The Cyber Attack on Saudi Aramco
Abstract
On 15 August 2012, the computer network of Saudi Aramco was struck by a self-replicating virus that infected as many as 30,000 of its Windowsbased machines. Despite its vast resources as Saudi Arab...
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
The security aspect of ICS and SCADA systems was not considered a global issue until the discovery of the Stuxnet worm in 2010 and the Shamoon virus attack on Saudi Aramco.
“However, the security aspect of ICS and SCADA systems was not considered a global issue until the discovery of the Stuxnet worm, developed in 2010 with the specific purpose of targeting ICS [170], and the Shamoon virus, responsible for the attack on Saudi Aramco, the world's largest oil company, caused disruption on global energy market [171].”
From SCADA Systems With Focus on Continuous Manufacturing and Steel Industry: A Survey on Architectures, Standards, Challenges and Industry 5.0 (2022) · cites this paper as [170]
Cited by
Sorted by citations
Rid, T., & Buchanan, B. (2015) · Journal of Strategic Studies · doi:10.1080/01402390.2014.977382 · Cited by 639 · see citing works
Anatomy of Threats to the Internet of Things
Makhdoom, I., Abolhasan, M., Lipman, J., Liu, R. P., & Ni, W. (2018) · IEEE Communications Surveys & Tutorials · doi:10.1109/comst.2018.2874978 · Cited by 418 · see citing works
“Although a plentiful of malware attacks such as NotPetya [111], DuQu-2 [112, 113, 114, 115], Cryptlocker [116], Shamoon-1 [117, 118], Shamoon-2 [119, 120], Flame/SKyWIper [121, 122, 123, 124], Gauss [123, 125, 126], Icefog [127], Dragonfly-Group/Energetic Bear [128, 129], Red October [130, 131, 132], and Night Dragon […”
BackgroundConstructing Norms for Global Cybersecurity
Finnemore, M., & Hollis, D. B. (2016) · American Journal of International Law · doi:10.1017/s0002930000016894 · Cited by 400 · see citing works
Cybersecurity of industrial cyber-physical systems: A review
Kayan, H., Nunes, M., Rana, O., Burnap, P., & Perera, C. (2022) · ACM Computing Surveys · doi:10.1145/3510410 · Cited by 261 · see citing works
“Saudi Aramco Attack [21] .”
BackgroundA Study of Cyber Security Awareness in Educational Environment in the Middle East
Al-Janabi, S., & Al–Shourbaji, I. (2016) · Journal of Information & Knowledge Management · doi:10.1142/s0219649216500076 · Cited by 108 · see citing works
A Survey on Industry 4.0 for the Oil and Gas Industry: Upstream Sector
Elijah, O., Pang, A. L., Rahim, S. K. A., Geok, T. K., Arsad, A., Kadir, E. A., Abdurrahman, M. D., Junin, R., Agi, A., & Abdulfatah, M. Y. (2021) · IEEE Access · doi:10.1109/access.2021.3121302 · Cited by 108 · see citing works
“For instance, Saudi Aramco O&G company a critical provider in the global energy sector witnessed cyberattack which took almost two weeks to recover leading to several damages [71].”
BackgroundCyber Security and Critical Energy Infrastructure
Onyeji, I., Bazilian, M., & Bronk, C. (2014) · The Electricity Journal · doi:10.1016/j.tej.2014.01.011 · Cited by 90 · see citing works
Self-citationAlomari, M. A., Al-Andoli, M. N., Ghaleb, M., et al. (2025) · Energies · doi:10.3390/en18010141 · Cited by 84 · see citing works
Sverko, M., Grbac, T. G., & Mikuc, M. (2022) · IEEE Access · doi:10.1109/access.2022.3211288 · Cited by 71 · see citing works
“…of ICS and SCADA systems was not considered a global issue until the discovery of the Stuxnet worm, developed in 2010 with the specific purpose of targeting ICS [168], and two years later, the Shamoon virus responsible for the attack on Saudi Aramco, the world’s largest oil company [169], [170].”
