{"id":"https://openalex.org/W2793129310","doi":"https://doi.org/10.1109/access.2018.2817560","title":"A Systematic Review of the Availability and Efficacy of Countermeasures to Internal Threats in Healthcare Critical Infrastructure","display_name":"A Systematic Review of the Availability and Efficacy of Countermeasures to Internal Threats in Healthcare Critical Infrastructure","publication_year":2018,"publication_date":"2018-01-01","ids":{"openalex":"https://openalex.org/W2793129310","doi":"https://doi.org/10.1109/access.2018.2817560","mag":"2793129310"},"language":"en","primary_location":{"id":"doi:10.1109/access.2018.2817560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2817560","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2018.2817560","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5020984992","display_name":"Steven Walker-Roberts","orcid":null},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Steven Walker-Roberts","raw_affiliation_strings":["School of Computing, Mathematics and Digital Technology, Manchester Metropolitan University, Manchester, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computing, Mathematics and Digital Technology, Manchester Metropolitan University, Manchester, U.K","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089637331","display_name":"Mohammad Hammoudeh","orcid":"https://orcid.org/0000-0003-1058-0996"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mohammad Hammoudeh","raw_affiliation_strings":["School of Computing, Mathematics and Digital Technology, Manchester Metropolitan University, Manchester, U.K"],"raw_orcid":"https://orcid.org/0000-0003-1058-0996","affiliations":[{"raw_affiliation_string":"School of Computing, Mathematics and Digital Technology, Manchester Metropolitan University, Manchester, U.K","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038019914","display_name":"Ali Dehghantanha","orcid":"https://orcid.org/0000-0002-9294-7554"},"institutions":[{"id":"https://openalex.org/I91136226","display_name":"University of Sheffield","ror":"https://ror.org/05krs5044","country_code":"GB","type":"education","lineage":["https://openalex.org/I91136226"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ali Dehghantanha","raw_affiliation_strings":["Department of Computer Science, University of Sheffield, Sheffield, U.K"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Sheffield, Sheffield, U.K","institution_ids":["https://openalex.org/I91136226"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.4841,"has_fulltext":true,"cited_by_count":132,"citation_normalized_percentile":{"value":0.96511628,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"6","issue":null,"first_page":"25167","last_page":"25177"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9973999857902527,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.741290807723999},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.7081948518753052},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6653812527656555},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.6581454277038574},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.6108255386352539},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5613279938697815},{"id":"https://openalex.org/keywords/mainstream","display_name":"Mainstream","score":0.5511031150817871},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.49566447734832764},{"id":"https://openalex.org/keywords/countermeasure","display_name":"Countermeasure","score":0.4808364808559418},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.48008257150650024},{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.46770069003105164},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.46332356333732605},{"id":"https://openalex.org/keywords/scale","display_name":"Scale (ratio)","score":0.4562673270702362},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4510960280895233},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3776038885116577},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.12715303897857666},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.0874721109867096},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.07561981678009033}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.741290807723999},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.7081948518753052},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6653812527656555},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.6581454277038574},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.6108255386352539},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5613279938697815},{"id":"https://openalex.org/C2777617010","wikidata":"https://www.wikidata.org/wiki/Q18957","display_name":"Mainstream","level":2,"score":0.5511031150817871},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.49566447734832764},{"id":"https://openalex.org/C21593369","wikidata":"https://www.wikidata.org/wiki/Q1032176","display_name":"Countermeasure","level":2,"score":0.4808364808559418},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.48008257150650024},{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.46770069003105164},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.46332356333732605},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.4562673270702362},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4510960280895233},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3776038885116577},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.12715303897857666},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0874721109867096},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.07561981678009033},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C146978453","wikidata":"https://www.wikidata.org/wiki/Q3798668","display_name":"Aerospace