{"id":"https://openalex.org/W4387639120","doi":"https://doi.org/10.1007/s11235-023-01039-9","title":"RONSI: a framework for calculating return on network security investment","display_name":"RONSI: a framework for calculating return on network security investment","publication_year":2023,"publication_date":"2023-10-14","ids":{"openalex":"https://openalex.org/W4387639120","doi":"https://doi.org/10.1007/s11235-023-01039-9"},"language":"en","primary_location":{"id":"doi:10.1007/s11235-023-01039-9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11235-023-01039-9","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11235-023-01039-9.pdf","source":{"id":"https://openalex.org/S145894672","display_name":"Telecommunication Systems","issn_l":"1018-4864","issn":["1018-4864","1572-9451"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Telecommunication Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s11235-023-01039-9.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010619713","display_name":"Kousik Barik","orcid":"https://orcid.org/0000-0001-9296-9561"},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Kousik Barik","raw_affiliation_strings":["Department of Computer Science, University of Alcala, Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Alcala, Madrid, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064136287","display_name":"Sanjay Misra","orcid":"https://orcid.org/0000-0002-3556-9331"},"institutions":[{"id":"https://openalex.org/I3130438513","display_name":"Institute for Energy Technology","ror":"https://ror.org/02jqtg033","country_code":"NO","type":"facility","lineage":["https://openalex.org/I3130438513"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Sanjay Misra","raw_affiliation_strings":["Department of Applied Data Science, Institute for Energy Technology, Halden, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Data Science, Institute for Energy Technology, Halden, Norway","institution_ids":["https://openalex.org/I3130438513"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044499999","display_name":"Luis Fern\u00e1ndez Sanz","orcid":"https://orcid.org/0000-0003-0778-0073"},"institutions":[{"id":"https://openalex.org/I189268942","display_name":"Universidad de Alcal\u00e1","ror":"https://ror.org/04pmn0e78","country_code":"ES","type":"education","lineage":["https://openalex.org/I189268942"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luis Fernandez-Sanz","raw_affiliation_strings":["Department of Computer Science, University of Alcala, Madrid, Spain"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Alcala, Madrid, Spain","institution_ids":["https://openalex.org/I189268942"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082463863","display_name":"Murat Koyuncu","orcid":"https://orcid.org/0000-0003-1958-5945"},"institutions":[{"id":"https://openalex.org/I45542416","display_name":"Atilim University","ror":"https://ror.org/04pd3v454","country_code":"TR","type":"education","lineage":["https://openalex.org/I45542416"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Murat Koyuncu","raw_affiliation_strings":["Department of Information System Engineering, Atilim University, Ankara, Turkey"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information System Engineering, Atilim University, Ankara, Turkey","institution_ids":["https://openalex.org/I45542416"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5064136287"],"corresponding_institution_ids":["https://openalex.org/I3130438513"],"apc_list":{"value":2190,"currency":"EUR","value_usd":2790},"apc_paid":{"value":2190,"currency":"EUR","value_usd":2790},"fwci":1.7496,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.88380677,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":"84","issue":"4","first_page":"533","last_page":"548"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9891999959945679,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.9890000224113464,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7720731496810913},{"id":"https://openalex.org/keywords/dependability","display_name":"Dependability","score":0.6175486445426941},{"id":"https://openalex.org/keywords/credibility","display_name":"Credibility","score":0.6151578426361084},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5690813064575195},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5656706094741821},{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.5541391968727112},{"id":"https://openalex.org/keywords/revenue","display_name":"Revenue","score":0.5493766665458679},{"id":"https://openalex.org/keywords/return-on-investment","display_name":"Return on investment","score":0.5452977418899536},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.5423676371574402},{"id":"https://openalex.org/keywords/investment","display_name":"Investment (military)","score":0.4365174174308777},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.42154461145401},{"id":"https://openalex.org/keywords/finance","display_name":"Finance","score":0.16446733474731445},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.15899869799613953}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7720731496810913},{"id":"https://openalex.org/C77019957","wikidata":"https://www.wikidata.org/wiki/Q2689057","display_name":"Dependability","level":2,"score":0.6175486445426941},{"id":"https://openalex.org/C2780224610","wikidata":"https://www.wikidata.org/wiki/Q1530061","display_name":"Credibility","level":2,"score":0.6151578426361084},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5690813064575195},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5656706094741821},{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.5541391968727112},{"id":"https://openalex.org/C195487862","wikidata":"https://www.wikidata.org/wiki/Q850210","display_name":"Revenue","level":2,"score":0.5493766665458679},{"id":"https://openalex.org/C169549615","wikidata":"https://www.wikidata.org/wiki/Q939134","display_name":"Return on investment","level":3,"score":0.5452977418899536},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.5423676371574402},{"id":"https://openalex.org/C27548731","wikidata":"https://www.wikidata.org/wiki/Q88272","display_name":"Investment (military)","level":3,"score":0.4365174174308777},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.42154461145401},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.16446733474731445},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.15899869799613953},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C94625758","wikidata":"https://www.wikidata.org/wiki/Q7163","display_name":"Politics","level":2,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.0},{"id":"https://openalex.org/C36289849","wikidata":"https://www.wikidata.org/wiki/Q34749","display_name":"Social science","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s11235-023-01039-9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11235-023-01039-9","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11235-023-01039-9.pdf","source":{"id":"https://openalex.org/S145894672","display_name":"Telecommunication Systems","issn_l":"1018-4864","issn":["1018-4864","1572-9451"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Telecommunication Systems","raw_type":"journal-article"},{"id":"pmh:oai:RePEc:spr:telsys:v:84:y:2023:i:4:d:10.1007_s11235-023-01039-9","is_oa":false,"landing_page_url":"http://link.springer.com/10.1007/s11235-023-01039-9","pdf_url":null,"source":{"id":"https://openalex.org/S4306401271","display_name":"RePEc: Research Papers in Economics","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I77793887","host_organization_name":"Federal Reserve Bank of St. Louis","host_organization_lineage":["https://openalex.org/I77793887"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"article"},{"id":"pmh:oai:ife.brage.unit.no:11250/3100778","is_oa":true,"landing_page_url":"https://hdl.handle.net/11250/3100778","pdf_url":null,"source":{"id":"https://openalex.org/S4306401716","display_name":"Duo Research Archive (University of Oslo)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I184942183","host_organization_name":"University of Oslo","host_organization_lineage":["https://openalex.org/I184942183"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"16","raw_type":"info:eu-repo/semantics/other"}],"best_oa_location":{"id":"doi:10.1007/s11235-023-01039-9","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s11235-023-01039-9","pdf_url":"https://link.springer.com/content/pdf/10.1007/s11235-023-01039-9.pdf","source":{"id":"https://openalex.org/S145894672","display_name":"Telecommunication Systems","issn_l":"1018-4864","issn":["1018-4864","1572-9451"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Telecommunication Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6100000143051147}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4387639120.pdf"},"referenced_works_count":44,"referenced_works":["https://openalex.org/W183366406","https://openalex.org/W1510883717","https://openalex.org/W1925725102","https://openalex.org/W1969723516","https://openalex.org/W1990600682","https://openalex.org/W2015782999","https://openalex.org/W2022597053","https://openalex.org/W2091269090","https://openalex.org/W2098352249","https://openalex.org/W2106188980","https://openalex.org/W2149439200","https://openalex.org/W2156799558","https://openalex.org/W2158467476","https://openalex.org/W2165836036","https://openalex.org/W2492406775","https://openalex.org/W2603276831","https://openalex.org/W2775051124","https://openalex.org/W2789212490","https://openalex.org/W2791923185","https://openalex.org/W2808102949","https://openalex.org/W2906922264","https://openalex.org/W2906939659","https://openalex.org/W2911340629","https://openalex.org/W2914695944","https://openalex.org/W2948780215","https://openalex.org/W2997258927","https://openalex.org/W3005216181","https://openalex.org/W3035348777","https://openalex.org/W3107765100","https://openalex.org/W3132384038","https://openalex.org/W3139125570","https://openalex.org/W3173450473","https://openalex.org/W3195899111","https://openalex.org/W3214765838","https://openalex.org/W4214530344","https://openalex.org/W4220762966","https://openalex.org/W4237112997","https://openalex.org/W4242687114","https://openalex.org/W4280612877","https://openalex.org/W4309775988","https://openalex.org/W4312064882","https://openalex.org/W4313461590","https://openalex.org/W6665773264","https://openalex.org/W6679056614"],"related_works":["https://openalex.org/W2169628522","https://openalex.org/W4252527915","https://openalex.org/W2409287660","https://openalex.org/W2233357156","https://openalex.org/W1976489385","https://openalex.org/W4256317220","https://openalex.org/W1506225852","https://openalex.org/W2141414364","https://openalex.org/W2376514150","https://openalex.org/W1523265213"],"abstract_inverted_index":{"Abstract":[0],"This":[1],"competitive":[2],"environment":[3],"is":[4,97,118,136],"rapidly":[5],"driving":[6],"technological":[7],"modernization.":[8],"Sophisticated":[9],"cyber":[10],"security":[11,25,130],"attacks":[12],"are":[13],"expanding":[14],"exponentially,":[15],"inflicting":[16],"reputation":[17],"damage":[18],"and":[19,21,106,132,154],"financial":[20],"economic":[22],"loss.":[23],"Since":[24],"investments":[26,146],"may":[27],"take":[28],"time":[29,36],"to":[30,37,41,56,92,108,120],"generate":[31],"revenues,":[32],"organizations":[33],"need":[34,55],"more":[35],"convince":[38],"top":[39],"management":[40],"support":[42],"them.":[43],"Even":[44],"though":[45],"several":[46],"ROSI":[47],"techniques":[48],"have":[49],"been":[50],"put":[51],"out,":[52],"they":[53],"still":[54],"address":[57],"network-related":[58,148],"infrastructure.":[59],"By":[60],"addressing":[61],"gaps":[62],"in":[63,147,156],"existing":[64,109,139],"techniques,":[65],"this":[66],"study":[67],"delivers":[68],"a":[69,84,129],"comprehensive":[70],"framework":[71,82],"for":[72],"calculating":[73],"Return":[74],"on":[75,89],"Network":[76],"Security":[77,102],"Investment":[78],"(RONSI).":[79],"The":[80,111],"proposed":[81,124,134],"uses":[83],"statistical":[85],"prediction":[86],"model":[87,126,135],"based":[88],"Bayes\u2019":[90],"theorem":[91],"calculate":[93],"the":[94,115,123,133,157],"RONSI.":[95],"It":[96],"validated":[98],"by":[99],"Common":[100],"Vulnerability":[101],"Systems":[103],"(CVSS)":[104],"datasets":[105],"compared":[107,137],"studies.":[110,140],"results":[112],"demonstrate":[113],"that":[114],"annual":[116],"loss":[117],"reduced":[119],"75%":[121],"with":[122,138],"RONSI":[125],"after":[127],"implementing":[128],"strategy,":[131],"An":[141],"organization":[142],"can":[143],"effectively":[144],"justify":[145],"infrastructure":[149],"while":[150],"enhancing":[151],"its":[152],"credibility":[153],"dependability":[155],"cutthroat":[158],"marketplace.":[159]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}