BackgroundA Rule Book on the Shelf? Tallinn Manual 2.0 on Cyberoperations and Subsequent State Practice
Efrony, D., & Shany, Y. (2018) · American Journal of International Law · doi:10.1017/ajil.2018.86 · Cited by 65 · see citing works
Evolution of Malware Threats and Techniques: a Review
Alenezi, M. N., Alabdulrazzaq, H., Alshaher, A. A., et al. (2022) · International Journal of Communication Networks and Information Security (IJCNIS) · doi:10.17762/ijcnis.v12i3.4723 · Cited by 54 · see citing works
Vulnerabilities and countermeasures in electrical substations
Hussain, S., Fernandez, J. H., Al-Ali, A. K., et al. (2021) · International Journal of Critical Infrastructure Protection · doi:10.1016/j.ijcip.2020.100406 · Cited by 47 · see citing works
The better angels of our digital nature? Offensive cyber capabilities and state violence
Egloff, F. J., & Shires, J. (2021) · European Journal of International Security · doi:10.1017/eis.2021.20 · Cited by 15 · see citing works
Fractional Dynamics of Stuxnet Virus Propagation in Industrial Control Systems
Masood, Z., Raja, M. A. Z., Chaudhary, N. I., Cheema, K. M., & Milyani, A. H. (2021) · Mathematics · doi:10.3390/math9172160 · Cited by 39 · see citing works
“…as well as in the financial market, computer viruses can be used in a network operation as a digital weapon against the desired targets, e.g., a computer spyware program used as an information collection platform in the Syrian war [1], or Shamoon and Stuxnet viruses for cyber incidents [2].”
BackgroundCyber-noir: Cybersecurity and popular culture
Shires, J. (2019) · Contemporary Security Policy · doi:10.1080/13523260.2019.1670006 · Cited by 27 · see citing works
“Often, “ malicious ” actors simply repurpose “ legitimate ” tools and programs, like remote shells or data deletion software (Bronk & Tikk-Ringas, 2013).”
BackgroundJain, H., Kumar, M., & Joshi, A. M. (2021) · Electrical Engineering · doi:10.1007/s00202-021-01380-9 · Cited by 38 · see citing works
An Improvised Patchwork: Success and Failure in Cybersecurity Policy for Critical Infrastructure
Atkins, S., & Lawson, C. (2020) · Public Administration Review · doi:10.1111/puar.13322 · Cited by 30 · see citing works
Cyber–Physical Systems Forensics: Today and Tomorrow
Mohamed, N., Al‐Jaroodi, J., & Jawhar, I. (2020) · Journal of Sensor and Actuator Networks · doi:10.3390/jsan9030037 · Cited by 35 · see citing works
Digital protectionism and national planning in the age of the internet: the case of Iran
Yalçıntaş, A., & Alizadeh, N. (2020) · Journal of Institutional Economics · doi:10.1017/s1744137420000077 · Cited by 31 · see citing works
Analysis and Evaluation of Cyber-attack Impact on Critical Power System Infrastructure
Singh, N. K., & Mahajan, V. (2020) · Smart Science · doi:10.1080/23080477.2020.1861502 · Cited by 28 · see citing works
“AOGC on August 15, 2012, paralyzed by a high impact cyber-attack ‘Shamoon’ which breaks their business network for several months [38,39].”
BackgroundRisk and uncertainty can be analyzed in cyberspace
Brantly, A. (2021) · Journal of Cybersecurity · doi:10.1093/cybsec/tyab001 · Cited by 23 · see citing works
“Finally, its failure opened the door for the Iranian regime to respond, which it did with attacks against US interests in the Middle East through a devastating attack against Saudi Aramco [105], and attacks against US interests at home [106].”
