{"id":"https://openalex.org/W7129209498","doi":"https://doi.org/10.3390/systems14020213","title":"Anomaly Detection as a Key Driver of Digital Forensic Resilience: Empirical Evidence from Critical Infrastructure Experts","display_name":"Anomaly Detection as a Key Driver of Digital Forensic Resilience: Empirical Evidence from Critical Infrastructure Experts","publication_year":2026,"publication_date":"2026-02-17","ids":{"openalex":"https://openalex.org/W7129209498","doi":"https://doi.org/10.3390/systems14020213"},"language":"en","primary_location":{"id":"doi:10.3390/systems14020213","is_oa":true,"landing_page_url":"https://doi.org/10.3390/systems14020213","pdf_url":"https://www.mdpi.com/2079-8954/14/2/213/pdf","source":{"id":"https://openalex.org/S4210219410","display_name":"Systems","issn_l":"2079-8954","issn":["2079-8954"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2079-8954/14/2/213/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5121184380","display_name":"Marija Gombar","orcid":null},"institutions":[{"id":"https://openalex.org/I4210163234","display_name":"Combined Arms Academy of the Armed Forces of the Russian Federation","ror":"https://ror.org/0567jx130","country_code":"RU","type":"government","lineage":["https://openalex.org/I4210163234"]}],"countries":["RU"],"is_corresponding":false,"raw_author_name":"Marija Gombar","raw_affiliation_strings":["General Staff of the Armed Forces of the Republic of Croatia, 10000 Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0009-0000-8621-4007","affiliations":[{"raw_affiliation_string":"General Staff of the Armed Forces of the Republic of Croatia, 10000 Zagreb, Croatia","institution_ids":["https://openalex.org/I4210163234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082998712","display_name":"Darko Mo\u017enik","orcid":null},"institutions":[{"id":"https://openalex.org/I4210103466","display_name":"University of Applied Health Sciences","ror":"https://ror.org/019yxat94","country_code":"HR","type":"education","lineage":["https://openalex.org/I4210103466"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Darko Mo\u017enik","raw_affiliation_strings":["University of Applied Sciences, 10000 Zagreb, Croatia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Applied Sciences, 10000 Zagreb, Croatia","institution_ids":["https://openalex.org/I4210103466"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084275708","display_name":"Mirjana Peji\u0107 Bach","orcid":"https://orcid.org/0000-0003-3899-6707"},"institutions":[{"id":"https://openalex.org/I181343428","display_name":"University of Zagreb","ror":"https://ror.org/00mv6sv71","country_code":"HR","type":"education","lineage":["https://openalex.org/I181343428"]}],"countries":["HR"],"is_corresponding":false,"raw_author_name":"Mirjana Peji\u0107 Bach","raw_affiliation_strings":["Faculty of Economics and Business, University of Zagreb, 10000 Zagreb, Croatia"],"raw_orcid":"https://orcid.org/0000-0003-3899-6707","affiliations":[{"raw_affiliation_string":"Faculty of Economics and Business, University of Zagreb, 10000 Zagreb, Croatia","institution_ids":["https://openalex.org/I181343428"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.19378184,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":"2","first_page":"213","last_page":"213"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.4823000133037567,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.4823000133037567,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.0681999996304512,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.03819999843835831,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.6797999739646912},{"id":"https://openalex.org/keywords/digital-forensics","display_name":"Digital forensics","score":0.6607999801635742},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"Digital evidence","score":0.6370999813079834},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5751000046730042},{"id":"https://openalex.org/keywords/corporate-governance","display_name":"Corporate governance","score":0.47290000319480896},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.43140000104904175},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.4205999970436096},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.4117000102996826},{"id":"https://openalex.org/keywords/empirical-evidence","display_name":"Empirical