Science Explorer Back to mapMap
Discussion
Topic · Information and Cyber Security

Most cited papers in Information and Cyber Security

Information and Cyber Security

What are the most cited papers in Information and Cyber Security?

The most cited paper in Information and Cyber Security is "Role-based access control models" (Ravi S. Sandhu, Edward J. Coyne, H.L. Feinstein et al., 1996), with 5,893 citations. Next come "An Intrusion-Detection Model" (3,414) and "Validating Instruments in MIS Research1" (2,535).

Showing 50 of 100 papers. Every paper with more than 448 citations is listed.

Most cited papers, sortable by citations and release date
#Paper
1 Role-based access control models Ravi S. Sandhu, Edward J. Coyne, H.L. Feinstein et al. · Computer 1996 5,893
2 An Intrusion-Detection Model Dorothy E. Denning · IEEE Transactions on Software Engineering Feb 1987 3,414
3 Validating Instruments in MIS Research1 Detmar W. Straub · MIS Quarterly Jun 1989 2,535
4 Stuxnet: Dissecting a Cyberwarfare Weapon Ralph Langner · IEEE Security & Privacy May 2011 1,910
5 Information Security Policy Compliance: An Empirical Study of Rationality-Based Beliefs and Information Security Awareness1 Burcu Bulgurcu, Hasan Cavusoglu, Izak Benbasat · MIS Quarterly Sep 2010 1,871
6 Telling Lies: Clues to Deceit in the Marketplace, Politics, and Marriage Paul Ekman 1985 1,742
7 Privacy in the Digital Age: a Review of Information Privacy Research in Information Systems1 Bélanger, Robert E. Crossler · MIS Quarterly Open access Dec 2011 1,346
8 The economics of information security investment Lawrence A. Gordon, Martin P. Loeb · ACM Transactions on Information and System Security Nov 2002 1,334
9 Testing Intrusion detection systems John McHugh · ACM Transactions on Information and System Security Nov 2000 1,316
10 Automated generation and analysis of attack graphs Oleg Sheyner, Joshua W. Haines, Somesh Jha et al. Conference paper 24 Aug 2005 1,305
11 Protection motivation and deterrence: a framework for security policy compliance in organisations Tejaswini C. Herath, H. Raghav Rao · European Journal of Information Systems Apr 2009 1,254
12 Fear Appeals and Information Security Behaviors: An Empirical Study1 J R Johnston, Merrill E. Warkentin · MIS Quarterly Sep 2010 1,251
13 User Awareness of Security Countermeasures and Its Impact on Information Systems Misuse: A Deterrence Approach John D’Arcy, Anat Hovav, Dennis F. Galletta · Information Systems Research 20 Jun 2008 1,178
14 Cyber-Physical Systems Security—A Survey Abdulmalik A. Humayed, Jingqiang Lin, Fengjun Li et al. · IEEE Internet of Things Journal 12 May 2017 1,153
15 Coping With Systems Risk: Security Planning Models for Management Decision Making1 Detmar W. Straub, Richard J. Welke · MIS Quarterly Dec 1998 1,127
16 Management Misinformation Systems Russell L. Ackoff · Management Science Dec 1967 1,086
17 From information security to cyber security Rossouw von Solms, Johan van Niekerk · Computers & Security 29 Apr 2013 1,065
18 Information Security and Privacy Hutchison, David, Colin Boyd, González Nieto, Juan et al. · Lecture notes in computer science Conference paper 2009 1,041
19 Stuxnet and the Future of Cyber War James P. Farwell, Rafal Rohozinski · Survival 28 Jan 2011 954
20 Neutralization: New Insights into the Problem of Employee Information Systems Security Policy Violations1 Mikko Siponen, Anthony Vance · MIS Quarterly Sep 2010 946
21 Secure Control: Towards Survivable Cyber-Physical Systems Álvaro A. Cárdenas, Saurabh Amin, Shankar Sastry Conference paper Jun 2008 891
22 Encouraging information security behaviors in organizations: Role of penalties, pressures and perceived effectiveness Tejaswini C. Herath, H. Raghav Rao · Decision Support Systems 28 Feb 2009 860
23 Understanding information systems security policy compliance: An integration of the theory of planned behavior and the protection motivation theory Princely Ifinedo · Computers & Security 13 Nov 2011 859
24 Cloud Computing: Benefits, Risks and Recommendations for Information Security Daniele Catteddu · Communications in computer and information science Conference paperOpen access 2010 853