BackgroundCountermeasureing Zero Day Attacks: Asset-Based Approach
Azzedin, F., Suwad, H., & Alyafeai, Z. (2017) · International Conference on High Performance Computing & Simulation (HPCS) · doi:10.1109/hpcs.2017.129 · Cited by 24 · see citing works
Zero click attacks – a new cyber threat for the e-banking sector
Nisha, T. N., & Kulkarni, M. S. (2022) · Journal of Financial Crime · doi:10.1108/jfc-06-2022-0140 · Cited by 22 · see citing works
Targeting technology: Mapping military offensive network operations
Moore, D. (2018) · doi:10.23919/cycon.2018.8405012 · Cited by 21 · see citing works
“10 See, for example, the 2012 Shamoon attack, in which a presumably Iranian attacker wiped thousands of computers at Saudi’s national gas company, Aramco (Bronk and Tikk-Ringas 2013).”
BackgroundHack-and-leak operations: intrusion and influence in the Gulf
Shires, J. (2019) · Journal of Cyber Policy · doi:10.1080/23738871.2019.1636108 · Cited by 21 · see citing works
Adversarial co-evolution of attack and defense in a segmented computer network environment
Hemberg, E., Zipkin, J. R., Skowyra, R., et al. (2018) · Genetic and Evolutionary Computation Conference Companion (GECCO Companion) · doi:10.1145/3205651.3208287 · Cited by 21 · see citing works
“The attacker moved laterally to spread malware to as many as 30,000 network devices, which were rendered not only inoperable but unrecoverable [3].”
BackgroundРубан, І. В., Martovytskyi, V., & Lukova-Chuiko, N. V. (2018) · Cybernetics and Systems Analysis · doi:10.1007/s10559-018-0032-1 · Cited by 20 · see citing works
Cyber warfare: terms, issues, laws and controversies
Seviş, K. N., & Şeker, E. (2016) · International Conference on Cyber Security and Protection of Digital Services (Cyber Security) · doi:10.1109/cybersecpods.2016.7502348 · Cited by 20 · see citing works
“A self-replicating virus ( Shamoon ) infected more than 30,000 devices of Saudi Aramco on 15 August 2012 which caused huge interruption to the world's biggest oil producer [36].”
BackgroundExploring Cybersecurity Ecosystem in the Middle East: Towards an SME Recommender System
Ahmed, N. N., & Nanath, K. (2021) · Journal of Cyber Security and Mobility · doi:10.13052/jcsm2245-1439.1032 · Cited by 19 · see citing works
“Saudi Arabia’s interest in cybersecurity exploded following the noto-rious 2012 Aramco cyber-attack [31].”
BackgroundAmissah, J., Abdel‐Rahim, O., Mansour, D. A., et al. (2024) · Scientific Reports · doi:10.1038/s41598-024-63668-7 · Cited by 19 · see citing works
An Overview on Cyber Security Awareness in Muslim Countries
Basamh, S. S., Qudaih, H. A., & Ibrahim, J. (2014) · The International Islamic University Malaysia Repository (The International Islamic University Malaysia) · Cited by 18 · see citing works
Designing a monitoring model for cluster super–computers
Рубан, І. В., Martovytskyi, V., & Lukova-Chuiko, N. V. (2016) · Eastern-European Journal of Enterprise Technologies · doi:10.15587/1729-4061.2016.85433 · Cited by 18 · see citing works
“In this case, the infection spread to actually all workstations of its personnel, including their super-computer for the simulation of processes of distribution of oil in the extraction [3].”
BackgroundStrategic DoS Attack in Continuous Space for Cyber-Physical Systems Over Wireless Networks
Huang, M., Tsang, K. F. E., Li, Y., Li, L., & Shi, L. (2022) · IEEE Transactions on Signal and Information Processing over Networks · doi:10.1109/tsipn.2022.3174969 · Cited by 17 · see citing works
Information Fingerprint for Secure Industrial Big Data Analytics
Jiang, X., & Ge, Z. (2021) · IEEE Transactions on Industrial Informatics · doi:10.1109/tii.2021.3104056 · Cited by 17 · see citing works
Alshammari, T., & Singh, H. P. (2018) · Archives of Business Research · doi:10.14738/abr.612.5771 · Cited by 17 · see citing works
A Modified McCumber Cube as a Basis for a Taxonomy of Cyber Attacks
Easttom, C., & Butler, W. (2019) · IEEE Annual Computing and Communication Workshop and Conference (CCWC) · doi:10.1109/ccwc.2019.8666559 · Cited by 16 · see citing works
“The Shamoon virus was first discovered in 2012, and later a variant resurged in 2017 [24].”
