{"id":"https://openalex.org/W4295279953","doi":"https://doi.org/10.1007/s10844-022-00738-0","title":"Hierarchical reinforcement learning for efficient and effective automated penetration testing of large networks","display_name":"Hierarchical reinforcement learning for efficient and effective automated penetration testing of large networks","publication_year":2022,"publication_date":"2022-09-12","ids":{"openalex":"https://openalex.org/W4295279953","doi":"https://doi.org/10.1007/s10844-022-00738-0"},"language":"en","primary_location":{"id":"doi:10.1007/s10844-022-00738-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00738-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00738-0.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00738-0.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101549630","display_name":"Mohamed Chahine Ghanem","orcid":"https://orcid.org/0000-0002-7067-7848"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Mohamed C. Ghanem","raw_affiliation_strings":["Department of Electrical and Electronic Engineering, City, University of London, Street, London, EC1V 0HB, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronic Engineering, City, University of London, Street, London, EC1V 0HB, UK","institution_ids":["https://openalex.org/I180825142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090198866","display_name":"Tom Chen","orcid":"https://orcid.org/0000-0001-8037-1685"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Thomas M. Chen","raw_affiliation_strings":["Department of Electrical and Electronic Engineering, City, University of London, Street, London, EC1V 0HB, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electrical and Electronic Engineering, City, University of London, Street, London, EC1V 0HB, UK","institution_ids":["https://openalex.org/I180825142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022708886","display_name":"Erivelton G. Nepomuceno","orcid":"https://orcid.org/0000-0002-5841-2193"},"institutions":[{"id":"https://openalex.org/I157286207","display_name":"National University of Ireland, Maynooth","ror":"https://ror.org/048nfjm95","country_code":"IE","type":"education","lineage":["https://openalex.org/I157286207"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Erivelton G. Nepomuceno","raw_affiliation_strings":["Department of Electronic Engineering, Maynooth University, Street, Maynooth, W23 F2K8, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electronic Engineering, Maynooth University, Street, Maynooth, W23 F2K8, Ireland","institution_ids":["https://openalex.org/I157286207"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5101549630"],"corresponding_institution_ids":["https://openalex.org/I180825142"],"apc_list":{"value":3090,"currency":"USD","value_usd":3090},"apc_paid":{"value":3090,"currency":"USD","value_usd":3090},"fwci":13.6165,"has_fulltext":true,"cited_by_count":61,"citation_normalized_percentile":{"value":0.99337383,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"60","issue":"2","first_page":"281","last_page":"303"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8892130255699158},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7729843258857727},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6533135175704956},{"id":"https://openalex.org/keywords/markov-decision-process","display_name":"Markov decision process","score":0.5472604036331177},{"id":"https://openalex.org/keywords/solver","display_name":"Solver","score":0.52958083152771},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4914933443069458},{"id":"https://openalex.org/keywords/partially-observable-markov-decision-process","display_name":"Partially observable Markov decision process","score":0.4688464403152466},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4468477964401245},{"id":"https://openalex.org/keywords/markov-process","display_name":"Markov process","score":0.2246849536895752},{"id":"https://openalex.org/keywords/markov-chain","display_name":"Markov chain","score":0.19692105054855347},{"id":"https://openalex.org/keywords/markov-model","display_name":"Markov model","score":0.1646358072757721}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8892130255699158},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7729843258857727},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6533135175704956},{"id":"https://openalex.org/C106189395","wikidata":"https://www.wikidata.org/wiki/Q176789","display_name":"Markov decision process","level":3,"score":0.5472604036331177},{"id":"https://openalex.org/C2778770139","wikidata":"https://www.wikidata.org/wiki/Q1966904","display_name":"Solver","level":2,"score":0.52958083152771},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4914933443069458},{"id":"https://openalex.org/C17098449","wikidata":"https://www.wikidata.org/wiki/Q176814","display_name":"Partially observable Markov decision process","level":4,"score":0.4688464403152466},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4468477964401245},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.2246849536895752},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.19692105054855347},{"id":"https://openalex.org/C163836022","wikidata":"https://www.wikidata.org/wiki/Q6771326","display_name":"Markov model","level":3,"score":0.1646358072757721},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1007/s10844-022-00738-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00738-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00738-0.