{"id":"https://openalex.org/W2995569586","doi":"https://doi.org/10.1109/ecrime47957.2019.9037589","title":"Identifying Unintended Harms of Cybersecurity Countermeasures","display_name":"Identifying Unintended Harms of Cybersecurity Countermeasures","publication_year":2019,"publication_date":"2019-11-01","ids":{"openalex":"https://openalex.org/W2995569586","doi":"https://doi.org/10.1109/ecrime47957.2019.9037589","mag":"2995569586"},"language":"en","primary_location":{"id":"doi:10.1109/ecrime47957.2019.9037589","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime47957.2019.9037589","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5026407300","display_name":"Yi Ting Chua","orcid":"https://orcid.org/0000-0003-3592-0109"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Yi Ting Chua","raw_affiliation_strings":["University of Cambridge"],"affiliations":[{"raw_affiliation_string":"University of Cambridge","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016771481","display_name":"Simon Parkin","orcid":"https://orcid.org/0000-0002-6667-0440"},"institutions":[{"id":"https://openalex.org/I45129253","display_name":"University College London","ror":"https://ror.org/02jx3x895","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I45129253"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Simon Parkin","raw_affiliation_strings":["University College London"],"affiliations":[{"raw_affiliation_string":"University College London","institution_ids":["https://openalex.org/I45129253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003587835","display_name":"Matthew Edwards","orcid":"https://orcid.org/0000-0001-8099-0646"},"institutions":[{"id":"https://openalex.org/I36234482","display_name":"University of Bristol","ror":"https://ror.org/0524sp257","country_code":"GB","type":"education","lineage":["https://openalex.org/I36234482"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Matthew Edwards","raw_affiliation_strings":["University of Bristol"],"affiliations":[{"raw_affiliation_string":"University of Bristol","institution_ids":["https://openalex.org/I36234482"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082282267","display_name":"Daniela S Oliveira","orcid":"https://orcid.org/0000-0003-3488-0053"},"institutions":[{"id":"https://openalex.org/I33213144","display_name":"University of Florida","ror":"https://ror.org/02y3ad647","country_code":"US","type":"education","lineage":["https://openalex.org/I33213144"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniela Oliveira","raw_affiliation_strings":["University of Florida"],"affiliations":[{"raw_affiliation_string":"University of Florida","institution_ids":["https://openalex.org/I33213144"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5033291024","display_name":"Stefan Schiffner","orcid":"https://orcid.org/0000-0003-2461-1482"},"institutions":[{"id":"https://openalex.org/I186903577","display_name":"University of Luxembourg","ror":"https://ror.org/036x5ad56","country_code":"LU","type":"education","lineage":["https://openalex.org/I186903577"]}],"countries":["LU"],"is_corresponding":false,"raw_author_name":"Stefan Schiffner","raw_affiliation_strings":["University of Luxembourg"],"affiliations":[{"raw_affiliation_string":"University of Luxembourg","institution_ids":["https://openalex.org/I186903577"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023313904","display_name":"Gareth Tyson","orcid":"https://orcid.org/0000-0003-3010-791X"},"institutions":[{"id":"https://openalex.org/I166337079","display_name":"Queen Mary University of London","ror":"https://ror.org/026zzn846","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I166337079"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Gareth Tyson","raw_affiliation_strings":["Queen Mary University of London"],"affiliations":[{"raw_affiliation_string":"Queen Mary University of London","institution_ids":["https://openalex.org/I166337079"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055346534","display_name":"Alice Hutchings","orcid":"https://orcid.org/0000-0003-3037-2684"},"institutions":[{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Alice Hutchings","raw_affiliation_strings":["University of Cambridge"],"affiliations":[{"raw_affiliation_string":"University of Cambridge","institution_ids":["https://openalex.org/I241749"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5026407300"],"corresponding_institution_ids":["https://openalex.org/I241749"],"apc_list":null,"apc_paid":null,"fwci":2.7132,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.92322932,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9911999702453613,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.9864000082015991,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unintended-consequences","display_name":"Unintended consequences","score":0.9112820625305176},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.7040321826934814},{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.679937481880188},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6788708567619324},{"id":"https://openalex.org/keywords/sociotechnical-system","display_name":"Sociotechnical