{"id":"https://openalex.org/W4417461663","doi":"https://doi.org/10.1051/sands/2025006","title":"ShotFlex: A reinforcement learning-based cyber attack path generation method for cybersecurity evaluation","display_name":"ShotFlex: A reinforcement learning-based cyber attack path generation method for cybersecurity evaluation","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4417461663","doi":"https://doi.org/10.1051/sands/2025006"},"language":"en","primary_location":{"id":"doi:10.1051/sands/2025006","doi":"https://doi.org/10.1051/sands/2025006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2025006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/2025/01/sands20250003.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275","2097-2121"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj"],"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748","https://openalex.org/P4310319982"],"host_organization_lineage_names":["EDP Sciences","Science Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://sands.edpsciences.org/articles/sands/pdf/2025/01/sands20250003.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5016025493","display_name":"Zhuocheng Yu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuocheng Yu","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology","Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology","institution_ids":["https://openalex.org/I3045169105"]},{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5071894546","display_name":"Yan Jia","orcid":"https://orcid.org/0000-0002-5446-6565","observed_orcids":["https://orcid.org/0000-0002-5446-6565"]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yan Jia","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081140857","display_name":"Weihong Han","orcid":"https://orcid.org/0000-0001-9997-1509","observed_orcids":["https://orcid.org/0000-0001-9997-1509"]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"WeiHong Han","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004645356","display_name":"Jiawei Zhang","orcid":"https://orcid.org/0000-0001-8812-4961","observed_orcids":["https://orcid.org/0000-0001-8812-4961"]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiawei Zhang","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mingsheng Yang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingsheng Yang","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5082725107","display_name":"Yangyang Mei","orcid":"https://orcid.org/0000-0002-7050-4437","observed_orcids":["https://orcid.org/0000-0002-7050-4437","https://orcid.org/0009-0001-4867-9732"]},"institutions":[{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yangyang Mei","raw_affiliation_strings":["Department of New Networks, Peng Cheng Laboratory"],"raw_orcid":"https://orcid.org/0000-0002-7050-4437","affiliations":[{"raw_affiliation_string":"Department of New Networks, Peng Cheng Laboratory","institution_ids":["https://openalex.org/I4210136793"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":0,"currency":"USD","value_usd":0},"apc_paid":null,"fwci":0.4408,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.69752284,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":93,"max":96},"biblio":{"volume":"4","issue":null,"first_page":"2025006","last_page":"2025006"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.676800012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.676800012588501,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.257099986076355,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.02850000001490116,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/automated-penetration-testing","display_name":"automated penetration testing","score":0.8989999890327454},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"reinforcement learning","score":0.7770000100135803},{"id":"https://openalex.org/keywords/network-security-assessment","display_name":"network security assessment","score":0.7720000147819519},{"id":"https://openalex.org/keywords/reward-function-design","display_name":"reward function design","score":0.44699999690055847},{"id":"https://openalex.org/keywords/pruning-methods","display_name":"pruning techniques","score":0.75},{"id":"https://openalex.org/keywords/unknown-network-topology","display_name":"unknown network topology","score":0.5860000252723694}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6439999938011169},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.5755000114440918},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.520799994468689},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4691999852657318},{"id":"https://openalex.org/C2777735758","wikidata":"https://www.wikidata.org/wiki/Q817765","display_name":"Path (computing)","level":2,"score":0.45419999957084656},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.4277999997138977},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.3752000033855438},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.33180001378059387},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31290000677108765},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.302700012922287},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.3019999861717224},{"id":"https://openalex.org/C2780791683","wikidata":"https://www.wikidata.org/wiki/Q846785","display_name":"Action (physics)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.27709999680519104},{"id":"https://openalex.org/C98214672","wikidata":"https://www.wikidata.org/wiki/Q1501923","display_name":"Penetration test","level":3,"score":0.2667999863624573},{"id":"https://openalex.org/C67203356","wikidata":"https://www.wikidata.org/wiki/Q1321905","display_name":"Reinforcement","level":2,"score":0.26409998536109924},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.26269999146461487},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2583000063896179}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1051/sands/2025006","doi":"https://doi.org/10.1051/sands/2025006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2025006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/2025/01/sands20250003.