{"id":"https://openalex.org/W3185053385","doi":"https://doi.org/10.1109/ecrime51433.2020.9493256","title":"Averages don\u2019t characterise the heavy tails of ransoms","display_name":"Averages don\u2019t characterise the heavy tails of ransoms","publication_year":2020,"publication_date":"2020-11-16","ids":{"openalex":"https://openalex.org/W3185053385","doi":"https://doi.org/10.1109/ecrime51433.2020.9493256","mag":"3185053385"},"language":"en","primary_location":{"id":"doi:10.1109/ecrime51433.2020.9493256","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime51433.2020.9493256","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5015418863","display_name":"\u00c9ireann Leverett","orcid":"https://orcid.org/0000-0001-6586-7359"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Eireann Leverett","raw_affiliation_strings":["Founder of Concinnity Risks, Cambridge, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Founder of Concinnity Risks, Cambridge, United Kingdom","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052564789","display_name":"Eric Jardine","orcid":"https://orcid.org/0000-0002-2041-314X"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eric Jardine","raw_affiliation_strings":["Assistant Professor, Department of Political Science, Virginia Tech, Blacksburg, United States"],"affiliations":[{"raw_affiliation_string":"Assistant Professor, Department of Political Science, Virginia Tech, Blacksburg, United States","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066679401","display_name":"Erin Burns","orcid":"https://orcid.org/0009-0003-7153-443X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Erin Burns","raw_affiliation_strings":["Founder of Concinnity Risks, Cambridge, United Kingdom"],"affiliations":[{"raw_affiliation_string":"Founder of Concinnity Risks, Cambridge, United Kingdom","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064911856","display_name":"Ankit Gangwal","orcid":"https://orcid.org/0000-0002-8065-3700"},"institutions":[{"id":"https://openalex.org/I138689650","display_name":"University of Padua","ror":"https://ror.org/00240q980","country_code":"IT","type":"education","lineage":["https://openalex.org/I138689650"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Ankit Gangwal","raw_affiliation_strings":["University of Padua, Italy"],"affiliations":[{"raw_affiliation_string":"University of Padua, Italy","institution_ids":["https://openalex.org/I138689650"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024125727","display_name":"Dan Geer","orcid":"https://orcid.org/0000-0001-6183-2538"},"institutions":[{"id":"https://openalex.org/I38260057","display_name":"In-Q-Tel","ror":"https://ror.org/02qp5k481","country_code":"US","type":"nonprofit","lineage":["https://openalex.org/I38260057"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Dan Geer","raw_affiliation_strings":["Senior Fellow, In-Q-Tel"],"affiliations":[{"raw_affiliation_string":"Senior Fellow, In-Q-Tel","institution_ids":["https://openalex.org/I38260057"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5015418863"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2782,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.71850652,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"12"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9836845993995667},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7569658160209656},{"id":"https://openalex.org/keywords/pareto-distribution","display_name":"Pareto distribution","score":0.5631539225578308},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49939584732055664},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4786573648452759},{"id":"https://openalex.org/keywords/distribution","display_name":"Distribution (mathematics)","score":0.47474199533462524},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.21707823872566223},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.19590038061141968}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9836845993995667},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7569658160209656},{"id":"https://openalex.org/C190373308","wikidata":"https://www.wikidata.org/wiki/Q837683","display_name":"Pareto distribution","level":2,"score":0.5631539225578308},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49939584732055664},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4786573648452759},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.47474199533462524},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.21707823872566223},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.19590038061141968},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ecrime51433.2020.9493256","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ecrime51433.2020.9493256","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 APWG Symposium on Electronic Crime Research (eCrime)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7300000190734863}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W423360053","https://openalex.org/W1515345759","https://openalex.org/W1976969221","https://openalex.org/W1994687138","https://openalex.org/W2000042664","https://openalex.org/W2004316155","https://openalex.org/W2008620264","https://openalex.org/W2077610946","https://openalex.org/W2088856850","https://openalex.org/W2092311045","https://openalex.org/W2147569252","https://openalex.org/W2157210552","https://openalex.org/W2161020477","https://openalex.org/W2261150581","https://openalex.org/W2326642226","https://openalex.org/W2339514484","https://openalex.org/W2509774545","https://openalex.org/W2511701350","https://openalex.org/W2550109527","https://openalex.org/W2565682512","https://openalex.org/W2591887805","https://openalex.org/W2795995661","https://openalex.org/W2796762053","https://openalex.org/W2798499856","https://openalex.org/W2800509541","https://openalex.org/W2907585164","https://openalex.org/W2950627632","https://openalex.org/W2963604227","https://openalex.org/W3103362336","https://openalex.org/W3123512493","https://openalex.org/W3211082865","https://openalex.org/W4211068006","https://openalex.org/W4248175462","https://openalex.org/W4293742266","https://openalex.org/W6634518936","https://openalex.org/W6729193369","https://openalex.org/W6731191907","https://openalex.org/W6758461099","https://openalex.org/W6803809812"],"related_works":["https://openalex.org/W3201228709","https://openalex.org/W2922354075","https://openalex.org/W4253977752","https://openalex.org/W2964829536","https://openalex.org/W3202245533","https://openalex.org/W3120595989","https://openalex.org/W3076507384","https://openalex.org/W4224941017","https://openalex.org/W4366249425","https://openalex.org/W2964936987"],"abstract_inverted_index":{"The":[0,38,85],"Bitcoin":[1],"block-chain":[2],"is":[3],"the":[4,10,16,22,32],"scoreboard":[5],"of":[6,24,42],"Ransomware.":[7],"By":[8],"mining":[9],"data":[11],"in":[12,35,58],"it":[13],"and":[14,26,72,95],"within":[15],"malware":[17],"itself,":[18],"we":[19],"can":[20],"understand":[21],"distribution":[23,34],"ransoms":[25],"characterise":[27],"ransomware":[28,80,99],"risk.":[29],"Ransoms":[30],"follow":[31],"power-law":[33],"their":[36],"amounts.":[37],"alpha":[39],"parameter":[40],"(\u03b1)":[41],"those":[43],"power":[44],"laws":[45],"suggest":[46],"they":[47],"do":[48],"not":[49,64,76],"have":[50],"a":[51,78],"well":[52],"defined":[53],"average":[54,81],"for":[55,91],"most":[56],"years":[57],"our":[59],"study.":[60],"Indeed,":[61],"there":[62,74],"has":[63,75,88],"been":[65,77],"an":[66],"\u03b1":[67,87],"above":[68],"2":[69],"since":[70,82],"2015":[71],"so":[73],"stable":[79],"that":[83],"time.":[84],"changing":[86],"strong":[89],"implications":[90],"cyber":[92],"risk":[93],"management":[94],"policy":[96],"responses":[97],"to":[98],"attacks.":[100]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1}],"updated_date":"2026-04-02T13:48:15.688549","created_date":"2025-10-10T00:00:00"}