{"id":"https://openalex.org/W4416502340","doi":"https://doi.org/10.1093/cybsec/tyaf035","title":"Modelling and simulating organizational ransomware recovery: structure, methodology, and decisions","display_name":"Modelling and simulating organizational ransomware recovery: structure, methodology, and decisions","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416502340","doi":"https://doi.org/10.1093/cybsec/tyaf035"},"language":"en","primary_location":{"id":"doi:10.1093/cybsec/tyaf035","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf035","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf035/65451383/tyaf035.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf035/65451383/tyaf035.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5067743144","display_name":"Marius-Constantin Ilau","orcid":"https://orcid.org/0000-0002-5424-5375"},"institutions":[{"id":"https://openalex.org/I4210098748","display_name":"Department of Science and Technology","ror":"https://ror.org/0101xrq71","country_code":"IN","type":"government","lineage":["https://openalex.org/I2799351866","https://openalex.org/I4210098748","https://openalex.org/I4210134808"]},{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB","IN"],"is_corresponding":true,"raw_author_name":"Marius-Constantin Ilau","raw_affiliation_strings":["UCL Department of Computer Science, , Gower St. , London WC1E 6BT,"],"raw_orcid":"https://orcid.org/0000-0002-5424-5375","affiliations":[{"raw_affiliation_string":"UCL Department of Computer Science, , Gower St. , London WC1E 6BT,","institution_ids":["https://openalex.org/I4210098748","https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103588511","display_name":"Adrian Baldwin","orcid":null},"institutions":[{"id":"https://openalex.org/I3132500319","display_name":"Bristol and Bath Science Park","ror":"https://ror.org/0105p2r38","country_code":"GB","type":"education","lineage":["https://openalex.org/I3132500319"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Adrian Baldwin","raw_affiliation_strings":["HP Security Lab, HP Inc. , 1 Redcliffe St. , Bristol BS1 6NP,"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"HP Security Lab, HP Inc. , 1 Redcliffe St. , Bristol BS1 6NP,","institution_ids":["https://openalex.org/I3132500319"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076986372","display_name":"Tristan Caulfield","orcid":"https://orcid.org/0000-0002-7039-6472"},"institutions":[{"id":"https://openalex.org/I4210098748","display_name":"Department of Science and Technology","ror":"https://ror.org/0101xrq71","country_code":"IN","type":"government","lineage":["https://openalex.org/I2799351866","https://openalex.org/I4210098748","https://openalex.org/I4210134808"]},{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB","IN"],"is_corresponding":false,"raw_author_name":"Tristan Caulfield","raw_affiliation_strings":["UCL Department of Computer Science, , Gower St. , London WC1E 6BT,"],"raw_orcid":"https://orcid.org/0000-0002-7039-6472","affiliations":[{"raw_affiliation_string":"UCL Department of Computer Science, , Gower St. , London WC1E 6BT,","institution_ids":["https://openalex.org/I4210098748","https://openalex.org/I45129253"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5013218535","display_name":"David Pym","orcid":"https://orcid.org/0000-0002-6504-5838"},"institutions":[{"id":"https://openalex.org/I4210098748","display_name":"Department of Science and Technology","ror":"https://ror.org/0101xrq71","country_code":"IN","type":"government","lineage":["https://openalex.org/I2799351866","https://openalex.org/I4210098748","https://openalex.org/I4210134808"]},{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB","IN"],"is_corresponding":false,"raw_author_name":"David Pym","raw_affiliation_strings":["Institute of Philosophy, University of London , Malet St. , London WC1E 6HU,","UCL Department of Computer Science, , Gower St. , London WC1E 6BT,","UCL Department of Philosophy, , Gower St. , London WC1E 6BT,"],"raw_orcid":"https://orcid.org/0000-0002-6504-5838","affiliations":[{"raw_affiliation_string":"Institute of Philosophy, University of London , Malet St. , London WC1E 6HU,","institution_ids":["https://openalex.org/I45129253"]},{"raw_affiliation_string":"UCL Department of Computer Science, , Gower St. , London WC1E 6BT,","institution_ids":["https://openalex.org/I4210098748","https://openalex.org/I45129253"]},{"raw_affiliation_string":"UCL Department of Philosophy, , Gower St. , London WC1E 