{"id":"https://openalex.org/W4319921249","doi":"https://doi.org/10.1145/3579647","title":"The Economics of Ransomware Attacks on Integrated Supply Chain Networks","display_name":"The Economics of Ransomware Attacks on Integrated Supply Chain Networks","publication_year":2023,"publication_date":"2023-02-10","ids":{"openalex":"https://openalex.org/W4319921249","doi":"https://doi.org/10.1145/3579647"},"language":"en","primary_location":{"id":"doi:10.1145/3579647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579647","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579647","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3579647","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5103091719","display_name":"Anna Cartwright","orcid":"https://orcid.org/0000-0003-1965-842X"},"institutions":[{"id":"https://openalex.org/I124261462","display_name":"Oxford Brookes University","ror":"https://ror.org/04v2twj65","country_code":"GB","type":"education","lineage":["https://openalex.org/I124261462"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Anna Cartwright","raw_affiliation_strings":["Oxford Brookes University, UK"],"raw_orcid":"https://orcid.org/0000-0003-1965-842X","affiliations":[{"raw_affiliation_string":"Oxford Brookes University, UK","institution_ids":["https://openalex.org/I124261462"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101430075","display_name":"Edward Cartwright","orcid":"https://orcid.org/0000-0003-0194-9368"},"institutions":[{"id":"https://openalex.org/I66943878","display_name":"De Montfort University","ror":"https://ror.org/0312pnr83","country_code":"GB","type":"education","lineage":["https://openalex.org/I66943878"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Edward Cartwright","raw_affiliation_strings":["De Montfort University, UK"],"raw_orcid":"https://orcid.org/0000-0003-0194-9368","affiliations":[{"raw_affiliation_string":"De Montfort University, UK","institution_ids":["https://openalex.org/I66943878"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":6.9875,"has_fulltext":true,"cited_by_count":17,"citation_normalized_percentile":{"value":0.96870997,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"4","issue":"4","first_page":"1","last_page":"14"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9975000023841858,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9941999912261963,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11838","display_name":"Crime, Illicit Activities, and Governance","score":0.9919000267982483,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransom","display_name":"Ransom","score":0.9895654916763306},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.7783414125442505},{"id":"https://openalex.org/keywords/supply-chain","display_name":"Supply chain","score":0.6035133600234985},{"id":"https://openalex.org/keywords/nash-equilibrium","display_name":"Nash equilibrium","score":0.5589402318000793},{"id":"https://openalex.org/keywords/production","display_name":"Production (economics)","score":0.5201064348220825},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.48730695247650146},{"id":"https://openalex.org/keywords/supply-chain-network","display_name":"Supply chain network","score":0.4428856670856476},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.4248381555080414},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3905913829803467},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.3066630959510803},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.28810882568359375},{"id":"https://openalex.org/keywords/supply-chain-management","display_name":"Supply chain management","score":0.2830609083175659},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.27103573083877563},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.2283606231212616},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.0875108540058136},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.08011096715927124}],"concepts":[{"id":"https://openalex.org/C2781426709","wikidata":"https://www.wikidata.org/wiki/Q1414572","display_name":"Ransom","level":2,"score":0.9895654916763306},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.7783414125442505},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.6035133600234985},{"id":"https://openalex.org/C46814582","wikidata":"https://www.wikidata.org/wiki/Q23389","display_name":"Nash equilibrium","level":2,"score":0.5589402318000793},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.5201064348220825},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.48730695247650146},{"id":"https://openalex.org/C2778397037","wikidata":"https://www.wikidata.org/wiki/Q17083947","display_name":"Supply chain network","level":4,"score":0.4428856670856476},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.4248381555080414},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3905913829803467},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.3066630959510803},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.28810882568359375},{"id":"https://openalex.org/C44104985","wikidata":"https://www.wikidata.org/wiki/Q492886","display_name":"Supply