BackgroundCritical energy infrastructure and the evolution of cybersecurity
Sanders, P., Bronk, C., & Bazilian, M. (2022) · The Electricity Journal · doi:10.1016/j.tej.2022.107224 · Cited by 15 · see citing works
Self-citationTAMBUS: A novel authentication method through covert channels for securing industrial networks
Bernieri, G., Cecconello, S., Conti, M., & Lain, G. (2020) · Computer Networks · doi:10.1016/j.comnet.2020.107583 · Cited by 14 · see citing works
Cyberterrorism Definition Patterns and Mitigation Strategies: A Literature Review
(2017) · International Journal of Science and Research (IJSR) · doi:10.21275/art20163936 · Cited by 14 · see citing works
“[25]Others attacks include the Maroochy water and sewage system in Australia, in 2008, a cyber attack was launched against an oil pipeline in Turkey [26].”
BackgroundIs there a cyber security dilemma?
Beckerman, C. (2022) · Journal of Cybersecurity · doi:10.1093/cybsec/tyac012 · Cited by 10 · see citing works
Consequence simulation of cyber attacks on key smart grid business cases
Abraham, D., Toftegaard, O. A. A., Jose, D. R. B. B., et al. (2024) · Frontiers in Energy Research · doi:10.3389/fenrg.2024.1395954 · Cited by 13 · see citing works
Internet of Things (IoTs) Security: Intrusion Detection using Deep Learning
Şahingöz, Ö. K., Çekmez, U., & Buldu, A. (2021) · Journal of Web Engineering · doi:10.13052/jwe1540-9589.2062 · Cited by 14 · see citing works
Yilmaz, R., & Yalman, Y. (2016) · TEM Journal · doi:10.18421/tem52-10 · Cited by 13 · see citing works
Smart Grid Security: Survey and Challenges
Lieskovan, T., Hajný, J., & Číka, P. (2019) · International Congress on Ultra Modern Telecommunications and Control Systems and Workshops (ICUMT) · doi:10.1109/icumt48472.2019.8970738 · Cited by 12 · see citing works
“After the station was successfully deleted, the Reporter automatically sent the collected information about the attack [7].”
MethodSocial Engineering Defense Mechanisms: A Taxonomy and a Survey of Employees’ Awareness Level
Alharthi, D. N., & Regan, A. (2020) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-52249-0_35 · Cited by 13 · see citing works
A Review of Cybersecurity Challenges in Smart Power Transformers
Rahimpour, H., Tusek, J., Musleh, A. S., Liu, B., Abuadbba, A., Phung, B. T., & Seneviratne, A. P. (2024) · IEEE Access · doi:10.1109/access.2024.3518494 · Cited by 12 · see citing works
Stuxnet revisited: From cyber warfare to secret statecraft
Lindsay, J. (2025) · The Journal of Strategic Studies · doi:10.1080/01402390.2025.2481447 · Cited by 11 · see citing works
Modeling a Midstream Oil Terminal for Cyber Security Risk Evaluation
Das, R., & Morris, T. H. (2018) · IFIP advances in information and communication technology · doi:10.1007/978-3-030-04537-1_9 · Cited by 10 · see citing works
Adopting and Implementing a Government Cloud in Saudi Arabia, an Integral Part of Vision 2030
Alannsary, M. O., & Hausawi, Y. M. (2019) · EPiC series in computing · doi:10.29007/848q · Cited by 10 · see citing works
Towards Realistic Threat Modeling
Allodi, L., & Etalle, S. (2017) · doi:10.1145/3140368.3140372 · Cited by 10 · see citing works
“…attackers will largely disregard phase-two attacks (which quickly lose of appeal as too many resources and time likely need be dedicated to complete the second phase), and focus instead on standard internet-facing systems, which appears indeed to be the case for most attacks of this type [15, 42].”