25 The Economics of Information Security Ross Anderson, Tyler Moore · Science 26 Oct 2006 834
26 Why information security is hard - an economic perspective Ross Anderson Conference paper 24 Aug 2005 834
27 Security in Computing Charles P. Pfleeger 1988 813
28 The elements of computer credibility B. J. Fogg, Hsiang Li Tseng Conference paper 1999 808
29 Inferring Internet denial-of-service activity David Moore, Colleen Shannon, Douglas J. Brown et al. · ACM Transactions on Computer Systems May 2006 789
30 The Effect of Internet Security Breach Announcements on Market Value: Capital Market Reactions for Breached Firms and Internet Security Developers Huseyin Cavusoglu, Birendra K. Mishra, Srinivasan Raghunathan · International Journal of Electronic Commerce Oct 2004 783
31 Computer viruses Fred Cohen · Computers & Security Feb 1987 753
32 Cybersecurity data science: an overview from machine learning perspective Iqbal H. Sarker, A. S. M. Kayes, Shahriar Badsha et al. · Journal Of Big Data Open access Jul 2020 752
33 The economic cost of publicly announced information security breaches: empirical evidence from the stock market* Katherine M. Campbell, Lawrence A. Gordon, Martin P. Loeb et al. · Journal of Computer Security Jul 2003 752
34 Toward Automated Dynamic Malware Analysis Using CWSandbox Carsten Willems, Thorsten Holz, Felix Freiling · IEEE Security & Privacy Mar 2007 742
35 Effective IS Security: An Empirical Study Detmar W. Straub · Information Systems Research Sep 1990 735
36 Motivating IS security compliance: Insights from Habit and Protection Motivation Theory Anthony Vance, Mikko T. Siponen, Seppo Pahnila · Information & Management 17 Apr 2012 727
37 A comprehensive review study of cyber-attacks and cyber security; Emerging trends and recent developments Yuchong Li, Qinghui Liu · Energy Reports Open access 3 Sep 2021 724
38 Practicing Safe Computing: A Multimethod Empirical Examination of Home Computer User Security Behavioral Intentions1 Catherine L. Anderson, Agarwal · MIS Quarterly Sep 2010 716
39 User Data Privacy: Facebook, Cambridge Analytica, and Privacy Protection Jim Isaak, Mina J. Hanna · Computer Aug 2018 713
40 Avoidance of Information Technology Threats: A Theoretical Perspective1 Huigang Liang, Xue · MIS Quarterly Mar 2009 713
41 Scalable, graph-based network vulnerability analysis Paul Ammann, Duminda Wijesekera, Saket Kaushik Conference paper 18 Nov 2002 703
42 Common Vulnerability Scoring System Peter Mell, Karen A. Scarfone, Sasha Romanosky · IEEE Security & Privacy Nov 2006 690
43 What makes Web sites credible? B. J. Fogg, Jonathan Marshall, Othman Laraki et al. Conference paper Mar 2001 688
44 Analysis of end user security behaviors Jeffrey M. Stanton, Kathryn R. Stam, Paul M. Mastrangelo et al. · Computers & Security 14 Sep 2004 670
45 Health information systems: Failure, success and improvisation Richard Heeks · International Journal of Medical Informatics Open access 20 Aug 2005 668
46 What Do Systems Users Have to Fear? Using Fear Appeals to Engender Threats and Fear that Motivate Protective Security Behaviors1 Scott R. Boss, Dennis F. Galletta, Paul Benjamin Lowry et al. · MIS Quarterly Dec 2015 666
47 Cyber War Will Not Take Place Thomas Rid · Journal of Strategic Studies 5 Oct 2011 660
48 A Survey on Advanced Persistent Threats: Techniques, Solutions, Challenges, and Research Opportunities Adel Alshamrani, Sowmya Myneni, Ankur Chowdhary et al. · IEEE Communications Surveys & Tutorials 2019 654
49 Strategies for information requirements determination Greg B. Davis · IBM Systems Journal 1982 654
50 Improving Employees' Compliance Through Information Systems Security Training: An Action Research Study1 Puhakainen, Mikko Siponen · MIS Quarterly Dec 2010 641

Citations are OpenAlex's own counts, from its 2026-09-23 snapshot, so the ranking can differ from Google Scholar or Web of Science. A paper is listed for a field when OpenAlex files it under one of the field's topics; retracted papers and papers whose citation count cannot be traced to citing works are left out, and a preprint and the article it became are shown once. Release dates are OpenAlex's: where a source gave only a month or a year, that is what is shown. How the lists are chosen.