{"id":"https://openalex.org/W4317209738","doi":"https://doi.org/10.1145/3579648","title":"Ransomware as a Predator: Modelling the Systemic Risk to Prey","display_name":"Ransomware as a Predator: Modelling the Systemic Risk to Prey","publication_year":2023,"publication_date":"2023-01-18","ids":{"openalex":"https://openalex.org/W4317209738","doi":"https://doi.org/10.1145/3579648"},"language":"en","primary_location":{"id":"doi:10.1145/3579648","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579648","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579648","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3579648","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037114496","display_name":"Louise Axon","orcid":"https://orcid.org/0000-0001-5979-7630"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Louise Axon","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0001-5979-7630","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048010539","display_name":"Arnau Erola","orcid":"https://orcid.org/0000-0002-3049-4430"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Arnau Erola","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0002-3049-4430","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061046049","display_name":"Ioannis Agrafiotis","orcid":"https://orcid.org/0000-0003-3747-339X"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ioannis Agrafiotis","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0003-3747-339X","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028853713","display_name":"Ganbayar Uuganbayar","orcid":"https://orcid.org/0000-0003-0392-8413"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ganbayar Uuganbayar","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0003-0392-8413","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063148097","display_name":"Michael Goldsmith","orcid":"https://orcid.org/0000-0001-7808-0600"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Michael Goldsmith","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0001-7808-0600","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004437304","display_name":"Sadie Creese","orcid":"https://orcid.org/0000-0002-2414-9657"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Sadie Creese","raw_affiliation_strings":["Department of Computer Science, University of Oxford, UK"],"raw_orcid":"https://orcid.org/0000-0002-2414-9657","affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Oxford, UK","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.0195,"has_fulltext":true,"cited_by_count":7,"citation_normalized_percentile":{"value":0.92095674,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"4","issue":"4","first_page":"1","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.994700014591217,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.989300012588501,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9825000166893005,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.6039080619812012},{"id":"https://openalex.org/keywords/harm","display_name":"Harm","score":0.5799325108528137},{"id":"https://openalex.org/keywords/cyberspace","display_name":"Cyberspace","score":0.5549535751342773},{"id":"https://openalex.org/keywords/systemic-risk","display_name":"Systemic risk","score":0.546838104724884},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.49610456824302673},{"id":"https://openalex.org/keywords/population","display_name":"Population","score":0.47460001707077026},{"id":"https://openalex.org/keywords/pace","display_name":"Pace","score":0.43693476915359497},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.41195225715637207},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3909482955932617},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.3825538158416748},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3367079496383667},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3353191912174225},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.32363495230674744},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.26449596881866455},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.15822237730026245},{"id":"https://openalex.org/keywords/financial-crisis","display_name":"Financial crisis","score":0.13450291752815247},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.1310955286026001},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.12588456273078918},{"id":"https://openalex.org/keywords/sociology","display_name":"Sociology","score":0.10721361637115479}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.6039080619812012},{"id":"https://openalex.org/C2777363581","wikidata":"https://www.wikidata.org/wiki/Q15098235","display_name":"Harm","level":2,"score":0.5799325108528137},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.5549535751342773},{"id":"https://openalex.org/C144587487","wikidata":"https://www.wikidata.org/wiki/Q1369234","display_name":"Systemic risk","level":3,"score":0.546838104724884},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.49610456824302673},{"id":"https://openalex.org/C2908647359","wikidata":"https://www.wikidata.org/wiki/Q2625603","display_name":"Population","level":2,"score":0.47460001707077026},{"id":"https://openalex.org/C2777526511","wikidata":"https://www.wikidata.org/wiki/Q691543","display_name":"Pace","level":2,"score":0.43693476915359497},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.41195225715637207},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3909482955932617},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3825538158416748},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3367079496383667},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3353191912174225},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.32363495230674744},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.26449596881866455},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.15822237730026245},{"id":"https://openalex.org/C2778300220","wikidata":"https://www.wikidata.org/wiki/Q114380","display_name":"Financial