Vulnerabilities and Cyberspace: A New Kind of Crises
van den Berg, B., & Kuipers, S. (2022) · Oxford Research Encyclopedia of Politics · doi:10.1093/acrefore/9780190228637.013.1604 · Cited by 10 · see citing works
Olasehinde, D. O., Bamisile, O., Ejiyi, C. J., Zhang, G., Cai, D., Li, J., Liu, W., & Huang, Q. (2026) · Cluster Computing · doi:10.1007/s10586-025-05894-w · Cited by 10 · see citing works
Detection of False Data Injection Attacks in Smart Grids via Nonlinear Interval Observer: A Review
Ali, K., Rana, Z., Haseeb, R., Niaz, A., Zahid, M., & Liang, D. (2024) · International Conference on Energy Conservation and Efficiency (ICECE) · doi:10.1109/icece61222.2024.10505256 · Cited by 9 · see citing works
Tarhan, K. (2023) · Przegląd Strategiczny · doi:10.14746/ps.2022.1.23 · Cited by 9 · see citing works
Cyber Security and Resilience of Modern Societies: A Research Management Architecture
Tagarev, T. D., Sharkov, G., & Stoianov, N. (2017) · Information & Security An International Journal · doi:10.11610/isij.3807 · Cited by 9 · see citing works
Savremeni konflikti i njihove tendencije
Jeftić, Z., Mišev, G., Obradović, Ž., et al. (2018) · Vojno delo · doi:10.5937/vojdelo1807023j · Cited by 9 · see citing works
Identification and Prevention of Cyber Attack in Smart Grid Communication Network
Singh, N. K., Mahajan, V., Aniket, A., et al. (2019) · International Conference on Information and Communications Technology (ICOIACT) · doi:10.1109/icoiact46704.2019.8938559 · Cited by 9 · see citing works
“Smart grid infrastructure uses more Supervisory Control and Data Acquisition (SCADA) system and Energy Management System (EMS) [5].”
MethodA case study in the use of attack graphs for predicting the security of cyber-physical systems
Few, C., Thompson, J., Awuson-David, K., et al. (2021) · International Congress of Advanced Technology and Engineering (ICOTEN) · doi:10.1109/icoten52080.2021.9493452 · Cited by 9 · see citing works
Zero-day and zero-click attacks on digital banking: a comprehensive review of double trouble
Yasmeen, K., & Adnan, M. (2023) · Risk Management · doi:10.1057/s41283-023-00130-4 · Cited by 11 · see citing works
“Cybercriminals not only pilfer sensitive data from customers and organizations but also cause financial losses (Bronk and Tikk-Ringas 2013; Bressolles et al. 2014).”
BackgroundA Methodological Approach to Weaponizing Machine Learning
Easttom, C. (2019) · International Conference on Artificial Intelligence and Advanced Manufacturing (AIAM) · doi:10.1145/3358331.3358376 · Cited by 8 · see citing works
Improving security in industry 4.0 by extending OPC-UA with usage control
Martinelli, F., Osliak, O., Mori, P., et al. (2020) · International Conference on Availability, Reliability and Security (ARES) · doi:10.1145/3407023.3407077 · Cited by 8 · see citing works
Rules of engagement for cyberspace operations: a view from the USA
Kehler, C. R., Lin, H., & Sulmeyer, M. (2017) · Journal of Cybersecurity · doi:10.1093/cybsec/tyx003 · Cited by 7 · see citing works
“Shamoon is speculated to have been carried out by Iran, but this remains unproven [24].”
BackgroundA Literature Survey and Analysis on Social Engineering Defense Mechanisms and Infosec Policies
Alharthi, D. N., & Regan, A. (2021) · International Journal of Network Security & Its Applications · doi:10.5121/ijnsa.2021.13204 · Cited by 7 · see citing works
“These devices were partially wiped or totally destroyed [46], [47], [48].”