evidence","score":0.4059000015258789},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.40149998664855957}],"concepts":[{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.6797999739646912},{"id":"https://openalex.org/C84418412","wikidata":"https://www.wikidata.org/wiki/Q3246940","display_name":"Digital forensics","level":2,"score":0.6607999801635742},{"id":"https://openalex.org/C2781357168","wikidata":"https://www.wikidata.org/wiki/Q5276084","display_name":"Digital evidence","level":3,"score":0.6370999813079834},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5751000046730042},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5342000126838684},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.4819999933242798},{"id":"https://openalex.org/C39389867","wikidata":"https://www.wikidata.org/wiki/Q380767","display_name":"Corporate governance","level":2,"score":0.47290000319480896},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4494999945163727},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4390000104904175},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.43140000104904175},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.4205999970436096},{"id":"https://openalex.org/C56739046","wikidata":"https://www.wikidata.org/wiki/Q192060","display_name":"Knowledge management","level":1,"score":0.4185999929904938},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4117000102996826},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.4059000015258789},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.40149998664855957},{"id":"https://openalex.org/C2767350","wikidata":"https://www.wikidata.org/wiki/Q6662173","display_name":"Business intelligence","level":2,"score":0.35830000042915344},{"id":"https://openalex.org/C2780795517","wikidata":"https://www.wikidata.org/wiki/Q6030997","display_name":"Information assurance","level":3,"score":0.3540000021457672},{"id":"https://openalex.org/C165609540","wikidata":"https://www.wikidata.org/wiki/Q1172486","display_name":"Data breach","level":2,"score":0.3522000014781952},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.34769999980926514},{"id":"https://openalex.org/C2780073145","wikidata":"https://www.wikidata.org/wiki/Q2663158","display_name":"Forensic accounting","level":3,"score":0.33970001339912415},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.33489999175071716},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.31470000743865967},{"id":"https://openalex.org/C196879817","wikidata":"https://www.wikidata.org/wiki/Q872685","display_name":"Data governance","level":4,"score":0.30329999327659607},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C189922023","wikidata":"https://www.wikidata.org/wiki/Q17056348","display_name":"Information governance","level":4,"score":0.2939000129699707},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.2856000065803528},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C123201435","wikidata":"https://www.wikidata.org/wiki/Q456632","display_name":"Information privacy","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2773999869823456},{"id":"https://openalex.org/C539667460","wikidata":"https://www.wikidata.org/wiki/Q2414942","display_name":"Management science","level":1,"score":0.26750001311302185},{"id":"https://openalex.org/C184356942","wikidata":"https://www.wikidata.org/wiki/Q830382","display_name":"Best practice","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.26350000500679016},{"id":"https://openalex.org/C46295352","wikidata":"https://www.wikidata.org/wiki/Q207982","display_name":"Legitimacy","level":3,"score":0.26249998807907104},{"id":"https://openalex.org/C105409693","wikidata":"https://www.wikidata.org/wiki/Q5937824","display_name":"Human intelligence","level":2,"score":0.2623000144958496},{"id":"https://openalex.org/C174107131","wikidata":"https://www.wikidata.org/wiki/Q191591","display_name":"Emotional intelligence","level":2,"score":0.25769999623298645},{"id":"https://openalex.org/C2776876444","wikidata":"https://www.wikidata.org/wiki/Q2845200","display_name":"Crime analysis","level":2,"score":0.2535000145435333}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/systems14020213","is_oa":true,"landing_page_url":"https://doi.org/10.3390/systems14020213","pdf_url":"https://www.mdpi.com/2079-8954/14/2/213/pdf","source":{"id":"https://openalex.org/S4210219410","display_name":"Systems","issn_l":"2079-8954","issn":["2079-8954"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Systems","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e29d9bbb640344baaddc1d64d08fb0ff","is_oa":false,"landing_page_url":"https://doaj.org/article/e29d9bbb640344baaddc1d64d08fb0ff","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Systems, Vol 