engineering","level":1,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1109/access.2018.2817560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2817560","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:eprints.whiterose.ac.uk:129171","is_oa":true,"landing_page_url":"https://orcid.org/0000-0002-9294-7554>","pdf_url":"https://eprints.whiterose.ac.uk/id/eprint/129171/1/08320362.pdf","source":{"id":"https://openalex.org/S4306400854","display_name":"White Rose Research Online (University of Leeds, The University of Sheffield, University of York)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I2800616092","host_organization_name":"White Rose University Consortium","host_organization_lineage":["https://openalex.org/I2800616092"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:e-space.mmu.ac.uk:620827","is_oa":true,"landing_page_url":"https://e-space.mmu.ac.uk/view/authors/2d8e23d4511218f373fdb901df1fd553.html>","pdf_url":"https://e-space.mmu.ac.uk/620827/1/08320362.pdf","source":{"id":"https://openalex.org/S4306401617","display_name":"e-space (Manchester Metropolitan University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I11983389","host_organization_name":"Manchester Metropolitan University","host_organization_lineage":["https://openalex.org/I11983389"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:201ccd81437047a5b706a6fbd3cd9009","is_oa":true,"landing_page_url":"https://doaj.org/article/201ccd81437047a5b706a6fbd3cd9009","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 6, Pp 25167-25177 (2018)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2018.2817560","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2018.2817560","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6399999856948853,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W1554374928","https://openalex.org/W1973007193","https://openalex.org/W1976222822","https://openalex.org/W1990840327","https://openalex.org/W2061210554","https://openalex.org/W2075378482","https://openalex.org/W2089303860","https://openalex.org/W2092256938","https://openalex.org/W2116511599","https://openalex.org/W2117818136","https://openalex.org/W2153463254","https://openalex.org/W2280722976","https://openalex.org/W2283688032","https://openalex.org/W2430656512","https://openalex.org/W2512189246","https://openalex.org/W2582257950","https://openalex.org/W2588937729","https://openalex.org/W2592087824","https://openalex.org/W4394089167","https://openalex.org/W6669114857"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4389157351","https://openalex.org/W4232561318","https://openalex.org/W3214090987","https://openalex.org/W4389331041","https://openalex.org/W4237584680","https://openalex.org/W4385461189","https://openalex.org/W2923881152","https://openalex.org/W2257586676"],"abstract_inverted_index":{"Insider":[0],"attacks":[1,16],"are":[2],"becoming":[3],"increasingly":[4],"detrimental":[5],"and":[6,82,99,109,112,115],"frequent,":[7],"affecting":[8],"critical":[9,190],"infrastructure":[10,191],"at":[11],"a":[12,70,182,199],"massive":[13],"scale.":[14],"Recent":[15],"such":[17],"as":[18],"the":[19,37,41,55,97,100,120,134],"U.K.":[20],"National":[21],"Health":[22],"Service":[23],"WannaCry":[24],"ransomware":[25],"attack":[26],"which":[27],"partly":[28],"depends":[29],"on":[30],"internal":[31],"users":[32],"for":[33],"initial":[34],"infection":[35],"highlight":[36],"increasing":[38],"role":[39],"of":[40,49,69,80,136,171],"malicious":[42,172],"insiders":[43],"in":[44,177,203],"cyber-attack":[45],"campaigns.":[46],"The":[47],"objective":[48],"this":[50],"research":[51],"is":[52,126,143,185,198],"to":[53,59,145,166],"ascertain":[54],"existing":[56],"technological":[57],"capability":[58],"mitigate":[60,147],"insider":[61,149],"threats":[62],"within":[63],"computer":[64],"security":[65,137,162],"systems":[66],"by":[67,85],"way":[68],"mixed-method":[71],"systematic":[72],"review.":[73],"Evidence":[74],"was":[75],"acquired":[76],"from":[77],"major":[78,200],"sources":[79],"mainstream":[81],"grey":[83],"literature":[84,121],"analyzing":[86],"about":[87],"300":[88],"000":[89],"papers.":[90],"Crude":[91],"aggregated":[92],"results":[93,101],"were":[94,102],"analyzed":[95],"across":[96,129],"literature,":[98],"TPR":[103],"0.75,":[104],"FPR":[105],"0.32,":[106],"\u03c3":[107],"0.24":[108],"0.36,":[110],"respectively,":[111],"\u03c32":[113],"0.06":[114],"0.13,":[116],"respectively.":[117],"In":[118],"totality,":[119],"evidence":[122],"suggests":[123],"that":[124,133,154,157],"there":[125,197],"high":[127],"heterogeneity":[128],"crude":[130],"data":[131,155],"indicating":[132],"effectiveness":[135],"measures":[138,163],"varies":[139],"significantly.":[140],"No":[141],"solution":[142],"able":[144],"totally":[146],"an":[148,169],"threat.":[150],"Themes":[151],"when":[152],"against":[153],"suggest":[156],"most,":[158],"if":[159],"not":[160,186],"all,":[161],"require":[164],"breaches":[165],"occur":[167],"before":[168],"analysis":[170],"activity":[173],"can":[174],"prevent":[175],"it":[176],"future":[178],"through":[179],"recall.":[180],"Such":[181],"reactive":[183],"approach":[184],"effective":[187],"protect":[188],"our":[189,193],"including":[192],"healthcare":[194],"systems.":[195],"Consequently,":[196],"theoretical":[201],"shortfall":[202],"current":[204],"cyber":[205],"defence":[206],"architecture.":[207]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":18},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":15},{"year":2021,"cited_by_count":21},{"year":2020,"cited_by_count":24},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":8}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}