BackgroundA malicious activity detection system utilizing predictive modeling in complex environments
Almaatouq, A., Alabdulkareem, A., Nouh, M., Alsaleh, M., Alarifi, A., Sanchez, A., Alfaris, A., & Williams, J. R. (2014) · IEEE Consumer Communications and Networking Conference · doi:10.1109/ccnc.2014.6866597 · Cited by 6 · see citing works
“According to security reports, this malware infected around 30,000 workstations, causing the firm to spend almost two weeks to fully recover from the disruption caused by data loss and disabled workstations [10].”
BackgroundSaving face in the cyberspace: Responses to public cyber intrusions in the Gulf
Abramson, Y., & Baram, G. (2023) · Contemporary Security Policy · doi:10.1080/13523260.2023.2271794 · Cited by 5 · see citing works
“Despite its vast resources, Saudi Aramco took almost two weeks to recover from the attack and restore the damage (Bronk & Tikk-Ringas, 2013).”
BackgroundDigital Transformation and Cybersecurity Fears on National Security in GCC
Albakri, M., Bello, M., & Rashdi, S. A. (2024) · Advances in electronic commerce (AEC) book series/Advances in electronic commerce series · doi:10.4018/979-8-3693-5966-2.ch002 · Cited by 6 · see citing works
Securing the software defined perimeter with evolutionary co-optimization
Shlapentokh-Rothman, M., Hemberg, E., & O’Reilly, U.-M. (2020) · Genetic and Evolutionary Computation Conference Companion (GECCO Companion) · doi:10.1145/3377929.3398085 · Cited by 6 · see citing works
“[5] In this paper we focus on improving security against malware intrusion attacks.”
BackgroundOn the Edge Realtime Intrusion Prevention System for DoS Attack
Das, R., Menon, V., & Morris, T. H. (2018) · Electronic workshops in computing · doi:10.14236/ewic/ics2018.10 · Cited by 6 · see citing works
“Popular attacks like STUXNET [10] and Shamoon [9] were able to compromise these trusted nodes.”
BackgroundThe Fragmented Securitization of Cyber Threats
Kasper, Á. (2014) · Springer eBooks · doi:10.1007/978-3-319-08117-5_9 · Cited by 6 · see citing works
Reinhold, T., & Reuter, C. (2019) · Springer eBooks · doi:10.1007/978-3-658-25652-4_7 · Cited by 5 · see citing works
“The latter can consist of copying and stealing information, and completely shutting down thousands of afflicted PCs, as demonstrated in the attack on the Saudi company Aramco (Bronk & Tikk-Ringas, 2013).”
An Argument for Cybersecurity in Saudi Arabia
Dawson, M. E. (2022) · Revista Academiei Forţelor Terestre · doi:10.2478/raft-2022-0011 · Cited by 5 · see citing works
“An estimated 30,000 Windowsbased machines operating on the corporate network fell victim to the Shamoon virus (Bronk & Tikk-Ringas, 2013).”
BackgroundVulnerability of South African Commodity Value Chains to Cyber Incidents
van Niekerk, B. (2023) · Scientia Militaria South African Journal of Military Studies · doi:10.5787/51-3-1430 · Cited by 5 · see citing works
Towards Useful Anomaly Detection for Back Office Networks
Yüksel, Ö., den Hartog, J., & Etalle, S. (2016) · Lecture notes in computer science · doi:10.1007/978-3-319-49806-5_30 · Cited by 5 · see citing works
Leveraging Cyber-Physical System Honeypots to Enhance Threat Intelligence
Haney, M. (2019) · IFIP advances in information and communication technology · doi:10.1007/978-3-030-34647-8_11 · Cited by 5 · see citing works
Abbasi, A. R. (2025) · Energy Conversion and Management X · doi:10.1016/j.ecmx.2025.101419 · Cited by 5 · see citing works
Khan, M. I., Khan, M. I., Yasmeen, T., et al. (2026) · Journal of Open Innovation Technology Market and Complexity · doi:10.1016/j.joitmc.2026.100731 · Cited by 4 · see citing works
Cyber threat intelligence for critical infrastructure security
Osliak, O., Saracino, A., Martinelli, F., & Mori, P. (2023) · Concurrency and Computation Practice and Experience · doi:10.1002/cpe.7759 · Cited by 5 · see citing works