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"},{"id":"pmh:oai:repository.londonmet.ac.uk:7956","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306400140","display_name":"London Met Repository (London Metropolitan University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I126193024","host_organization_name":"London Metropolitan University","host_organization_lineage":["https://openalex.org/I126193024"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"pmh:oai:openaccess.city.ac.uk:28765","is_oa":true,"landing_page_url":"https://openaccess.city.ac.uk/view/creators_id/mohamed=2Eghanem.html>,","pdf_url":"https://openaccess.city.ac.uk/id/eprint/28765/1/s10844-022-00738-0.pdf","source":{"id":"https://openalex.org/S4306401940","display_name":"City Research Online (City University London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I180825142","host_organization_name":"City, University of London","host_organization_lineage":["https://openalex.org/I180825142"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":{"id":"doi:10.1007/s10844-022-00738-0","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10844-022-00738-0","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10844-022-00738-0.pdf","source":{"id":"https://openalex.org/S36033921","display_name":"Journal of Intelligent Information Systems","issn_l":"0925-9902","issn":["0925-9902","1573-7675"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Intelligent Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.5199999809265137}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4295279953.pdf","grobid_xml":"https://content.openalex.org/works/W4295279953.grobid-xml"},"referenced_works_count":23,"referenced_works":["https://openalex.org/W32296153","https://openalex.org/W52153049","https://openalex.org/W1532688806","https://openalex.org/W1629225656","https://openalex.org/W1831612509","https://openalex.org/W1929797170","https://openalex.org/W2007049449","https://openalex.org/W2088688030","https://openalex.org/W2102660061","https://openalex.org/W2113631710","https://openalex.org/W2158907787","https://openalex.org/W2331904237","https://openalex.org/W2417280899","https://openalex.org/W2491605878","https://openalex.org/W2578028174","https://openalex.org/W2604176721","https://openalex.org/W2754629260","https://openalex.org/W2791708574","https://openalex.org/W2801939996","https://openalex.org/W2995988246","https://openalex.org/W3100802376","https://openalex.org/W4220693346","https://openalex.org/W4287750003"],"related_works":["https://openalex.org/W2096013579","https://openalex.org/W1589140671","https://openalex.org/W1760611253","https://openalex.org/W52153049","https://openalex.org/W3096874164","https://openalex.org/W2951545791","https://openalex.org/W1515117609","https://openalex.org/W2294884454","https://openalex.org/W2937181779","https://openalex.org/W2386410636"],"abstract_inverted_index":{"Abstract":[0],"Penetration":[1,68,80],"testing":[2,34,56,81],"(PT)":[3],"is":[4,94,140,188,198,209],"a":[5,86,129,210],"method":[6],"for":[7,193],"assessing":[8],"and":[9,19,27,38,60,133,174,176,217],"evaluating":[10],"the":[11,42,105,177,181,189],"security":[12],"of":[13,44,131,144,146,168,171,186,191],"digital":[14],"assets":[15],"by":[16,124],"planning,":[17],"generating,":[18],"executing":[20],"possible":[21],"attacks":[22],"that":[23,152,207],"aim":[24],"to":[25,53,75,103,213],"discover":[26],"exploit":[28],"vulnerabilities.":[29],"In":[30],"large":[31,115,119],"networks,":[32,196],"penetration":[33,55],"becomes":[35],"repetitive,":[36],"complex":[37],"resource":[39],"consuming":[40],"despite":[41],"use":[43],"automated":[45],"tools.":[46],"This":[47,121,138],"paper":[48],"investigates":[49],"reinforcement":[50],"learning":[51],"(RL)":[52],"make":[54],"more":[57],"intelligent,":[58],"targeted,":[59],"efficient.":[61],"The":[62,149,204],"proposed":[63],"approach":[64,139,212],"called":[65],"Intelligent":[66],"Automated":[67],"Testing":[69],"Framework":[70],"(IAPTF)":[71],"utilizes":[72],"model-based":[73],"RL":[74],"automate":[76],"sequential":[77],"decision":[78,90],"making.":[79],"tasks":[82],"are":[83],"treated":[84],"as":[85,128,161,163],"partially":[87],"observed":[88],"Markov":[89],"process":[91],"(POMDP)":[92],"which":[93,197],"solved":[95],"with":[96,154,180],"an":[97],"external":[98],"POMDP-solver":[99],"using":[100],"different":[101],"algorithms":[102],"identify":[104],"most":[106],"efficient":[107],"options.":[108],"A":[109],"major":[110],"difficulty":[111],"encountered":[112,200],"was":[113,122],"solving":[114],"POMDPs":[116],"resulting":[117],"from":[118,216],"networks.":[120],"overcome":[123],"representing":[125],"networks":[126,145],"hierarchically":[127],"group":[130],"clusters":[132],"treating":[134],"each":[135],"cluster":[136],"separately.":[137],"tested":[141,172],"through":[142],"simulations":[143],"various":[147],"sizes.":[148],"results":[150,205],"show":[151],"IAPTF":[153,187,208],"hierarchical":[155],"network":[156,182],"modeling":[157],"outperforms":[158],"previous":[159],"approaches":[160],"well":[162],"human":[164,220],"performance":[165],"in":[166,201],"terms":[167],"time,":[169],"number":[170],"vectors":[173],"accuracy,":[175],"advantage":[178,185],"increases":[179],"size.":[183],"Another":[184],"ease":[190],"repetition":[192],"retesting":[194],"similar":[195],"often":[199],"real":[202],"PT.":[203],"suggest":[206],"promising":[211],"offload":[214],"work":[215],"ultimately":[218],"replace":[219],"pen":[221],"testing.":[222]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":19},{"year":2024,"cited_by_count":29},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":1}],"updated_date":"2026-07-25T15:57:00.446498","created_date":"2025-10-10T00:00:00"}