{"id":"https://openalex.org/W4404130344","doi":"https://doi.org/10.1145/3689933.3690831","title":"PenHeal: A Two-Stage LLM Framework for Automated Pentesting and Optimal Remediation","display_name":"PenHeal: A Two-Stage LLM Framework for Automated Pentesting and Optimal Remediation","publication_year":2023,"publication_date":"2023-11-06","ids":{"openalex":"https://openalex.org/W4404130344","doi":"https://doi.org/10.1145/3689933.3690831"},"language":"en","primary_location":{"id":"doi:10.1145/3689933.3690831","doi":"https://doi.org/10.1145/3689933.3690831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689933.3690831","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3689933.3690831?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Workshop on Autonomous Cybersecurity","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3689933.3690831?download=true","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109772904","display_name":"Junjie Huang","orcid":"https://orcid.org/0009-0009-0498-2973","observed_orcids":["https://orcid.org/0009-0009-0498-2973"]},"institutions":[{"id":"https://openalex.org/I258800397","display_name":"New York University Shanghai","ror":"https://ror.org/02vpsdb40","country_code":"CN","type":"education","lineage":["https://openalex.org/I258800397","https://openalex.org/I57206974"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Junjie Huang","raw_affiliation_strings":["New York University Shanghai, Shanghai, China"],"raw_orcid":"https://orcid.org/0009-0009-0498-2973","affiliations":[{"raw_affiliation_string":"New York University Shanghai, Shanghai, China","institution_ids":["https://openalex.org/I258800397"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5081500464","display_name":"Quanyan Zhu","orcid":"https://orcid.org/0000-0002-0008-2953","observed_orcids":["https://orcid.org/0000-0002-0008-2953"]},"institutions":[{"id":"https://openalex.org/I57206974","display_name":"New York University","ror":"https://ror.org/0190ak572","country_code":"US","type":"education","lineage":["https://openalex.org/I57206974"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Quanyan Zhu","raw_affiliation_strings":["New York University, Brooklyn, USA"],"raw_orcid":"https://orcid.org/0000-0002-0008-2953","affiliations":[{"raw_affiliation_string":"New York University, Brooklyn, USA","institution_ids":["https://openalex.org/I57206974"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":9.0419,"has_fulltext":true,"cited_by_count":47,"citation_normalized_percentile":{"value":0.98677249,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":93,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"11","last_page":"22"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9185000061988831,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9185000061988831,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.025599999353289604,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.020400000736117363,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.7919999957084656},{"id":"https://openalex.org/keywords/automated-penetration-testing","display_name":"automated penetration testing","score":0.8600000143051147},{"id":"https://openalex.org/keywords/vulnerability-remediation","display_name":"vulnerability remediation","score":0.9850000143051147},{"id":"https://openalex.org/keywords/vulnerability-detection","display_name":"vulnerability detection","score":0.5609999895095825},{"id":"https://openalex.org/keywords/cybersecurity","display_name":"cybersecurity","score":0.38100001215934753},{"id":"https://openalex.org/keywords/two-stage-framework","display_name":"two-stage framework","score":0.6389999985694885},{"id":"https://openalex.org/keywords/software-security-evaluation","display_name":"software security evaluation","score":0.33899998664855957}],"concepts":[{"id":"https://openalex.org/C522964758","wikidata":"https://www.wikidata.org/wiki/Q2019586","display_name":"Environmental remediation","level":3,"score":0.6358038187026978},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5759122371673584},{"id":"https://openalex.org/C146357865","wikidata":"https://www.wikidata.org/wiki/Q1123245","display_name":"Stage (stratigraphy)","level":2,"score":0.43107330799102783},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.1194494366645813},{"id":"https://openalex.org/C112570922","wikidata":"https://www.wikidata.org/wiki/Q60528603","display_name":"Contamination","level":2,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/3689933.3690831","doi":"https://doi.org/10.1145/3689933.3690831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689933.3690831","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3689933.3690831?