crisis","level":2,"score":0.13450291752815247},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.1310955286026001},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.12588456273078918},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.10721361637115479},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.0},{"id":"https://openalex.org/C149923435","wikidata":"https://www.wikidata.org/wiki/Q37732","display_name":"Demography","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C139719470","wikidata":"https://www.wikidata.org/wiki/Q39680","display_name":"Macroeconomics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3579648","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579648","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579648","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:a4b57927-bef8-4a17-ab53-ad7589a444d3","is_oa":true,"landing_page_url":"https://ora.ox.ac.uk/objects/uuid:a4b57927-bef8-4a17-ab53-ad7589a444d3","pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symplectic Elements","raw_type":"Journal article"}],"best_oa_location":{"id":"doi:10.1145/3579648","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3579648","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3579648","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4317209738.pdf","grobid_xml":"https://content.openalex.org/works/W4317209738.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W42525004","https://openalex.org/W1533181907","https://openalex.org/W1919244634","https://openalex.org/W1992075669","https://openalex.org/W2011866110","https://openalex.org/W2072619486","https://openalex.org/W2086640216","https://openalex.org/W2100180638","https://openalex.org/W2119359024","https://openalex.org/W2165151302","https://openalex.org/W2491607786","https://openalex.org/W2524919294","https://openalex.org/W2550109527","https://openalex.org/W2558577150","https://openalex.org/W2611230134","https://openalex.org/W2618247919","https://openalex.org/W2743483260","https://openalex.org/W2784113120","https://openalex.org/W2784705563","https://openalex.org/W2792200390","https://openalex.org/W2901088112","https://openalex.org/W2910382268","https://openalex.org/W2911311548","https://openalex.org/W2955105517","https://openalex.org/W2957305577","https://openalex.org/W2964522977","https://openalex.org/W2969472446","https://openalex.org/W2984258868","https://openalex.org/W3114189379","https://openalex.org/W4233765261","https://openalex.org/W4240504649","https://openalex.org/W4241377856","https://openalex.org/W4255011513","https://openalex.org/W4292156591","https://openalex.org/W4293742266","https://openalex.org/W6684333642"],"related_works":["https://openalex.org/W2368745349","https://openalex.org/W3201228709","https://openalex.org/W3167675181","https://openalex.org/W2131575257","https://openalex.org/W2922354075","https://openalex.org/W2372005904","https://openalex.org/W144012884","https://openalex.org/W2360897455","https://openalex.org/W2377660959","https://openalex.org/W3214090987"],"abstract_inverted_index":{"The":[0],"accelerated":[1],"pace":[2],"with":[3,133],"which":[4,194],"companies,":[5],"governments,":[6],"and":[7,113,210,213],"institutions":[8],"embrace":[9],"digital":[10,217],"transformation":[11],"is":[12],"creating":[13],"opportunities":[14],"for":[15],"economic":[16],"prosperity,":[17],"but":[18],"also":[19,143],"increases":[20],"the":[21,29,32,41,59,64,77,95,99,118,125,153,157,160,169,178,189,192,202,216],"threat":[22],"landscape.":[23],"Recent":[24],"orchestrated":[25],"cyber-attacks":[26],"have":[27],"revealed":[28],"unpredictability":[30],"of":[31,43,61,63,85,110,120,127,159,171,180,191,204,208,215],"harm":[33],"they":[34],"can":[35,93],"cause":[36],"in":[37,69,137],"our":[38],"society,":[39],"rendering":[40],"creation":[42],"new":[44],"models":[45,84],"that":[46,72,92,123,132],"capture":[47],"systemic":[48,96,220],"risk":[49],"more":[50,145],"critical":[51],"than":[52],"ever.":[53],"In":[54],"this":[55],"article,":[56],"we":[57,104,195],"model":[58,109,130],"behaviour":[60],"one":[62],"most":[65],"prominent":[66],"cyber-attacks:":[67],"ransomware;":[68],"particular,":[70],"ransomware":[71],"propagates":[73],"between":[74],"organisations":[75,172],"via":[76],"Internet.":[78],"We":[79],"draw":[80],"concepts":[81],"from":[82],"epidemiological":[83,108],"viral":[86],"propagation":[87,126],"to":[88,98,116,150,163,200],"reason":[89],"about":[90],"policies":[91,141],"reduce":[94,124,168],"cyber-risk":[97],"community.":[100],"To":[101],"achieve":[102],"this,":[103],"present":[105],"a":[106,205],"compartment-based":[107],"predator-prey":[111],"interactions":[112],"run":[114],"simulations":[115],"validate":[117],"importance":[119],"defensive":[121,135],"controls":[122,136],"ransomware.":[128],"Our":[129],"suggests":[131],"specific":[134],"place,":[138],"other":[139],"response":[140],"may":[142,155,167],"become":[144],"effective.":[146],"A":[147],"prey":[148],"policy":[149],"not":[151],"pay":[152],"ransom":[154],"improve":[156],"ability":[158],"victim":[161],"population":[162],"recover;":[164],"while":[165],"information-sharing":[166],"number":[170],"compromised":[173],"if":[174],"certain":[175],"conditions":[176],"on":[177,219],"speed":[179],"threat-intelligence":[181],"sharing":[182],"practices":[183],"are":[184],"met.":[185],"These":[186],"results":[187],"indicate":[188],"validity":[190],"approach,":[193],"believe":[196],"could":[197],"be":[198],"extended":[199],"explore":[201],"impacts":[203],"broad":[206],"range":[207],"attacker":[209],"defender":[211],"behaviours":[212],"characteristics":[214],"environment":[218],"risk.":[221]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":1},{"year":2023,"cited_by_count":2}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}