{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,29]],"date-time":"2026-05-29T23:11:22Z","timestamp":1780096282300,"version":"3.54.0"},"reference-count":26,"publisher":"Oxford University Press (OUP)","issue":"1","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["J Cyber Secur"],"published-print":{"date-parts":[[2016,12]]},"DOI":"10.1093\/cybsec\/tyw004","type":"journal-article","created":{"date-parts":[[2016,12,24]],"date-time":"2016-12-24T04:07:03Z","timestamp":1482552423000},"page":"15-28","source":"Crossref","is-referenced-by-count":32,"title":["Risky business: Fine-grained data breach prediction using business profiles"],"prefix":"10.1093","volume":"2","author":[{"given":"Armin","family":"Sarabi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Parinaz","family":"Naghizadeh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mingyan","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"286","published-online":{"date-parts":[[2016,12,22]]},"reference":[{"key":"2016123008051118000_2.1.15.1","unstructured":"The Web Application Security Consortium. Web Hacking Incident Database. http:\/\/projects.webappsec.org\/w\/page\/13246995\/Web-Hacking-Incident-Database (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.2","unstructured":"Passeri P. Hackmageddon. http:\/\/hackmageddon.com (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.3","unstructured":"VERIS Community Database (VCDB). http:\/\/vcdb.org (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.4","unstructured":"DMOZ. The Open Directory Project. http:\/\/www.dmoz.org (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.5","unstructured":"Amazon Web Services. Alexa Web Information Service. http:\/\/aws.amazon.com\/awis (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.6","unstructured":"Neustar. IP Intelligence. https:\/\/www.neustar.biz\/services\/ip-intelligence (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.7","unstructured":"Liu Y Sarabi A Zhang J . Cloudy with a chance of breach: forecasting cyber security incidents. In: 24th USENIX Security Symposium, USENIX Association, 2015."},{"key":"2016123008051118000_2.1.15.8","unstructured":"Verizon Enterprise. Data Breach Investigations Reports (DBIR). http:\/\/www.verizonenterprise.com\/DBIR (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.9","unstructured":"Hines C. Why Companies Must Adopt the \u201cAssume Mentality\u201d When It Comes to Breaches. https:\/\/blog.cloudsecurityalliance.org\/2015\/02\/27\/why-companies-must-adopt-the-assume-mentality-when-it-comes-to-breaches (27 February 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.10","doi-asserted-by":"crossref","unstructured":"Thonnard O Bilge L Kashyap A . Are you at risk? Profiling organizations and individuals subject to targeted attacks. In: Financial Cryptography and Data Security, Springer, 2015.","DOI":"10.1007\/978-3-662-47854-7_2"},{"key":"2016123008051118000_2.1.15.11","unstructured":"Soska K Christin N. Automatically detecting vulnerable websites before they turn malicious. In: 23rd USENIX Security Symposium, USENIX Association, 2014."},{"key":"2016123008051118000_2.1.15.12","unstructured":"Edwards B Hofmeyr S Forrest S. Hype and heavy tails: a closer look at data breaches. In: Workshop on the Economics of Information Security (WEIS), 2015."},{"key":"2016123008051118000_2.1.15.13","unstructured":"IBM. 2015 Cost of Data Breach Study. http:\/\/www-03.ibm.com\/security\/data-breach (30 September 2015, date last accessed). 2015."},{"key":"2016123008051118000_2.1.15.14","doi-asserted-by":"crossref","first-page":"431","DOI":"10.3233\/JCS-2003-11308","article-title":"The economic cost of publicly announced information security breaches: empirical evidence from the stock market","volume":"11","author":"Campbell","year":"2003","journal-title":"J Comput Secur"},{"key":"2016123008051118000_2.1.15.15","doi-asserted-by":"crossref","first-page":"70","DOI":"10.1080\/10864415.2004.11044320","article-title":"The effect of internet security breach announcements on market value: capital market reactions for breached firms and internet security developers","volume":"9","author":"Cavusoglu","year":"2004","journal-title":"Int J Electron Commer"},{"key":"2016123008051118000_2.1.15.16","unstructured":"Acquisti A Friedman A Telang R. Is there a cost to privacy breaches? An event study. ICIS 2006 Proc 2006;1563\u201380."},{"key":"2016123008051118000_2.1.15.17","doi-asserted-by":"crossref","first-page":"69","DOI":"10.2753\/JEC1086-4415120103","article-title":"Market reactions to information security breach announcements: An empirical analysis","volume":"12","author":"Kannan","year":"2007","journal-title":"Int J Electron Commer"},{"key":"2016123008051118000_2.1.15.18","doi-asserted-by":"crossref","first-page":"33","DOI":"10.3233\/JCS-2009-0398","article-title":"The impact of information security breaches: has there been a downward shift in costs?","volume":"19","author":"Gordon","year":"2011","journal-title":"J Comput Secur"},{"key":"2016123008051118000_2.1.15.19","doi-asserted-by":"crossref","first-page":"74","DOI":"10.1111\/jels.12035","article-title":"Empirical analysis of data breach litigation","volume":"11","author":"Romanosky","year":"2014","journal-title":"J Empir Leg Stud"},{"key":"2016123008051118000_2.1.15.20","doi-asserted-by":"publisher","DOI":"10.1002\/pam.20567"},{"key":"2016123008051118000_2.1.15.21","unstructured":"The VERIS Framework. http:\/\/veriscommunity.net (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.22","unstructured":"NAICS Association. http:\/\/www.naics.com (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.23","unstructured":"Amazon Web Services (AWS). http:\/\/aws.amazon.com (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.24","unstructured":"Amazon Web Services. Alexa Top Sites https:\/\/aws.amazon.com\/alexa-top-sites (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.25","unstructured":"Ensemble Methods http:\/\/scikit-learn.org\/stable\/modules\/ensemble.html (30 September 2015, date last accessed)."},{"key":"2016123008051118000_2.1.15.26","unstructured":"SANS Institute. Critical Security Controls. https:\/\/www.sans.org\/critical-security-controls (30 September 2015, date last accessed)."}],"container-title":["Journal of Cybersecurity"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/academic.oup.com\/cybersecurity\/article-pdf\/2\/1\/15\/10833165\/tyw004.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2019,9,16]],"date-time":"2019-09-16T18:17:19Z","timestamp":1568657839000},"score":1,"resource":{"primary":{"URL":"https:\/\/academic.oup.com\/cybersecurity\/article-lookup\/doi\/10.1093\/cybsec\/tyw004"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,12]]},"references-count":26,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2016,12,30]]},"published-print":{"date-parts":[[2016,12]]}},"alternative-id":["10.1093\/cybsec\/tyw004"],"URL":"https:\/\/doi.org\/10.1093\/cybsec\/tyw004","relation":{},"ISSN":["2057-2085","2057-2093"],"issn-type":[{"value":"2057-2085","type":"print"},{"value":"2057-2093","type":"electronic"}],"subject":[],"published":{"date-parts":[[2016,12]]}}}