127,142],"protection":[13,58],"tools,":[14],"whose":[15],"effectiveness,":[16],"cost,":[17],"operational":[19],"impact":[20],"are":[21,65],"often":[22],"difficult":[23],"to":[24,85,134],"compare.":[25],"This":[26],"paper":[27],"proposes":[28],"a":[29,91,128],"framework":[30,68],"that":[31],"minimizes":[32],"expected":[33],"annual":[34],"expenditure":[36],"cyberattack-induced":[38],"production":[39],"loss.":[40],"Its":[41],"methodological":[42],"contribution":[43],"is":[44],"the":[45,71,80,136],"joint":[46],"formulation":[47],"of":[48],"portfolio":[49,97],"selection":[50],"marginal":[52],"investment":[53,118],"justification,":[54],"accounting":[55],"for":[56,111],"overlapping":[57],"benefits":[59],"diminishing":[61],"returns":[62],"as":[63],"tools":[64],"added.":[66],"The":[67],"identifies":[69],"both":[70],"preferred":[72],"tool":[73],"combination":[74],"under":[75],"assumed":[76],"effectiveness":[77],"levels":[78],"additional":[81],"risk":[82],"reduction":[83],"required":[84],"justify":[86],"each":[87],"investment.":[88],"Simulations":[89],"representative":[92],"plant":[94],"examine":[95],"how":[96],"choices":[98],"depend":[99],"baseline":[101],"attack":[102],"probability":[103],"disruption":[105],"costs,":[106],"identify":[108],"break-even":[109],"conditions":[110],"sequential":[112],"implementation.":[113],"These":[114],"outputs":[115],"support":[116],"plant-specific":[117],"decisions":[119],"rather":[120],"than":[121],"universal":[122],"deployment":[123],"recommendations.":[124],"Open-source":[125],"code":[126],"graphical":[129],"user":[130],"interface":[131],"enable":[132],"practitioners":[133],"repeat":[135],"analysis":[137],"using":[138],"their":[139],"own":[140],"technical":[141],"economic":[143],"assumptions.":[144]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-07T00:00:00"}
