{"id":"https://openalex.org/W2804864889","doi":"https://doi.org/10.1145/3109761.3109793","title":"A study into data analysis and visualisation to increase the cyber-resilience of healthcare infrastructures","display_name":"A study into data analysis and visualisation to increase the cyber-resilience of healthcare infrastructures","publication_year":2017,"publication_date":"2017-10-17","ids":{"openalex":"https://openalex.org/W2804864889","doi":"https://doi.org/10.1145/3109761.3109793","mag":"2804864889"},"language":"en","primary_location":{"id":"doi:10.1145/3109761.3109793","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3109761.3109793","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Conference on Internet of Things and Machine Learning","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://researchonline.ljmu.ac.uk/id/eprint/10033/1/IML%20Paper%20v3.2%20%28ACM_SigConf%29.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5033432185","display_name":"Aaron Boddy","orcid":"https://orcid.org/0000-0002-3436-3817"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Aaron Boddy","raw_affiliation_strings":["Liverpool John Moores University, Liverpool, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Liverpool John Moores University, Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013177439","display_name":"William Hurst","orcid":"https://orcid.org/0000-0001-8287-0330"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"William Hurst","raw_affiliation_strings":["Liverpool John Moores University, Liverpool, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Liverpool John Moores University, Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061834959","display_name":"Michael Mackay","orcid":"https://orcid.org/0000-0001-9013-7884"},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Michael Mackay","raw_affiliation_strings":["Liverpool John Moores University, Liverpool, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Liverpool John Moores University, Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5003225736","display_name":"Abdennour El Rhalibi","orcid":null},"institutions":[{"id":"https://openalex.org/I63098007","display_name":"Liverpool John Moores University","ror":"https://ror.org/04zfme737","country_code":"GB","type":"education","lineage":["https://openalex.org/I63098007"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Abdennour El Rhalibi","raw_affiliation_strings":["Liverpool John Moores University, Liverpool, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Liverpool John Moores University, Liverpool, UK","institution_ids":["https://openalex.org/I63098007"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I63098007"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":20,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.9926000237464905,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9800999760627747,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/health-care","display_name":"Health care","score":0.6673073172569275},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6429283022880554},{"id":"https://openalex.org/keywords/bespoke","display_name":"Bespoke","score":0.6202986836433411},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5753028392791748},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.5357766151428223},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.4688255488872528},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.45894327759742737},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.4419540762901306},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.44085875153541565},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4234559237957001},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.4194949269294739},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4158831238746643},{"id":"https://openalex.org/keywords/data-breach","display_name":"Data breach","score":0.41520819067955017},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.14937293529510498},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.11593171954154968}],"concepts":[{"id":"https://openalex.org/C160735492","wikidata":"https://www.wikidata.org/wiki/Q31207","display_name":"Health care","level":2,"score":0.6673073172569275},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6429283022880554},{"id":"https://openalex.org/C44210515","wikidata":"https://www.wikidata.org/wiki/Q16968978","display_name":"Bespoke","level":2,"score":0.6202986836433411},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5753028392791748},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.5357766151428223},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.4688255488872528},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.45894327759742737},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.4419540762901306},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.44085875153541565},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4234559237957001},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.4194949269294739},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4158831238746643},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.41520819067955017},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.14937293529510498},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.11593171954154968},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C112698675","wikidata":"https://www.wikidata.org/wiki/Q37038","display_name":"Advertising","level":1,"score":0.0},{"id":"https://openalex.org/C50522688","wikidata":"https://www.wikidata.org/wiki/Q189833","display_name":"Economic growth","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3109761.3109793","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3109761.3109793","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 1st International Conference on Internet of Things and Machine Learning","raw_type":"proceedings-article"},{"id":"pmh:oai:researchonline.ljmu.ac.uk:10033","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/10033/1/IML%20Paper%20v3.2%20%28ACM_SigConf%29.