{"id":"https://openalex.org/W4407099811","doi":"https://doi.org/10.3390/jcp5010005","title":"Mitigating Malicious Insider Threats to Common Data Environments in the Architecture, Engineering, and Construction Industry: An Incomplete Information Game Approach","display_name":"Mitigating Malicious Insider Threats to Common Data Environments in the Architecture, Engineering, and Construction Industry: An Incomplete Information Game Approach","publication_year":2025,"publication_date":"2025-01-31","ids":{"openalex":"https://openalex.org/W4407099811","doi":"https://doi.org/10.3390/jcp5010005"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5010005","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5010005","pdf_url":null,"source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/jcp5010005","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085714710","display_name":"K. C. Lalropuia","orcid":null},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"KC Lalropuia","raw_affiliation_strings":["S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates"],"raw_orcid":"https://orcid.org/0009-0008-4861-602X","affiliations":[{"raw_affiliation_string":"S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028124704","display_name":"S. B. Goyal","orcid":"https://orcid.org/0000-0002-9827-5998"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I241749","display_name":"University of Cambridge","ror":"https://ror.org/013meh722","country_code":"GB","type":"education","lineage":["https://openalex.org/I241749"]}],"countries":["AE","GB"],"is_corresponding":false,"raw_author_name":"Sanjeev Goyal","raw_affiliation_strings":["Division of Social Science, New York University Abu Dhabi (NYUAD), Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","Faculty of Economics, University of Cambridge, Cambridge CB3 9DD, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Division of Social Science, New York University Abu Dhabi (NYUAD), Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]},{"raw_affiliation_string":"Faculty of Economics, University of Cambridge, Cambridge CB3 9DD, UK","institution_ids":["https://openalex.org/I241749"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025466195","display_name":"Borja Garc\u00eda de Soto","orcid":"https://orcid.org/0000-0002-9613-8105"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["AE","US"],"is_corresponding":false,"raw_author_name":"Borja Garc\u00eda de Soto","raw_affiliation_strings":["Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-9613-8105","affiliations":[{"raw_affiliation_string":"Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102529485","display_name":"Dongchi Yao","orcid":null},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["AE","US"],"is_corresponding":false,"raw_author_name":"Dongchi Yao","raw_affiliation_strings":["Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066373167","display_name":"Muammer Semih Sonkor","orcid":"https://orcid.org/0000-0002-6851-2462"},"institutions":[{"id":"https://openalex.org/I120250893","display_name":"New York University Abu Dhabi","ror":"https://ror.org/00e5k0821","country_code":"AE","type":"education","lineage":["https://openalex.org/I120250893","https://openalex.org/I57206974"]},{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["AE","US"],"is_corresponding":false,"raw_author_name":"Muammer Semih Sonkor","raw_affiliation_strings":["Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-6851-2462","affiliations":[{"raw_affiliation_string":"Department of Civil and Urban Engineering, Tandon School of Engineering, New York University (NYU), 6 MetroTech Center, Brooklyn, NY 11201, USA","institution_ids":["https://openalex.org/I57206974"]},{"raw_affiliation_string":"S.M.A.R.T. Construction Research Group, Division of Engineering, New York University Abu Dhabi (NYUAD), Experimental Research Building, Saadiyat Island, Abu Dhabi P.O. Box 129188, United Arab Emirates","institution_ids":["https://openalex.org/I120250893"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1000,"currency":"CHF","value_usd":1082},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1082},"fwci":9.4357,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.97218396,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":98},"biblio":{"volume":"5","issue":"1","first_page":"5","last_page":"5"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9821000099182129,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14222","display_name":"Knowledge Management and Technology","score":0.9114000201225281,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7935359477996826},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6779345273971558},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.6637900471687317},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.6153172254562378},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5198769569396973},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.47895389795303345},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.3336013853549957},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.262203186750412},{"id":"https://openalex.org/keywords/geography","display_name":"Geography","score":0.08288747072219849},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.07581484317779541}],"concepts":[{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7935359477996826},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6779345273971558},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.6637900471687317},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.6153172254562378},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5198769569396973},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.47895389795303345},