6BT,","institution_ids":["https://openalex.org/I45129253","https://openalex.org/I4210098748"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5067743144"],"corresponding_institution_ids":["https://openalex.org/I4210098748","https://openalex.org/I45129253"],"apc_list":{"value":1864,"currency":"USD","value_usd":1864},"apc_paid":{"value":1864,"currency":"USD","value_usd":1864},"fwci":2.9051,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.93772621,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":98},"biblio":{"volume":"11","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7846999764442444,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.7846999764442444,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.066600002348423,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10639","display_name":"Advanced Software Engineering Methodologies","score":0.012600000016391277,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.7541000247001648},{"id":"https://openalex.org/keywords/conceptualization","display_name":"Conceptualization","score":0.7239999771118164},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.531499981880188},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.4986000061035156},{"id":"https://openalex.org/keywords/face","display_name":"Face (sociological concept)","score":0.38940000534057617},{"id":"https://openalex.org/keywords/organizational-structure","display_name":"Organizational structure","score":0.3393000066280365},{"id":"https://openalex.org/keywords/complex-system","display_name":"Complex system","score":0.31150001287460327}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.7541000247001648},{"id":"https://openalex.org/C90734943","wikidata":"https://www.wikidata.org/wiki/Q17008777","display_name":"Conceptualization","level":2,"score":0.7239999771118164},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6644999980926514},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.531499981880188},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.4986000061035156},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4388999938964844},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.40950000286102295},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.38940000534057617},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.3677000105381012},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.3472000062465668},{"id":"https://openalex.org/C182566","wikidata":"https://www.wikidata.org/wiki/Q759524","display_name":"Organizational structure","level":2,"score":0.3393000066280365},{"id":"https://openalex.org/C47822265","wikidata":"https://www.wikidata.org/wiki/Q854457","display_name":"Complex system","level":2,"score":0.31150001287460327},{"id":"https://openalex.org/C155109394","wikidata":"https://www.wikidata.org/wiki/Q2029930","display_name":"Organizational studies","level":3,"score":0.3075000047683716},{"id":"https://openalex.org/C148220186","wikidata":"https://www.wikidata.org/wiki/Q7111912","display_name":"Outcome (game theory)","level":2,"score":0.2955000102519989},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.28209999203681946},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C62886766","wikidata":"https://www.wikidata.org/wiki/Q17013138","display_name":"Organizational network analysis","level":3,"score":0.2754000127315521},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.2547999918460846}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1093/cybsec/tyaf035","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf035","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf035/65451383/tyaf035.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1093/cybsec/tyaf035","is_oa":true,"landing_page_url":"https://doi.org/10.1093/cybsec/tyaf035","pdf_url":"https://academic.oup.com/cybersecurity/article-pdf/11/1/tyaf035/65451383/tyaf035.pdf","source":{"id":"https://openalex.org/S2735156331","display_name":"Journal of Cybersecurity","issn_l":"2057-2085","issn":["2057-2085","2057-2093"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311648","host_organization_name":"Oxford University Press","host_organization_lineage":["https://openalex.org/P4310311648","https://openalex.org/P4310311647"],"host_organization_lineage_names":["Oxford University Press","University of Oxford"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G6480646621","display_name":"Interface reasoning for interacting systems (IRIS).","funder_award_id":"EP/R006865/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G8840470266","display_name":null,"funder_award_id":"R006865/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4416502340.pdf","grobid_xml":"https://content.openalex.org/works/W4416502340.grobid-xml"},"referenced_works_count":49,"referenced_works":["https://openalex.org/W141425073","https://openalex.org/W1532019092","https://openalex.org/W1608869910","https://openalex.org/W1940349623","https://openalex.org/W1997501517","https://openalex.org/W2001748564","https://openalex.org/W2008132476","https://openalex.org/W2013474929","https://openalex.org/W2042830765","https://openalex.org/W2049222678","https://openalex.org/W2070157304","https://openalex.org/W2073344030","https://openalex.org/W2074548145","https://openalex.org/W2075644848","https://openalex.org/W2107213093","https://openalex.org/W2120575449","https://openalex.org/W2132761501","https://openalex.org/W2137865376","https://openalex.org/W2145459199","https://openalex.org/W2148032817","https://openalex.org/W2152118002","https://openalex.org/W2219757995","https://openalex.org/W2288343925","https://openalex.org/W2343488161","https://openalex.org/W2489197259","https://openalex.org/W2531661043","https://openalex.org/W2536018345","https://openalex.org/W2762151798","https://openalex.org/W2885889990","https://openalex.org/W2886257824","https://openalex.org/W2889262254","https://openalex.org/W2889893970","https://openalex.org/W2895473930","https://openalex.org/W2896918951","https://openalex.org/W2915893383","https://openalex.org/W2947956724","https://openalex.org/W3009492331","https://openalex.org/W3067193527","https://openalex.org/W3082077437","https://openalex.org/W3090762552","https://openalex.org/W3114189379","https://openalex.org/W3176289544","https://openalex.org/W3193692833","https://openalex.org/W4226028259","https://openalex.org/W4226195142","https://openalex.org/W4226214326","https://openalex.org/W4247938681","https://openalex.org/W4248806346","https://openalex.org/W4294621147"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1],"problem":[2],"of":[3,10,62,67,77,83,92,113,188],"maintaining":[4],"organizational":[5,73,114,145],"resilience":[6],"in":[7,107,135,197,214],"the":[8,48,65,88,129,142,178,194,206,216],"face":[9],"ransomware":[11,143],"attacks":[12],"represents":[13],"an":[14,186],"important":[15],"issue":[16],"for":[17,127],"modern":[18],"organizations.":[19],"Organizational":[20],"networks":[21],"and":[22,29,39,80,90,124,132,149,152,158,204],"IT":[23,147],"infrastructure":[24],"have":[25],"become":[26],"increasingly":[27],"complex,":[28],"it":[30],"is":[31,119],"often":[32],"unclear":[33],"how":[34],"decisions":[35],"about":[36,222],"technology,":[37],"policy,":[38],"recovery":[40,70,115,150,225],"strategy":[41],"will":[42],"impact":[43,66],"resilience.":[44],"In":[45],"this":[46],"context,":[47],"paper":[49],"focuses":[50],"on":[51,155],"two":[52],"primary":[53],"objectives.":[54],"First,":[55],"to":[56,86],"offer":[57],"security":[58],"decision-makers":[59,221],"a":[60,101,108,136,163,168],"way":[61],"better":[63],"understanding":[64],"deploying":[68],"different":[69,182],"solutions":[71],"at":[72,205],"level":[74],"by":[75],"means":[76],"simulation":[78,165],"modelling":[79,117],"comparative":[81],"analysis":[82],"solutions.":[84],"Second,":[85],"illustrate":[87],"suitability":[89],"benefits":[91],"using":[93,172],"semantically":[94],"justified,":[95],"compositional":[96],"system":[97],"models":[98],"together":[99],"with":[100],"rigorously":[102],"defined":[103],"codesign":[104,174],"model-construction":[105],"methodology,":[106],"complex":[109],"scenario.":[110],"Our":[111],"choice":[112],"as":[116],"target":[118,170],"motivated":[120],"through":[121],"both":[122,196],"form":[123],"complexity,":[125],"allowing":[126],"illustrating":[128],"model":[130,166,179,217],"conceptualization":[131],"construction":[133],"methodology":[134],"sufficiently":[137],"rich":[138],"context.":[139],"We":[140,176,192],"conceptualize":[141],"behaviour,":[144],"structure,":[146],"infrastructure,":[148],"choices":[151],"behaviour":[153],"based":[154],"literature":[156],"surveys":[157],"expert":[159],"knowledge.":[160],"Then,":[161],"construct":[162],"modular,":[164],"representing":[167],"generic":[169],"organization":[171],"our":[173],"approach.":[175],"execute":[177],"over":[180],"9000":[181],"parameter":[183],"configurations,":[184],"totalling":[185],"amount":[187],"450":[189],"000":[190],"iterations.":[191],"analyse":[193],"results,":[195],"three":[198],"specific":[199],"scenarios":[200],"deemed":[201],"organizationally":[202],"relevant":[203],"general":[207],"level\u2014through":[208],"sensitivity":[209],"analysis\u2014and,":[210],"exemplify":[211],"possible":[212,224],"ways":[213],"which":[215],"can":[218],"help":[219],"inform":[220],"their":[223],"choices.":[226]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-03-08T06:56:09.383167","created_date":"2025-11-23T00:00:00"}