Cyberattacks in the context of international law enforcement
Alweqyan, D. (2023) · Journal of Financial Crime · doi:10.1108/jfc-07-2023-0164 · Cited by 4 · see citing works
Social Engineering Infosec Policies (SE-IPS)
Alharthi, D. N., & Regan, A. (2021) · doi:10.5121/csit.2021.110104 · Cited by 4 · see citing works
Cyber Security of Critical Infrastructures in Smart Cities
Göçoğlu, V. (2019) · Uluslararası Yönetim Akademisi Dergisi · doi:10.33712/mana.548909 · Cited by 5 · see citing works
Cyber Threat Analysis Based on Characterizing Adversarial Behavior for Energy Delivery System
Ullah, S., Shetty, S. S., Nayak, A., Hassanzadeh, A., & Hasan, K. (2019) · Lecture notes of the Institute for Computer Sciences, Social Informatics and Telecommunications Engineering · doi:10.1007/978-3-030-37231-6_8 · Cited by 4 · see citing works
Securing Cyberspace: Towards an Agenda for Research and Practice
Levesque, R., Walsh, D., & Whyte, D. (2015) · Technology Innovation Management Review · doi:10.22215/timreview/943 · Cited by 4 · see citing works
Alameedy, U., Abdul-Majeed, G. H., Al-Saedi, H. N., Al‐Sarkhi, A., & Mohmmed, A. O. (2025) · Arabian Journal for Science and Engineering · doi:10.1007/s13369-025-10884-6 · Cited by 4 · see citing works
“Recovery from this incident required nearly two weeks, resulting in substantial damage and adversely affecting numerous aspects of the organization’s operations [113].”
Abbasi, A. R., & Mohammadi, M. (2026) · Results in Engineering · doi:10.1016/j.rineng.2026.109893 · Cited by 4 · see citing works
Cyber Conflict as Statecraft: Explaining the Persistence of State-Sponsored Cyber Operations
Akoto, W. (2026) · Journal of Global Security Studies · doi:10.1093/jogss/ogag004 · Cited by 5 · see citing works
Complexity of Contemporary Indicators of Compromise
Hagen, R. A., & Helkala, K. M. (2024) · European Conference on Cyber Warfare and Security · doi:10.34190/eccws.23.1.2149 · Cited by 3 · see citing works
Considerations for Planning a Multi-Platform Energy Utility System
Biran, Y., DuBow, J. B., Pasricha, S., et al. (2017) · Energy and Power Engineering · doi:10.4236/epe.2017.912046 · Cited by 3 · see citing works
“The attackers used “wiper” malware which was also used in the Ukrainian attack, which renders computers useless, to disable 30,000 OT workstations and disrupt the internal operations and workstations of Saudi Aramco for days [10].”
MethodLegal Framework of Cyber Security
Tikk, E. (2015) · International series on intelligent systems, control and automation: science and engineering · doi:10.1007/978-3-319-18302-2_8 · Cited by 3 · see citing works
Self-citationCyber Cases: The PICCA Framework for Documenting Geopolitically Relevant Cyber Action
Bronk, C., & Jones, N. P. (2023) · Journal of Strategic Security · doi:10.5038/1944-0472.16.1.2068 · Cited by 3 · see citing works
“10 To do so, the authors provide an overview of case study methods, with emphasis on international security; review several significant case studies of geopolitically relevant cyberattacks; offer a framework, the Policy Informative Cyber Case Analysis (PICCA) for case analysis of such attacks; and…”
BackgroundSelf-citationSCADA Systems Cyber Security for Critical Infrastructures
Ismail, S., Sitnikova, E., & Slay, J. (2016) · International Journal of Cyber Warfare and Terrorism · doi:10.4018/ijcwt.2016070107 · Cited by 3 · see citing works
The Future of Data Storage: A Case Study with the Saudi Company
Ghamdi, A. A. (2018) · Journal of Electrical and Electronic Engineering · doi:10.11648/j.jeee.20180601.11 · Cited by 3 · see citing works
“Q5’s answer: Most SA IT members believe that their storage systems are protected against cyber-attacks, with the exception of the virus attack against the SA system in August 2012 that affected about 30,000 workstations [3].”