system","score":0.673482358455658},{"id":"https://openalex.org/keywords/stakeholder","display_name":"Stakeholder","score":0.5695695281028748},{"id":"https://openalex.org/keywords/risk-management","display_name":"Risk management","score":0.5096821784973145},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4583006501197815},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.4392300546169281},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4147148132324219},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3460851311683655},{"id":"https://openalex.org/keywords/knowledge-management","display_name":"Knowledge management","score":0.22178789973258972},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.12597790360450745},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08587107062339783}],"concepts":[{"id":"https://openalex.org/C2776889888","wikidata":"https://www.wikidata.org/wiki/Q1135789","display_name":"Unintended consequences","level":2,"score":0.9112820625305176},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.7040321826934814},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.679937481880188},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6788708567619324},{"id":"https://openalex.org/C127627568","wikidata":"https://www.wikidata.org/wiki/Q1639361","display_name":"Sociotechnical system","level":2,"score":0.673482358455658},{"id":"https://openalex.org/C201305675","wikidata":"https://www.wikidata.org/wiki/Q852998","display_name":"Stakeholder","level":2,"score":0.5695695281028748},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.5096821784973145},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4583006501197815},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.4392300546169281},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4147148132324219},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3460851311683655},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.22178789973258972},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.12597790360450745},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08587107062339783},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C10138342","wikidata":"https://www.wikidata.org/wiki/Q43015","display_name":"Finance","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/ecrime47957.2019.9037589","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime47957.2019.9037589","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},{"id":"pmh:oai:repository.hkust.edu.hk:1783.1-161364","is_oa":false,"landing_page_url":"http://repository.hkust.edu.hk/ir/Record/1783.1-161364","pdf_url":null,"source":{"id":"https://openalex.org/S4306401796","display_name":"Rare & Special e-Zone (The Hong Kong University of Science and Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I200769079","host_organization_name":"Hong Kong University of Science and Technology","host_organization_lineage":["https://openalex.org/I200769079"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Conference paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G712205639","display_name":null,"funder_award_id":"EP/M020320/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":118,"referenced_works":["https://openalex.org/W79275384","https://openalex.org/W135949782","https://openalex.org/W263747627","https://openalex.org/W1036550512","https://openalex.org/W1185009508","https://openalex.org/W1484391064","https://openalex.org/W1507209377","https://openalex.org/W1529747824","https://openalex.org/W1537884690","https://openalex.org/W1548744715","https://openalex.org/W1552021481","https://openalex.org/W1622042935","https://openalex.org/W1837843568","https://openalex.org/W1859403526","https://openalex.org/W1910272645","https://openalex.org/W1914444476","https://openalex.org/W1974589815","https://openalex.org/W1979004942","https://openalex.org/W1987318520","https://openalex.org/W2001787911","https://openalex.org/W2003584729","https://openalex.org/W2014071948","https://openalex.org/W2021844952","https://openalex.org/W2026328911","https://openalex.org/W2034757259","https://openalex.org/W2037202491","https://openalex.org/W2040174723","https://openalex.org/W2042720915","https://openalex.org/W2044948754","https://openalex.org/W2046274577","https://openalex.org/W2049041303","https://openalex.org/W2049561176","https://openalex.org/W2052176706","https://openalex.org/W2063236501","https://openalex.org/W2089020037","https://openalex.org/W2097719378","https://openalex.org/W2106798436","https://openalex.org/W2113449956","https://openalex.org/W2115387039","https://openalex.org/W2117634019","https://openalex.org/W2120068872","https://openalex.org/W2121990650","https://openalex.org/W2135572749","https://openalex.org/W2136136174","https://openalex.org/W2137542147","https://openalex.org/W2141667975","https://openalex.org/W2142423963","https://openalex.org/W2145180132","https://openalex.org/W2146786371","https://openalex.org/W2147320013","https://openalex.org/W2154600365","https://openalex.org/