{"id":"https://openalex.org/W3136068743","doi":"https://doi.org/10.1016/s1353-4858(21)00030-1","title":"Locking the door: tackling credential abuse","display_name":"Locking the door: tackling credential abuse","publication_year":2021,"publication_date":"2021-03-01","ids":{"openalex":"https://openalex.org/W3136068743","doi":"https://doi.org/10.1016/s1353-4858(21)00030-1","mag":"3136068743"},"language":"en","primary_location":{"id":"doi:10.1016/s1353-4858(21)00030-1","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(21)00030-1","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5001630533","display_name":"Steve Mansfield-Devine","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Steve Mansfield-Devine","raw_affiliation_strings":["Network Security"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Network Security","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5001630533"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2772,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.5764634,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":95},"biblio":{"volume":"2021","issue":"3","first_page":"11","last_page":"19"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.37700000405311584,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.37700000405311584,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.9679615497589111},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7950435876846313},{"id":"https://openalex.org/keywords/login","display_name":"Login","score":0.6511525511741638},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6243355870246887},{"id":"https://openalex.org/keywords/authentication","display_name":"Authentication (law)","score":0.5695195198059082},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.5616229176521301},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.47700193524360657},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.4572134017944336},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.42675453424453735},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.19395655393600464},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.07029882073402405}],"concepts":[{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.9679615497589111},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7950435876846313},{"id":"https://openalex.org/C113324615","wikidata":"https://www.wikidata.org/wiki/Q472302","display_name":"Login","level":2,"score":0.6511525511741638},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6243355870246887},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.5695195198059082},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.5616229176521301},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.47700193524360657},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.4572134017944336},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.42675453424453735},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.19395655393600464},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.07029882073402405},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/s1353-4858(21)00030-1","is_oa":false,"landing_page_url":"https://doi.org/10.1016/s1353-4858(21)00030-1","pdf_url":null,"source":{"id":"https://openalex.org/S2764863393","display_name":"Network Security","issn_l":"1353-4858","issn":["1353-4858","1872-9371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network Security","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7699999809265137,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":1,"referenced_works":["https://openalex.org/W3130836184"],"related_works":["https://openalex.org/W3115858616","https://openalex.org/W3133110380","https://openalex.org/W4286503810","https://openalex.org/W2743583101","https://openalex.org/W1510924149","https://openalex.org/W1518661087","https://openalex.org/W135845551","https://openalex.org/W2296164951","https://openalex.org/W2208585264","https://openalex.org/W4288057702"],"abstract_inverted_index":{"Credential":[0,65],"abuse":[1,52,66,99],"is":[2,62,67,94],"a":[3,68,136],"major":[4,69],"issue":[5,70,133],"facing":[6,71],"organisations":[7,72],"of":[8,31,33,50,73,116,139],"all":[9,74,115],"sizes.":[10,75],"It":[11],"affects":[12],"not":[13],"only":[14],"simple":[15],"login":[16],"processes":[17],"but":[18],"also":[19,54,87],"solutions":[20,111,128],"and":[21,37,42,78,97,122,130,142,147],"technologies":[22],"such":[23],"as":[24,109],"application":[25],"programming":[26],"interfaces":[27],"(APIs),":[28],"the":[29,48,60,84,132,140,144],"deployment":[30],"Internet":[32],"Things":[34],"(IoT)":[35],"devices":[36],"machine-to-machine":[38],"authentication.":[39],"Cyber":[40,76],"criminals":[41,77],"nation-state":[43,79],"attackers":[44,80],"alike":[45,81],"have":[46,82,118],"automated":[47,83],"process":[49,85],"credential":[51,98],"while":[53,86],"refining":[55,88],"highly":[56,89],"targeted":[57,90],"attacks.":[58,91],"And":[59,105],"problem":[61,93,141],"getting":[63,95],"worse.":[64],"The":[92],"worse":[96],"presents":[100],"itself":[101],"in":[102],"many":[103,110],"forms.":[104],"there":[106,125],"are":[107,126],"equally":[108],"touted":[112],"by":[113],"vendors,":[114],"which":[117],"their":[119],"own":[120],"challenges":[121],"weaknesses.":[123],"However,":[124],"successful":[127],"available":[129],"tackling":[131],"just":[134],"takes":[135],"proper":[137],"awareness":[138],"applying":[143],"appropriate":[145],"technology":[146],"training,":[148],"writes":[149],"Steve":[150],"Mansfield-Devine.":[151]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}