14, Iss 2, p 213 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/systems14020213","is_oa":true,"landing_page_url":"https://doi.org/10.3390/systems14020213","pdf_url":"https://www.mdpi.com/2079-8954/14/2/213/pdf","source":{"id":"https://openalex.org/S4210219410","display_name":"Systems","issn_l":"2079-8954","issn":["2079-8954"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5539131760597229,"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W7129209498.pdf"},"referenced_works_count":30,"referenced_works":["https://openalex.org/W56248525","https://openalex.org/W1640628807","https://openalex.org/W1975806532","https://openalex.org/W1980300379","https://openalex.org/W1985987493","https://openalex.org/W2046381157","https://openalex.org/W2080453063","https://openalex.org/W2122646361","https://openalex.org/W2134904490","https://openalex.org/W2135930857","https://openalex.org/W2162357792","https://openalex.org/W2232870322","https://openalex.org/W2254046393","https://openalex.org/W2289010250","https://openalex.org/W2529251251","https://openalex.org/W2620229640","https://openalex.org/W2741259555","https://openalex.org/W2769968138","https://openalex.org/W2787894218","https://openalex.org/W2791059564","https://openalex.org/W2795529671","https://openalex.org/W2797855251","https://openalex.org/W2911123865","https://openalex.org/W2919115771","https://openalex.org/W3138419783","https://openalex.org/W4211026853","https://openalex.org/W4319317810","https://openalex.org/W4390271440","https://openalex.org/W4402513146","https://openalex.org/W4413918520"],"related_works":[],"abstract_inverted_index":{"Ensuring":[0],"strategic":[1,180],"resilience":[2,44,198],"in":[3,147,169,199],"critical":[4,91],"infrastructures":[5],"supported":[6],"with":[7,143],"a":[8,33],"machine":[9],"learning":[10],"approach":[11],"requires":[12],"moving":[13],"beyond":[14],"compliance":[15],"checklists":[16],"and":[17,72,75,107,126,138,151,164,196,204],"post-incident":[18],"analysis":[19],"toward":[20],"proactive,":[21],"intelligence-based":[22],"approaches.":[23],"This":[24],"study":[25,55,173],"introduces":[26],"the":[27,43,54,57,60,108,115,135,148,154,158,161,165,176],"Forensic":[28],"Resilience":[29],"Operational":[30],"Model":[31],"(FROM),":[32],"systems":[34],"thinking":[35],"framework":[36],"designed":[37],"to":[38,62,103,118,175],"embed":[39],"forensic":[40,80,119,127,188],"intelligence":[41,77,124,189],"into":[42],"cycle":[45],"of":[46,59,140,160,178],"complex":[47],"socio-technical":[48],"systems.":[49],"To":[50],"quantify":[51],"this":[52],"integration,":[53],"investigates":[56],"determinants":[58],"extent":[61],"which":[63],"four":[64],"operational":[65,166],"pillars":[66],"(forensic":[67],"readiness,":[68],"anomaly":[69,112],"detection,":[70],"governance":[71],"privacy":[73],"safeguards,":[74,130],"structured":[76,123],"integration)":[78],"affect":[79],"resilience,":[81,120],"using":[82],"empirical":[83],"survey":[84],"data":[85],"from":[86],"212":[87],"cybersecurity":[88],"professionals":[89],"across":[90],"infrastructure":[92],"sectors.":[93],"We":[94],"deploy":[95],"Partial":[96],"Least":[97],"Squares":[98],"Structural":[99],"Equation":[100],"Modelling":[101],"(PLS-SEM)":[102],"investigate":[104],"these":[105],"relationships,":[106],"results":[109],"confirm":[110],"that":[111],"detection":[113],"is":[114],"strongest":[116],"contributor":[117],"followed":[121],"by":[122,182,202],"integration":[125],"readiness.":[128],"Governance":[129],"while":[131],"comparatively":[132],"weaker,":[133],"provide":[134],"necessary":[136],"legitimacy":[137],"assurance":[139],"compliance.":[141],"Supported":[142],"sector-specific":[144],"case":[145],"studies":[146],"maritime,":[149],"financial,":[150],"CERT":[152],"domains,":[153],"findings":[155],"highlight":[156],"both":[157],"adaptability":[159],"proposed":[162],"FROM":[163],"constraints":[167],"encountered":[168],"real-world":[170],"contexts.":[171],"The":[172],"contributes":[174],"field":[177],"systems-oriented":[179],"management":[181],"demonstrating":[183],"that,":[184],"when":[185],"systematically":[186],"embedded,":[187],"enhances":[190],"adaptive":[191],"capacity,":[192],"supports":[193],"predictive":[194],"decision-making,":[195],"strengthens":[197],"environments":[200],"characterized":[201],"uncertainty":[203],"high":[205],"complexity.":[206]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-02-18T00:00:00"}