{"id":"https://openalex.org/W7161600600","doi":"https://doi.org/10.48550/arxiv.2605.16167","title":"From Backup Restoration to Minimum Viable Factory Recovery: A Systematization of Ransomware Recovery in Manufacturing Systems","display_name":"From Backup Restoration to Minimum Viable Factory Recovery: A Systematization of Ransomware Recovery in Manufacturing Systems","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161600600","doi":"https://doi.org/10.48550/arxiv.2605.16167"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16167","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16167","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16167","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5086238674","display_name":"Chun Yin Chiu","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Chiu, Chun Yin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5086238674"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.15809999406337738,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.15809999406337738,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.09430000185966492,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.07720000296831131,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/backup","display_name":"Backup","score":0.8808000087738037},{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.7347999811172485},{"id":"https://openalex.org/keywords/factory","display_name":"Factory (object-oriented programming)","score":0.5220000147819519},{"id":"https://openalex.org/keywords/government","display_name":"Government (linguistics)","score":0.4932999908924103},{"id":"https://openalex.org/keywords/disaster-recovery","display_name":"Disaster recovery","score":0.4494999945163727},{"id":"https://openalex.org/keywords/production","display_name":"Production (economics)","score":0.4472000002861023},{"id":"https://openalex.org/keywords/business-continuity","display_name":"Business continuity","score":0.4447000026702881},{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.44369998574256897},{"id":"https://openalex.org/keywords/dependency","display_name":"Dependency (UML)","score":0.426800012588501},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.37139999866485596}],"concepts":[{"id":"https://openalex.org/C2780945871","wikidata":"https://www.wikidata.org/wiki/Q194274","display_name":"Backup","level":2,"score":0.8808000087738037},{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.7347999811172485},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5324000120162964},{"id":"https://openalex.org/C40149104","wikidata":"https://www.wikidata.org/wiki/Q5620977","display_name":"Factory (object-oriented programming)","level":2,"score":0.5220000147819519},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.4932999908924103},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4779999852180481},{"id":"https://openalex.org/C129230348","wikidata":"https://www.wikidata.org/wiki/Q1140205","display_name":"Disaster recovery","level":2,"score":0.4494999945163727},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.4472000002861023},{"id":"https://openalex.org/C2778143579","wikidata":"https://www.wikidata.org/wiki/Q831801","display_name":"Business continuity","level":2,"score":0.4447000026702881},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.44369998574256897},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.426800012588501},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.37139999866485596},{"id":"https://openalex.org/C165136773","wikidata":"https://www.wikidata.org/wiki/Q1363179","display_name":"Single point of failure","level":2,"score":0.36970001459121704},{"id":"https://openalex.org/C180591934","wikidata":"https://www.wikidata.org/wiki/Q1253369","display_name":"Downtime","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C2778420936","wikidata":"https://www.wikidata.org/wiki/Q7247843","display_name":"Production schedule","level":3,"score":0.33180001378059387},{"id":"https://openalex.org/C68387754","wikidata":"https://www.wikidata.org/wiki/Q7271585","display_name":"Schedule","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.31690001487731934},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3156999945640564},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3156000077724457},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.3138999938964844},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.30660000443458557},{"id":"https://openalex.org/C23725684","wikidata":"https://www.wikidata.org/wiki/Q616377","display_name":"Maintenance