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3336013853549957},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.262203186750412},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.08288747072219849},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.07581484317779541},{"id":"https://openalex.org/C166957645","wikidata":"https://www.wikidata.org/wiki/Q23498","display_name":"Archaeology","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.3390/jcp5010005","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5010005","pdf_url":null,"source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:www.repository.cam.ac.uk:1810/380167","is_oa":true,"landing_page_url":"https://www.repository.cam.ac.uk/handle/1810/380167","pdf_url":"https://www.repository.cam.ac.uk/bitstreams/70a754f5-c237-4b65-b5b4-e2dc6c24fb1f/download","source":{"id":"https://openalex.org/S4306401777","display_name":"Apollo (University of Cambridge)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I241749","host_organization_name":"University of Cambridge","host_organization_lineage":["https://openalex.org/I241749"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:doaj.org/article:197b54e33e5a4bdb805b6d021d03a802","is_oa":true,"landing_page_url":"https://doaj.org/article/197b54e33e5a4bdb805b6d021d03a802","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 1, p 5 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5010005","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5010005","pdf_url":null,"source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3288531224","display_name":null,"funder_award_id":"CG001","funder_id":"https://openalex.org/F4320330069","funder_display_name":"Tamkeen"},{"id":"https://openalex.org/G8329161897","display_name":null,"funder_award_id":"G1104","funder_id":"https://openalex.org/F4320330069","funder_display_name":"Tamkeen"}],"funders":[{"id":"https://openalex.org/F4320330069","display_name":"Tamkeen","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":40,"referenced_works":["https://openalex.org/W1516944209","https://openalex.org/W1517577173","https://openalex.org/W1533945010","https://openalex.org/W1980166725","https://openalex.org/W2013946142","https://openalex.org/W2025519999","https://openalex.org/W2041064082","https://openalex.org/W2067064328","https://openalex.org/W2099420981","https://openalex.org/W2104121196","https://openalex.org/W2125210100","https://openalex.org/W2491574786","https://openalex.org/W2512189246","https://openalex.org/W2560934771","https://openalex.org/W2605424251","https://openalex.org/W2616464561","https://openalex.org/W2884249540","https://openalex.org/W2888160480","https://openalex.org/W2913916845","https://openalex.org/W2976051608","https://openalex.org/W3030742098","https://openalex.org/W3086964227","https://openalex.org/W3092155847","https://openalex.org/W3103646080","https://openalex.org/W3113580044","https://openalex.org/W3115689709","https://openalex.org/W3143551070","https://openalex.org/W3192593320","https://openalex.org/W3202156390","https://openalex.org/W3211182767","https://openalex.org/W3211517764","https://openalex.org/W4210819127","https://openalex.org/W4213229078","https://openalex.org/W4225420123","https://openalex.org/W4284679565","https://openalex.org/W4285082167","https://openalex.org/W4288083473","https://openalex.org/W4309234552","https://openalex.org/W4382808986","https://openalex.org/W4400915556"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"Common":[0],"data":[1,68,157],"environments":[2],"(CDEs)":[3],"are":[4],"centralized":[5],"repositories":[6],"in":[7],"the":[8,71,87,91,146,160],"architecture,":[9],"engineering,":[10],"and":[11,19,62,67,76,110,122,155],"construction":[12,163],"(AEC)":[13],"industry":[14],"designed":[15],"to":[16,93,105,145],"improve":[17],"collaboration":[18],"project":[20,126],"efficiency.":[21],"However,":[22],"CDEs":[23],"hosted":[24],"on":[25],"cloud":[26],"platforms":[27],"face":[28],"significant":[29],"risks":[30],"from":[31],"insider":[32,97,108],"threats,":[33],"as":[34],"stakeholders":[35],"with":[36,124,152],"legitimate":[37],"access":[38],"may":[39],"act":[40,78],"maliciously.":[41],"To":[42],"address":[43],"these":[44],"vulnerabilities,":[45],"we":[46,128],"developed":[47],"a":[48],"game-theoretic":[49],"framework":[50],"using":[51],"Bayesian":[52,102],"games":[53],"that":[54],"account":[55],"for":[56,115],"incomplete":[57],"information,":[58],"modeling":[59],"both":[60],"simultaneous":[61,72],"sequential":[63,88],"interactions":[64],"between":[65],"insiders":[66,75],"defenders.":[69],"In":[70],"move":[73],"game,":[74],"defenders":[77],"without":[79],"prior":[80],"knowledge":[81],"of":[82],"each":[83],"other\u2019s":[84],"decisions,":[85],"while":[86],"game":[89],"allows":[90],"defender":[92],"respond":[94],"after":[95],"observing":[96],"actions.":[98],"Our":[99,136],"analysis":[100],"used":[101],"Nash":[103],"Equilibrium":[104],"predict":[106],"malicious":[107],"behavior":[109],"identify":[111],"optimal":[112],"defense":[113],"strategies":[114,143],"safeguarding":[116],"CDE":[117],"data.":[118],"Through":[119],"simulation":[120],"experiments":[121],"validation":[123],"real":[125],"data,":[127],"illustrate":[129],"how":[130],"various":[131],"parameters":[132],"affect":[133],"insider\u2013defender":[134],"dynamics.":[135],"results":[137],"provide":[138],"insights":[139],"into":[140],"effective":[141],"cybersecurity":[142],"tailored":[144],"AEC":[147],"sector,":[148],"bridging":[149],"theoretical":[150],"models":[151],"practical":[153],"applications":[154],"supporting":[156],"security":[158],"within":[159],"increasingly":[161],"digitalized":[162],"industry.":[164]},"counts_by_year":[{"year":2025,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}