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Workshop on Autonomous Cybersecurity","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2407.17788","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2407.17788","pdf_url":"https://arxiv.org/pdf/2407.17788","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2407.17788","doi":"https://doi.org/10.48550/arxiv.2407.17788","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2407.17788","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.1145/3689933.3690831","doi":"https://doi.org/10.1145/3689933.3690831","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3689933.3690831","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3689933.3690831?download=true","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the Workshop on Autonomous Cybersecurity","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G320582979","display_name":null,"funder_award_id":"ECCS-1847056 and BCS-2122060","funder_id":"https://openalex.org/F4320323817","funder_display_name":"Universitas Brawijaya"}],"funders":[{"id":"https://openalex.org/F4320323817","display_name":"Universitas Brawijaya","ror":"https://ror.org/01wk3d929"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4404130344.pdf","grobid_xml":"https://content.openalex.org/works/W4404130344.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W2020831675","https://openalex.org/W2239394757","https://openalex.org/W2536179434","https://openalex.org/W2626778328","https://openalex.org/W2917166349","https://openalex.org/W2963542740","https://openalex.org/W3027879771","https://openalex.org/W3030163527","https://openalex.org/W3089016417","https://openalex.org/W3097392354","https://openalex.org/W3156480510","https://openalex.org/W4211195953","https://openalex.org/W4308641648","https://openalex.org/W4327810158","https://openalex.org/W4384918448","https://openalex.org/W4385192597","https://openalex.org/W4385474529","https://openalex.org/W4385507608","https://openalex.org/W4385848840","https://openalex.org/W4386081444","https://openalex.org/W4387224542","https://openalex.org/W4387800058","https://openalex.org/W4389945750","https://openalex.org/W4390041933","https://openalex.org/W4392490408","https://openalex.org/W4392560653","https://openalex.org/W4398785927","https://openalex.org/W4401042136","https://openalex.org/W4403329963","https://openalex.org/W4406800520","https://openalex.org/W6822365745"],"related_works":["https://openalex.org/W6948053009","https://openalex.org/W7223199350","https://openalex.org/W7160139699","https://openalex.org/W4411236263","https://openalex.org/W7127106399","https://openalex.org/W7166003585","https://openalex.org/W4415199923","https://openalex.org/W4396862117","https://openalex.org/W4416250353","https://openalex.org/W4416068658"],"abstract_inverted_index":{"Recent":[0],"advances":[1],"in":[2,11,25],"Large":[3],"Language":[4],"Models":[5],"(LLMs)":[6],"have":[7],"shown":[8],"significant":[9],"potential":[10],"enhancing":[12],"cybersecurity":[13],"defenses":[14],"against":[15],"sophisticated":[16],"threats.":[17],"LLM-based":[18],"penetration":[19,58],"testing":[20,59],"is":[21],"an":[22],"essential":[23],"step":[24],"automating":[26],"system":[27,55,66],"security":[28],"evaluations":[29],"by":[30],"identifying":[31],"vulnerabilities.":[32,41],"Remediation,":[33],"the":[34],"subsequent":[35],"crucial":[36,52],"step,":[37],"addresses":[38],"these":[39],"discovered":[40],"Since":[42],"details":[43],"about":[44],"vulnerabilities,":[45],"exploitation":[46],"methods,":[47],"and":[48,71],"software":[49],"versions":[50],"offer":[51],"insights":[53],"into":[54,63],"weaknesses,":[56],"integrating":[57],"with":[60],"vulnerability":[61],"remediation":[62],"a":[64],"cohesive":[65],"has":[67],"become":[68],"both":[69],"intuitive":[70],"necessary.":[72]},"counts_by_year":[{"year":2026,"cited_by_count":25},{"year":2025,"cited_by_count":20},{"year":2024,"cited_by_count":2}],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2024-11-08T00:00:00"}