{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,18]],"date-time":"2026-08-18T15:54:35Z","timestamp":1787068475875,"version":"build-2736575974"},"reference-count":29,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"5","license":[{"start":{"date-parts":[[2019,5,1]],"date-time":"2019-05-01T00:00:00Z","timestamp":1556668800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/legalcode"}],"funder":[{"name":"UK Engineering and Physical Science Research Council","award":["EP\/M002780\/1"],"award-info":[{"award-number":["EP\/M002780\/1"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2019,5,1]]},"DOI":"10.1109\/tse.2017.2782813","type":"journal-article","created":{"date-parts":[[2017,12,13]],"date-time":"2017-12-13T14:20:43Z","timestamp":1513174843000},"page":"521-536","source":"Crossref","is-referenced-by-count":58,"title":["The Good, the Bad and the Ugly: A Study of Security Decisions in a Cyber-Physical Systems Game"],"prefix":"10.1109","volume":"45","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-2551-7455","authenticated-orcid":false,"given":"Sylvain","family":"Frey","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Awais","family":"Rashid","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Pauline","family":"Anthonysamy","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-2725-7629","authenticated-orcid":false,"given":"Maria","family":"Pinto-Albuquerque","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Syed Asad","family":"Naqvi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.3758\/BF03204735"},{"key":"ref11","author":"strauss","year":"1998","journal-title":"Basics of Qualitative Research Techniques and Procedures for Developing Grounded Theory"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/581271.581274"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.64"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/CSEET.2006.31"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1016\/0364-0213(94)90007-8"},{"key":"ref16","year":"2015"},{"key":"ref17","article-title":"National Bureau of Standards, Federal Information Processing Standards Publications (FIPS PUB) 65","year":"1975","journal-title":"Guideline for Automatic Data Processing Risk Analysis"},{"key":"ref18","first-page":"9","article-title":"Teaching software engineering using simulation games","author":"navarro","year":"2004","journal-title":"Proc Int Conf Simul Edu"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/CSEET.2007.14"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1145\/2897035.2897036"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2007.11"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1145\/2994487.2994496"},{"key":"ref3","year":"2012"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/1005817.1005828"},{"key":"ref29","article-title":"The shadow warriors: In the no man's land between industrial control systems and enterprise IT systems","author":"zanutto","year":"2017","journal-title":"Proc 3rd Workshop Secur Inf Workers"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/1330311.1330325"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/1920320.1920326"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/s11416-007-0040-6"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2016.39"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1145\/2508859.2516753"},{"key":"ref1","article-title":"Effective management of information security and privacy","volume":"29","author":"anderson","year":"2006","journal-title":"Educause Quart"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2014.6912265"},{"key":"ref22","year":"2015"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1080\/07421222.1991.11517914"},{"key":"ref24","year":"2013"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/RE.2008.33"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.14236\/ewic\/ICS2016.2"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/CSEET.2007.54"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/8714098\/08194898.pdf?arnumber=8194898","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,1,12]],"date-time":"2022-01-12T11:26:26Z","timestamp":1641986786000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8194898\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,5,1]]},"references-count":29,"journal-issue":{"issue":"5"},"URL":"https:\/\/doi.org\/10.1109\/tse.2017.2782813","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2019,5,1]]}}}