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},{"id":"pmh:wur:oai:library.wur.nl:wurpubs/573411","is_oa":false,"landing_page_url":"https://research.wur.nl/en/publications/a-study-into-data-analysis-and-visualisation-to-increase-the-cybe","pdf_url":null,"source":{"id":"https://openalex.org/S4306401843","display_name":"Data Archiving and Networked Services (DANS)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1322597698","host_organization_name":"Royal Netherlands Academy of Arts and Sciences","host_organization_lineage":["https://openalex.org/I1322597698"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Proceedings of the International Conference on Internet of Things and Machine Learning, IML 2017. Association for Computing Machinery","raw_type":"info:eu-repo/semantics/conferencepaper"}],"best_oa_location":{"id":"pmh:oai:researchonline.ljmu.ac.uk:10033","is_oa":true,"landing_page_url":null,"pdf_url":"https://researchonline.ljmu.ac.uk/id/eprint/10033/1/IML%20Paper%20v3.2%20%28ACM_SigConf%29.pdf","source":{"id":"https://openalex.org/S4306401246","display_name":"Liverpool John Moores University","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I63098007","host_organization_name":"Liverpool John Moores University","host_organization_lineage":["https://openalex.org/I63098007"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Conference or Workshop Item"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6399999856948853}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2804864889.pdf","grobid_xml":"https://content.openalex.org/works/W2804864889.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W1772652121","https://openalex.org/W1899230695","https://openalex.org/W1943579973","https://openalex.org/W1977311695","https://openalex.org/W1978302572","https://openalex.org/W1983294547","https://openalex.org/W1987380082","https://openalex.org/W2016423021","https://openalex.org/W2026830971","https://openalex.org/W2052936580","https://openalex.org/W2074742596","https://openalex.org/W2089892443","https://openalex.org/W2106096244","https://openalex.org/W2134487882","https://openalex.org/W2344510388","https://openalex.org/W2512306440","https://openalex.org/W2599180620"],"related_works":["https://openalex.org/W4320031223","https://openalex.org/W3015678314","https://openalex.org/W4281902577","https://openalex.org/W4200629851","https://openalex.org/W3009072493","https://openalex.org/W4386185023","https://openalex.org/W3214090987","https://openalex.org/W4389331041","https://openalex.org/W4237584680","https://openalex.org/W2923881152"],"abstract_inverted_index":{"In":[0],"May":[1],"2017,":[2],"a":[3,34,55,70,75,91,99,112,134,142,146,164],"global":[4],"ransomware":[5],"campaign":[6],"adversely":[7],"affected":[8],"approximately":[9],"48":[10],"UK":[11],"hospitals.":[12],"Response":[13],"to":[14,44,65,122,188,207,221],"the":[15,139,156,173,186,222,225,230,234],"WannaCry":[16],"cyber-attack":[17],"resulted":[18],"in":[19],"many":[20,86],"hospital":[21,128],"networks":[22],"being":[23,29],"taken":[24],"offline,":[25],"and":[26,82,111,179,193,215,236],"non-emergency":[27],"patients":[28],"refused":[30],"care.":[31],"This":[32],"is":[33,54,109,130,145,205],"clear":[35],"example":[36],"that":[37],"data":[38,170,177,192,213],"behaviour":[39,171],"within":[40,60,127],"healthcare":[41,61,106,208,226],"infrastructures":[42,68,129,209],"needs":[43],"be":[45,120,199],"monitored":[46],"for":[47],"malicious,":[48],"erratic":[49],"or":[50],"unusual":[51,169],"activity.":[52],"There":[53],"perceived":[56],"lack":[57,147],"of":[58,93,96,101,148,175,191,224,233],"threat":[59,72],"organisations":[62],"with":[63,74],"regards":[64],"cyber-security.":[66],"Hospital":[67],"present":[69],"unique":[71,110,231],"vector,":[73],"dependence":[76],"on":[77],"legacy":[78],"software,":[79],"medical":[80],"devices":[81],"bespoke":[83],"software.":[84],"Additionally,":[85],"PCs":[87],"are":[88],"shared":[89],"by":[90,210,228],"number":[92],"users,":[94],"all":[95,116],"whom":[97],"use":[98,174],"variety":[100],"disparate":[102],"IT":[103],"systems.":[104],"Every":[105],"infrastructure":[107,227],"configuration":[108,232],"one":[113],"size":[114],"fits":[115],"security":[117,149],"solution":[118],"cannot":[119],"applied":[121],"healthcare.":[123],"Existing":[124],"cyber-security":[125],"technology":[126],"typically":[131],"perimeter-focused.":[132],"Once":[133],"malicious":[135],"user":[136],"has":[137],"compromised":[138],"boundary":[140],"through":[141,172],"backdoor,":[143],"there":[144],"architecture":[150],"monitoring":[151],"active":[152],"potential":[153],"threats":[154],"inside":[155],"network.":[157],"Therefore,":[158],"this":[159],"paper":[160],"presents":[161],"research":[162],"towards":[163],"system,":[165],"which":[166,197],"can":[167,198],"detect":[168],"advanced":[176],"analytics":[178],"visualisation":[180],"techniques.":[181],"Machine":[182],"learning":[183,211],"algorithms":[184],"have":[185],"capability":[187],"learn":[189],"patterns":[190],"profile":[194],"users'":[195],"behaviour,":[196],"represented":[200],"visually.":[201],"The":[202,218],"proposed":[203],"system":[204,219],"tailored":[206],"typical":[212],"behaviours":[214],"profiling":[216],"users.":[217],"adds":[220],"defence-in-depth":[223],"understanding":[229],"network":[235],"autonomously":[237],"analysing.":[238]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}