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275","2097-2121"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj"],"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748","https://openalex.org/P4310319982"],"host_organization_lineage_names":["EDP Sciences","Science Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},{"id":"pmh:oai:edpsciences.org:dkey/10.1051/sands/2025006","doi":null,"is_oa":true,"landing_page_url":"https://sands.edpsciences.org/10.1051/sands/2025006/pdf","pdf_url":"https://sands.edpsciences.org/10.1051/sands/2025006/pdf","source":{"id":"https://openalex.org/S4306400744","display_name":"Springer Link (Chiba Institute of Technology)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I8488066","host_organization_name":"Chiba Institute of Technology","host_organization_lineage":["https://openalex.org/I8488066"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"https://doi.org/10.1051/sands/2025006","raw_type":"Text"},{"id":"pmh:oai:doaj.org/article:a0a90235c3f147899cde1c23c865bbb2","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/a0a90235c3f147899cde1c23c865bbb2","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Security and Safety, Vol 4, p 2025006 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1051/sands/2025006","doi":"https://doi.org/10.1051/sands/2025006","is_oa":true,"landing_page_url":"https://doi.org/10.1051/sands/2025006","pdf_url":"https://sands.edpsciences.org/articles/sands/pdf/2025/01/sands20250003.pdf","source":{"id":"https://openalex.org/S4387281467","display_name":"Security and Safety","issn_l":"2826-1275","issn":["2826-1275","2097-2121"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj"],"host_organization":"https://openalex.org/P4310319748","host_organization_name":"EDP Sciences","host_organization_lineage":["https://openalex.org/P4310319748","https://openalex.org/P4310319982"],"host_organization_lineage_names":["EDP Sciences","Science Press"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Safety","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320318558","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417461663.pdf","grobid_xml":"https://content.openalex.org/works/W4417461663.grobid-xml"},"referenced_works_count":31,"referenced_works":["https://openalex.org/W1714211023","https://openalex.org/W1977778029","https://openalex.org/W2145339207","https://openalex.org/W2168359464","https://openalex.org/W2257979135","https://openalex.org/W2342922302","https://openalex.org/W2546352153","https://openalex.org/W2756025240","https://openalex.org/W2809876556","https://openalex.org/W2890428069","https://openalex.org/W2912451346","https://openalex.org/W2981252702","https://openalex.org/W2982316857","https://openalex.org/W3017733550","https://openalex.org/W3037267797","https://openalex.org/W3094485976","https://openalex.org/W3100789280","https://openalex.org/W3126165507","https://openalex.org/W3192790930","https://openalex.org/W3207433063","https://openalex.org/W3212868562","https://openalex.org/W4220850595","https://openalex.org/W4292707138","https://openalex.org/W4312948208","https://openalex.org/W4380367456","https://openalex.org/W4386349792","https://openalex.org/W4388711601","https://openalex.org/W4391852815","https://openalex.org/W4399477741","https://openalex.org/W4402577718","https://openalex.org/W4409348659"],"related_works":[],"abstract_inverted_index":{"Penetration":[0],"testing":[1,28,50],"is":[2,17],"an":[3,184],"important":[4],"method":[5,129,134],"for":[6,21],"discovering":[7],"hidden":[8],"vulnerabilities":[9],"and":[10,38,46,100,115,138,187],"attack":[11,59,85,111,153],"paths":[12,154],"in":[13,113],"network":[14,23,95],"systems,":[15],"which":[16,97,141],"of":[18,63,81,88,93,192],"great":[19],"significance":[20],"evaluating":[22],"security.":[24],"However,":[25],"traditional":[26],"penetration":[27,49,193],"methods":[29,82],"can":[30,51,178],"only":[31],"be":[32],"carried":[33],"out":[34],"by":[35],"security":[36],"analysts,":[37],"the":[39,64,94,108,119,143,147,156,190],"results":[40,174],"are":[41],"unstable,":[42],"requiring":[43],"extra":[44],"time":[45],"money.":[47],"Automated":[48,58],"effectively":[52],"reduce":[53],"reliance":[54],"on":[55,166],"manual":[56],"efforts.":[57],"planning,":[60],"as":[61],"one":[62],"most":[65,87],"critical":[66],"components,":[67],"has":[68],"garnered":[69],"widespread":[70],"attention":[71],"from":[72,118,155],"researchers.":[73],"Although":[74],"previous":[75],"studies":[76],"have":[77],"explored":[78],"a":[79,126,132,162],"variety":[80],"to":[83,135,145,151,169,182],"mine":[84],"paths,":[86],"them":[89],"require":[90],"prior":[91,167],"knowledge":[92,168],"topology,":[96],"contradicts":[98],"reality":[99],"thus":[101],"lacks":[102],"application":[103],"value.":[104],"To":[105],"automatically":[106],"find":[107],"best":[109,148],"potential":[110],"path":[112,171],"complex":[114],"unknown":[116],"networks":[117],"hacker\u2019s":[120],"perspective,":[121],"this":[122],"paper":[123],"proposes":[124],"ShotFlex:":[125],"reinforcement":[127],"learning-based":[128],"that":[130,176],"uses":[131],"quantifiable":[133],"evaluate":[136],"host":[137],"obtain":[139],"rewards,":[140],"guides":[142],"agent":[144],"choose":[146],"response":[149],"action":[150],"discover":[152],"intruder\u2019s":[157],"perspective.":[158],"ShotFlex":[159,177],"also":[160],"introduces":[161],"pruning":[163],"strategy":[164],"based":[165],"accelerate":[170],"generation.":[172],"Experimental":[173],"reveal":[175],"combine":[179],"current":[180],"information":[181],"provide":[183],"effective":[185],"decision":[186],"significantly":[188],"improve":[189],"efficiency":[191],"testing.":[194]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-10-12T09:40:04.860316","created_date":"2025-12-17T00:00:00"}