W2160685721","https://openalex.org/W2163623461","https://openalex.org/W2170386957","https://openalex.org/W2188594517","https://openalex.org/W2232384272","https://openalex.org/W2269520727","https://openalex.org/W2369295637","https://openalex.org/W2414473591","https://openalex.org/W2416164492","https://openalex.org/W2420107722","https://openalex.org/W2468823177","https://openalex.org/W2535734180","https://openalex.org/W2536961387","https://openalex.org/W2581815792","https://openalex.org/W2583803709","https://openalex.org/W2597484800","https://openalex.org/W2601373225","https://openalex.org/W2624735790","https://openalex.org/W2731529204","https://openalex.org/W2739887622","https://openalex.org/W2751179444","https://openalex.org/W2754938188","https://openalex.org/W2760761535","https://openalex.org/W2770114489","https://openalex.org/W2772213089","https://openalex.org/W2790166049","https://openalex.org/W2794852036","https://openalex.org/W2795566406","https://openalex.org/W2804365752","https://openalex.org/W2806181933","https://openalex.org/W2887660182","https://openalex.org/W2888058555","https://openalex.org/W2889482448","https://openalex.org/W2895779664","https://openalex.org/W2901674711","https://openalex.org/W2904937466","https://openalex.org/W2911428659","https://openalex.org/W2940260205","https://openalex.org/W2941907863","https://openalex.org/W2947544539","https://openalex.org/W2949865335","https://openalex.org/W2962973998","https://openalex.org/W2965381445","https://openalex.org/W2969296138","https://openalex.org/W2969836291","https://openalex.org/W2984961272","https://openalex.org/W2999291977","https://openalex.org/W3099003122","https://openalex.org/W3102867977","https://openalex.org/W3125182500","https://openalex.org/W3125336846","https://openalex.org/W3161918289","https://openalex.org/W4231555573","https://openalex.org/W4248329831","https://openalex.org/W4285719527","https://openalex.org/W6603295953","https://openalex.org/W6629049694","https://openalex.org/W6631443967","https://openalex.org/W6632833816","https://openalex.org/W6639885404","https://openalex.org/W6687080352","https://openalex.org/W6693548710","https://openalex.org/W6732887590","https://openalex.org/W6743392461","https://openalex.org/W6752098871","https://openalex.org/W6754285855","https://openalex.org/W6767230465"],"related_works":["https://openalex.org/W1980714815","https://openalex.org/W3133630643","https://openalex.org/W608490485","https://openalex.org/W2236208621","https://openalex.org/W2967475239","https://openalex.org/W4308919250","https://openalex.org/W2615403700","https://openalex.org/W2156805610","https://openalex.org/W2182622797","https://openalex.org/W2030486054"],"abstract_inverted_index":{"Well-meaning":[0],"cybersecurity":[1],"risk":[2,64,142,172],"owners":[3],"will":[4,23],"deploy":[5],"countermeasures":[6,22,65],"(technologies":[7],"or":[8,16,44,51],"procedures)":[9],"to":[10,13,81,104,122,127,153,166],"manage":[11],"risks":[12],"their":[14],"services":[15,50],"systems.":[17],"In":[18],"some":[19],"cases,":[20],"those":[21],"produce":[24],"unintended":[25,61,74,134],"consequences,":[26,125],"which":[27,76],"must":[28],"then":[29],"be":[30,137],"addressed.":[31],"Unintended":[32],"consequences":[33],"can":[34,136,147],"potentially":[35],"induce":[36],"harm,":[37],"adversely":[38],"affecting":[39],"user":[40,42],"behaviour,":[41],"inclusion,":[43],"the":[45,83,105,111,168],"infrastructure":[46],"itself":[47],"(including":[48],"other":[49],"countermeasures).":[52],"Here":[53],"we":[54],"propose":[55],"a":[56,71],"framework":[57,69,101,120,146,169],"for":[58],"preemptively":[59,158],"identifying":[60],"harms":[62,75,135],"of":[63,73,113],"in":[66,141,170,177],"cybersecurity.":[67],"The":[68,145],"identifies":[70],"series":[72],"go":[77],"beyond":[78],"technology":[79],"alone,":[80],"consider":[82],"cyberphysical":[84,179],"and":[85,96,150,157],"sociotechnical":[86],"space:":[87],"displacement,":[88],"insecure":[89],"norms,":[90],"additional":[91],"costs,":[92],"misuse,":[93],"misclassification,":[94],"amplification,":[95],"disruption.":[97],"We":[98],"demonstrate":[99],"our":[100],"through":[102],"application":[103],"complex,":[106],"multi-stakeholder":[107],"challenges":[108],"associated":[109],"with":[110],"prevention":[112],"cyberbullying":[114],"as":[115],"an":[116],"applied":[117],"example.":[118],"Our":[119],"aims":[121],"illuminate":[123],"harmful":[124],"not":[126],"paralyze":[128],"decision-making,":[129],"but":[130],"so":[131],"that":[132],"potential":[133],"more":[138],"thoroughly":[139],"considered":[140],"management":[143,173],"strategies.":[144],"support":[148],"identification":[149],"preemptive":[151],"planning":[152],"identify":[154],"vulnerable":[155],"populations":[156],"insulate":[159],"them":[160],"from":[161],"harm.":[162],"There":[163],"are":[164],"opportunities":[165],"use":[167],"coordinating":[171],"strategy":[174],"across":[175],"stakeholders":[176],"complex":[178],"environments.":[180]},"counts_by_year":[{"year":2025,"cited_by_count":6},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}