BackgroundShehadeh, L., & Lai, Q. (2020) · Politics and Religion · doi:10.1017/s1755048320000206 · Cited by 3 · see citing works
“The kingdom cannot afford its expensive financial incentive packages and has witnessed a serious increase in unemployment of approximately 13%, with an even higher percentage for Saudi citizens under the age of 29 (Bronk and Tikk-Ringas 2013).”
BackgroundStudy on Consumers’ Perceived Benefits and Risks of Smart Energy System
Park, C., Heo, W. G., & Lee, M. E. (2024) · International Journal of Energy Economics and Policy · doi:10.32479/ijeep.15687 · Cited by 2 · see citing works
Cybersecurity and Sovereignty in Cyberspace: Challenges and Prospects of International Law
Lazari, С. С. (2025) · Moscow Journal of International Law · doi:10.24833/0869-0049-2025-1-125-137 · Cited by 2 · see citing works
Modelling and simulating organizational ransomware recovery: structure, methodology, and decisions
Ilau, M.-C., Baldwin, A., Caulfield, T., et al. (2025) · Journal of Cybersecurity · doi:10.1093/cybsec/tyaf035 · Cited by 2 · see citing works
Aytekin, A., Coşkun, A., & Dursun, M. (2025) · Applied Sciences · doi:10.3390/app16010177 · Cited by 2 · see citing works
Digital Transformation of Energy Systems: Technologies, Data, Governance and Cyber Security
Pourmirza, Z., Bozdal, M., Khalil, M., Judson, E., & Walker, S. L. (2026) · IET Smart Grid · doi:10.1049/stg2.70068 · Cited by 6 · see citing works
Impact of Cyber Attack on Saudi Aramco
I.alghamdi, M. I. (2021) · Journal of Cybersecurity and Information Management · doi:10.54216/jcim.070102 · Cited by 2 · see citing works
Destructive Malwares on MITRE ATT&CK Tactics for Cyber Warfare: A Brief Survey and Analysis
Park, S., Lee, M., Na, S., et al. (2024) · Communications in computer and information science · doi:10.1007/978-981-97-4465-7_19 · Cited by 2 · see citing works
Poisoning Actuation Attacks Against the Learning of an Optimal Controller
Fotiadis, F., Kanellopoulos, A., Vamvoudakis, K. G., & Hugues, J. (2024) · Proceedings of the ... American Control Conference/Proceedings of the American Control Conference · doi:10.23919/acc60939.2024.10644755 · Cited by 2 · see citing works
“This is clearly demonstrated in various recent security incidents, including the German steel mill attack [4], the 2015 Ukrainian blackout [5], and the Saudi Aramco incident [6].”
Background
- Authors
- Bronk, C., & Tikk-Ringas, E.
- Venue
- Survival
- Publisher
- Informa UK Limited
- Published
- 2013-04-03
- Volume
- 55
- Issue
- 2
- Pages
- 81-96
- ISSN
- 0039-6338 (ISSN-L)
- 1468-2699
- OpenAlex
- W2074548145
- Cited by
- 160
- References
- 0
- Citations by year
- 2026: 16 · 2025: 15 · 2024: 15 · 2023: 11 · 2022: 11 · 2021: 17 · 2020: 12 · 2019: 13 · 2018: 15 · 2017: 12 · 2016: 10 · 2015: 5 · 2014: 7 · 2013: 1
- FWCI
- 45.08
- Type
- journal article
- Language
- en
- Open access
- closed
- Locations
- Survival (publishedVersion)
- Topics
- Social Sciences › Political Science and International Relations › Cybersecurity and Cyber Warfare Studies
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Sociology and Political Science › Terrorism, Counterterrorism, and Political Violence
- Keywords
- ransomware, oil and gas industry, critical infrastructure security, corporate network security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