chain management","level":3,"score":0.2830609083175659},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.27103573083877563},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2283606231212616},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0875108540058136},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.08011096715927124},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3579647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579647","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579647","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:dora.dmu.ac.uk:2086/22512","is_oa":true,"landing_page_url":"https://dora.dmu.ac.uk/bitstreams/4a322c19-8846-4e3b-bc59-5fd3bee06ede/download","pdf_url":null,"source":{"id":"https://openalex.org/S4306400394","display_name":"DMU Open Research Archive (De Montfort University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I66943878","host_organization_name":"De Montfort University","host_organization_lineage":["https://openalex.org/I66943878"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1145/3579647","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579647","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579647","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.699999988079071}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4319921249.pdf","grobid_xml":"https://content.openalex.org/works/W4319921249.grobid-xml"},"referenced_works_count":40,"referenced_works":["https://openalex.org/W1873451419","https://openalex.org/W1970874729","https://openalex.org/W2008109438","https://openalex.org/W2028935267","https://openalex.org/W2082372830","https://openalex.org/W2259909495","https://openalex.org/W2339514484","https://openalex.org/W2534101229","https://openalex.org/W2614042168","https://openalex.org/W2625118300","https://openalex.org/W2735211357","https://openalex.org/W2767251818","https://openalex.org/W2895315762","https://openalex.org/W2897352249","https://openalex.org/W2913133178","https://openalex.org/W2913425332","https://openalex.org/W2914141784","https://openalex.org/W2922053207","https://openalex.org/W2948913639","https://openalex.org/W2955105517","https://openalex.org/W2960902621","https://openalex.org/W2963054141","https://openalex.org/W2964769731","https://openalex.org/W2972705049","https://openalex.org/W2981562194","https://openalex.org/W3009452534","https://openalex.org/W3092762857","https://openalex.org/W3094233237","https://openalex.org/W3114189379","https://openalex.org/W3122745812","https://openalex.org/W3125106342","https://openalex.org/W3126171625","https://openalex.org/W3145878140","https://openalex.org/W3159464979","https://openalex.org/W4212929843","https://openalex.org/W4250540688","https://openalex.org/W4397012138","https://openalex.org/W6784494120","https://openalex.org/W6790188931","https://openalex.org/W7014886839"],"related_works":["https://openalex.org/W4237045072","https://openalex.org/W4386388924","https://openalex.org/W2614042168","https://openalex.org/W2778994855","https://openalex.org/W4285276936","https://openalex.org/W4281476659","https://openalex.org/W4213358345","https://openalex.org/W4206259164","https://openalex.org/W2989970626","https://openalex.org/W3108884672"],"abstract_inverted_index":{"We":[0,89,110,126],"explore":[1],"the":[2,35,37,52,60,69,83,86,129,132,139,144,147],"economics":[3],"of":[4,85,95,107,143],"ransomware":[5],"on":[6,98],"production":[7,87],"supply":[8,11,100],"chains.":[9],"Integrated":[10],"chains":[12],"result":[13],"in":[14,34,59,75,138],"a":[15,73,79,91,99,113,123,152,160],"mutual-dependence":[16],"between":[17],"firms":[18,43],"that":[19,29,128],"can":[20,39,134],"be":[21,66],"exploited":[22],"by":[23,30],"cyber-criminals.":[24],"For":[25,62],"instance,":[26,63],"we":[27],"show":[28],"targeting":[31],"one":[32],"firm":[33],"network":[36,156],"criminals":[38,53,133],"potentially":[40],"hold":[41],"multiple":[42],"to":[44,54,71,77],"ransom.":[45],"Overlapping":[46],"security":[47],"systems":[48],"may":[49,65],"also":[50],"allow":[51],"strike":[55],"at":[56,82],"weak":[57],"points":[58],"network.":[61,88,145,162],"it":[64],"optimal":[67],"for":[68,104,122,151,159],"attacker":[70],"target":[72],"supplier":[74],"order":[76],"ransom":[78,131,148],"large":[80],"producer":[81],"heart":[84],"introduce":[90],"game":[92],"theoretic":[93],"model":[94],"an":[96],"attack":[97],"chain":[101],"and":[102,115,154,157],"solve":[103],"two":[105],"types":[106],"Nash":[108],"equilibria.":[109],"then":[111],"study":[112],"hub":[114,153],"spoke":[116,155],"example":[117],"before":[118],"providing":[119],"simulation":[120],"results":[121],"general":[124],"case.":[125],"find":[127],"total":[130],"demand":[135],"is":[136,149],"increasing":[137],"average":[140],"path":[141],"length":[142],"Thus,":[146],"lowest":[150],"highest":[158],"line":[161],"Mitigation":[163],"strategies":[164],"are":[165],"discussed.":[166]},"counts_by_year":[{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":4}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2023-02-11T00:00:00"}