engineering","level":2,"score":0.3041999936103821},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C175700187","wikidata":"https://www.wikidata.org/wiki/Q187939","display_name":"Manufacturing","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C21547014","wikidata":"https://www.wikidata.org/wiki/Q1423657","display_name":"Operations management","level":1,"score":0.28859999775886536},{"id":"https://openalex.org/C2776543023","wikidata":"https://www.wikidata.org/wiki/Q2147046","display_name":"Rework","level":2,"score":0.28450000286102295},{"id":"https://openalex.org/C2777381055","wikidata":"https://www.wikidata.org/wiki/Q308922","display_name":"Damages","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C195094911","wikidata":"https://www.wikidata.org/wiki/Q14167904","display_name":"Process management","level":1,"score":0.27320000529289246},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C108713360","wikidata":"https://www.wikidata.org/wiki/Q1824206","display_name":"Supply chain","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C2779033394","wikidata":"https://www.wikidata.org/wiki/Q5186733","display_name":"Critical infrastructure protection","level":3,"score":0.2533999979496002},{"id":"https://openalex.org/C185874996","wikidata":"https://www.wikidata.org/wiki/Q269699","display_name":"Interdependence","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C2777986313","wikidata":"https://www.wikidata.org/wiki/Q1661989","display_name":"Industry 4.0","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16167","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16167","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16167","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16167","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.6803332567214966}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Ransomware":[0],"recovery":[1,57,93,179,196],"in":[2,197],"critical":[3,198],"manufacturing":[4,55,199],"infrastructure":[5],"is":[6,160,189],"not":[7],"only":[8],"a":[9,28,59,67,166,178],"backup-restoration":[10],"problem.":[11,64],"Production":[12],"capability":[13,116,142],"depends":[14],"on":[15],"coupled":[16],"information-technology,":[17],"operational-technology,":[18],"physical-process,":[19],"quality,":[20],"logistics,":[21],"identity,":[22,151],"and":[23,62,75,83,101,121,138,155,181],"supplier":[24,122,156],"systems.":[25],"After":[26],"ransomware,":[27],"plant":[29],"may":[30],"rebuild":[31],"servers":[32],"yet":[33],"remain":[34],"unable":[35],"to":[36],"schedule":[37],"work,":[38],"authenticate":[39],"operators,":[40],"trust":[41,105],"engineering":[42],"workstations,":[43],"release":[44],"product,":[45],"reconnect":[46],"OT":[47,111],"assets,":[48],"or":[49,172],"coordinate":[50],"suppliers.":[51],"This":[52],"paper":[53,176],"reframes":[54],"ransomware":[56,195],"as":[58,184],"critical-infrastructure":[60],"continuity":[61],"interdependency":[63],"We":[65,125],"conduct":[66],"PRISMA-guided":[68],"multivocal":[69],"review":[70,89],"of":[71,108,168],"academic":[72],"literature,":[73],"standards":[74],"government":[76],"guidance,":[77],"threat":[78],"frameworks,":[79],"public":[80],"incident":[81],"material,":[82],"verified":[84],"full-text/source-page":[85],"evidence":[86],"anchors.":[87],"The":[88,175,187],"identifies":[90],"nine":[91],"evidence-backed":[92],"failure":[94],"modes:":[95],"dependency":[96,123],"blindness,":[97],"untrusted":[98],"restore":[99],"point":[100],"backup":[102],"over-trust,":[103],"identity":[104],"collapse,":[106],"lack":[107],"proof-of-recovery,":[109],"unsafe":[110],"reconnection,":[112],"segmentation":[113],"assumption":[114],"failure,":[115],"mismatch,":[117],"unmanaged":[118],"degraded":[119],"operation,":[120],"failure.":[124],"then":[126],"introduce":[127],"Minimum":[128],"Viable":[129],"Factory":[130],"Recovery":[131,159],"(MVF":[132],"Recovery):":[133],"the":[134],"smallest":[135],"safe,":[136],"trusted,":[137],"operationally":[139],"meaningful":[140],"production":[141],"that":[143],"can":[144],"be":[145],"resumed":[146],"under":[147],"current":[148],"dependency,":[149],"evidence,":[150],"data,":[152],"network,":[153],"OT,":[154],"constraints.":[157],"MVF":[158],"an":[161,190],"analytical":[162],"objective":[163],"rather":[164],"than":[165],"claim":[167],"full":[169],"recovery,":[170],"implementation,":[171],"safety":[173],"certification.":[174],"derives":[177],"lifecycle":[180],"benchmarking":[182],"directions":[183],"secondary":[185],"outputs.":[186],"contribution":[188],"evidence-calibrated":[191],"foundation":[192],"for":[193],"capability-centric":[194],"infrastructure.":[200]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-19T00:00:00"}