{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,16]],"date-time":"2026-06-16T10:35:30Z","timestamp":1781606130449,"version":"3.54.5"},"publisher-location":"New York, NY, USA","reference-count":12,"publisher":"ACM","license":[{"start":{"date-parts":[[2023,11,15]],"date-time":"2023-11-15T00:00:00Z","timestamp":1700006400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2023,11,15]]},"DOI":"10.1145\/3576915.3624395","type":"proceedings-article","created":{"date-parts":[[2023,11,21]],"date-time":"2023-11-21T12:35:13Z","timestamp":1700570113000},"page":"3633-3635","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":5,"title":["Poster: The Unknown Unknown: Cybersecurity Threats of Shadow IT in Higher Education"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8520-9871","authenticated-orcid":false,"given":"Jan-Philip","family":"van Acken","sequence":"first","affiliation":[{"name":"Utrecht University, Utrecht, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3059-0537","authenticated-orcid":false,"given":"Joost F.","family":"Gadellaa","sequence":"additional","affiliation":[{"name":"Co\u00f6peratie SURF U.A., Utrecht, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3752-2868","authenticated-orcid":false,"given":"Slinger","family":"Jansen","sequence":"additional","affiliation":[{"name":"Utrecht University, Utrecht, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0884-2440","authenticated-orcid":false,"given":"Katsiaryna","family":"Labunets","sequence":"additional","affiliation":[{"name":"Utrecht University, Utrecht, Netherlands"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2023,11,21]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"Proc. of USENIX Security 31 ed.). USENIX Association","author":"Binkhorst Veroniek","year":"2022","unstructured":"Veroniek Binkhorst, Tobias Fiebig, Katharina Krombholz, Wolter Pieters, and Katsiaryna Labunets. 2022. Security at the End of the Tunnel: The Anatomy of VPN Mental Models Among Experts and Non-Experts in a Corporate Context. In Proc. of USENIX Security 31 ed.). USENIX Association, Boston, MA, 3433--3450."},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2019.07.003"},{"key":"e_1_3_2_1_3_1","volume-title":"Basics of Qualitative Research","author":"Corbin Juliet","unstructured":"Juliet Corbin and Anselm Strauss. 2008. Basics of Qualitative Research (3rd ed.): Techniques and Procedures for Developing Grounded Theory. Sage.","edition":"3"},{"key":"e_1_3_2_1_4_1","volume-title":"Proc. of S&P","author":"de Smale Stephanie","unstructured":"Stephanie de Smale, Rik van Dijk, Xander Bouwman, Jeroen van der Ham, and Michel van Eeten. 2023. No One Drinks From the Firehose: How Organizations Filter and Prioritize Vulnerability Information. In Proc. of S&P. IEEE Computer Society, Los Alamitos, CA, USA, 203--219."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0232076"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1007\/s12599-017-0497-x"},{"key":"e_1_3_2_1_7_1","article-title":"Causing Factors, Outcomes, and Governance of Shadow IT and Business-managed IT: A Systematic Literature Review","volume":"7","author":"Klotz Stefan","year":"2019","unstructured":"Stefan Klotz, Andreas Kopper, Markus Westner, and Susanne Strahringer. 2019. Causing Factors, Outcomes, and Governance of Shadow IT and Business-managed IT: A Systematic Literature Review. International Journal of Information Systems and Project Management, Vol. 7, 3 (2019).","journal-title":"International Journal of Information Systems and Project Management"},{"key":"e_1_3_2_1_8_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354239"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23522"},{"key":"e_1_3_2_1_10_1","volume-title":"Model-driven Risk Analysis 2011 ed.)","author":"Lund Mass Soldal","unstructured":"Mass Soldal Lund, Bjornar Solhaug, and Ketil St\u00f8len. 2010. Model-driven Risk Analysis 2011 ed.). Springer, Berlin, Germany."},{"key":"e_1_3_2_1_11_1","volume-title":"Aline de Vargas Pinto, and Ant\u00f4nio Carlos Gastaud Mac cada","author":"Mallmann Gabriela Labres","year":"2019","unstructured":"Gabriela Labres Mallmann, Aline de Vargas Pinto, and Ant\u00f4nio Carlos Gastaud Mac cada. 2019. Shedding Light on Shadow IT: Definition, Related Concepts, and Consequences. In Information Systems for Industry 4.0. Springer International Publishing, Cham, 63--79."},{"key":"e_1_3_2_1_12_1","volume-title":"Doing Research: the Hows and Whys of Applied Research 5 ed.)","author":"Verhoeven Nel","unstructured":"Nel Verhoeven. 2019. Doing Research: the Hows and Whys of Applied Research 5 ed.). Boom, Amsterdam."}],"event":{"name":"CCS '23: ACM SIGSAC Conference on Computer and Communications Security","location":"Copenhagen Denmark","acronym":"CCS '23","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2023 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3624395","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3576915.3624395","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,21]],"date-time":"2025-08-21T01:47:07Z","timestamp":1755740827000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3576915.3624395"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,11,15]]},"references-count":12,"alternative-id":["10.1145\/3576915.3624395","10.1145\/3576915"],"URL":"https:\/\/doi.org\/10.1145\/3576915.3624395","relation":{},"subject":[],"published":{"date-parts":[[2023,11,15]]},"assertion":[{"value":"2023-11-21","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}