{"id":"https://openalex.org/W4297098541","doi":"https://doi.org/10.1109/dsc54232.2022.9888919","title":"Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs","display_name":"Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs","publication_year":2022,"publication_date":"2022-06-22","ids":{"openalex":"https://openalex.org/W4297098541","doi":"https://doi.org/10.1109/dsc54232.2022.9888919"},"language":"en","primary_location":{"id":"doi:10.1109/dsc54232.2022.9888919","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc54232.2022.9888919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5007842569","display_name":"Tyler Cody","orcid":"https://orcid.org/0000-0001-9215-5816"},"institutions":[{"id":"https://openalex.org/I4210159324","display_name":"National Security Technologies (United States)","ror":"https://ror.org/05fss0456","country_code":"US","type":"company","lineage":["https://openalex.org/I4210159324"]},{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Tyler Cody","raw_affiliation_strings":["National Security Institute,Virginia Tech","Virginia Tech, National Security Institute"],"affiliations":[{"raw_affiliation_string":"National Security Institute,Virginia Tech","institution_ids":["https://openalex.org/I4210159324"]},{"raw_affiliation_string":"Virginia Tech, National Security Institute","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091742537","display_name":"Abdul Rahim Abdul Rahman","orcid":"https://orcid.org/0000-0003-4446-2090"},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Abdul Rahman","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028087468","display_name":"Christopher Redino","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christopher Redino","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022523600","display_name":"Lanxiao Huang","orcid":"https://orcid.org/0009-0005-6366-4781"},"institutions":[{"id":"https://openalex.org/I4210159324","display_name":"National Security Technologies (United States)","ror":"https://ror.org/05fss0456","country_code":"US","type":"company","lineage":["https://openalex.org/I4210159324"]},{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lanxiao Huang","raw_affiliation_strings":["National Security Institute,Virginia Tech","Virginia Tech, National Security Institute"],"affiliations":[{"raw_affiliation_string":"National Security Institute,Virginia Tech","institution_ids":["https://openalex.org/I4210159324"]},{"raw_affiliation_string":"Virginia Tech, National Security Institute","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001898925","display_name":"Ryan Clark","orcid":"https://orcid.org/0000-0002-2807-4584"},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ryan Clark","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084082591","display_name":"Akshay Kakkar","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Akshay Kakkar","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010566757","display_name":"Deepak Kushwaha","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Deepak Kushwaha","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017078970","display_name":"Paul Park","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Paul Park","raw_affiliation_strings":["Deloitte Consulting LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte Consulting LLP","institution_ids":["https://openalex.org/I145325580"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056670558","display_name":"Peter A. Beling","orcid":"https://orcid.org/0000-0003-2196-6982"},"institutions":[{"id":"https://openalex.org/I859038795","display_name":"Virginia Tech","ror":"https://ror.org/02smfhw86","country_code":"US","type":"education","lineage":["https://openalex.org/I859038795"]},{"id":"https://openalex.org/I4210159324","display_name":"National Security Technologies (United States)","ror":"https://ror.org/05fss0456","country_code":"US","type":"company","lineage":["https://openalex.org/I4210159324"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Peter Beling","raw_affiliation_strings":["National Security Institute,Virginia Tech","Virginia Tech, National Security Institute"],"affiliations":[{"raw_affiliation_string":"National Security Institute,Virginia Tech","institution_ids":["https://openalex.org/I4210159324"]},{"raw_affiliation_string":"Virginia Tech, National Security Institute","institution_ids":["https://openalex.org/I859038795"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5078074716","display_name":"Edward Bowen","orcid":null},"institutions":[{"id":"https://openalex.org/I145325580","display_name":"Deloitte (United States)","ror":"https://ror.org/03xkm6e60","country_code":"US","type":"company","lineage":["https://openalex.org/I145325580","https://openalex.org/I4210139068"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edward Bowen","raw_affiliation_strings":["Deloitte & Touche LLP"],"affiliations":[{"raw_affiliation_string":"Deloitte & Touche LLP","institution_ids":["https://openalex.org/I145325580"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":10,"corresponding_author_ids":["https://openalex.org/A5007842569"],"corresponding_institution_ids":["https://openalex.org/I4210159324","https://openalex.org/I859038795"],"apc_list":null,"apc_paid":null,"fwci":3.1391,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.91910395,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9962000250816345,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9904000163078308,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/traverse","display_name":"Traverse","score":0.9017957448959351},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.868607759475708},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7483862042427063},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.640495777130127},{"id":"https://openalex.org/keywords/terrain","display_name":"Terrain","score":0.5623738765716553},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.46106964349746704},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4398652911186218},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40170684456825256}],"concepts":[{"id":"https://openalex.org/C176809094","wikidata":"https://www.wikidata.org/wiki/Q15401496","display_name":"Traverse","level":2,"score":0.9017957448959351},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.868607759475708},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7483862042427063},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.640495777130127},{"id":"https://openalex.org/C161840515","wikidata":"https://www.wikidata.org/wiki/Q186131","display_name":"Terrain","level":2,"score":0.5623738765716553},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46106964349746704},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4398652911186218},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40170684456825256},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C18903297","wikidata":"https://www.wikidata.org/wiki/Q7150","display_name":"Ecology","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/dsc54232.2022.9888919","is_oa":false,"landing_page_url":"https://doi.org/10.1109/dsc54232.2022.9888919","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W41554520","https://openalex.org/W1590752147","https://openalex.org/W1969292866","https://openalex.org/W1972914730","https://openalex.org/W2103314689","https://openalex.org/W2145339207","https://openalex.org/W2607713949","https://openalex.org/W2767129667","https://openalex.org/W2786668512","https://openalex.org/W2792721951","https://openalex.org/W2890428069","https://openalex.org/W2902270076","https://openalex.org/W2912451346","https://openalex.org/W2945365276","https://openalex.org/W2952298682","https://openalex.org/W2964043796","https://openalex.org/W2995988246","https://openalex.org/W3047785415","https://openalex.org/W3094485976","https://openalex.org/W3100802376","https://openalex.org/W3132333118","https://openalex.org/W3155797402","https://openalex.org/W3194526190","https://openalex.org/W3194625192","https://openalex.org/W4213251304","https://openalex.org/W4298857966","https://openalex.org/W6635235395","https://openalex.org/W6637967152","https://openalex.org/W6692846177","https://openalex.org/W6737069938","https://openalex.org/W6756745224","https://openalex.org/W6762456871","https://openalex.org/W6765009397","https://openalex.org/W6800226346"],"related_works":["https://openalex.org/W2377402383","https://openalex.org/W2380835401","https://openalex.org/W2381912691","https://openalex.org/W2350381577","https://openalex.org/W2353618196","https://openalex.org/W2348074676","https://openalex.org/W4294690775","https://openalex.org/W4389574494","https://openalex.org/W4200195314","https://openalex.org/W2156329176"],"abstract_inverted_index":{"Reinforcement":[0],"learning":[1],"(RL),":[2],"in":[3,28],"conjunction":[4],"with":[5,19],"attack":[6],"graphs":[7],"and":[8,16,78],"cyber":[9],"terrain,":[10],"are":[11],"used":[12],"to":[13,90],"develop":[14],"reward":[15,96],"state":[17],"associated":[18],"determination":[20],"of":[21,26,46,94,102],"optimal":[22,48],"paths":[23,49,104],"for":[24,114],"exfiltration":[25],"data":[27,74],"enterprise":[29],"networks.":[30],"This":[31,62],"work":[32,63],"builds":[33],"on":[34,42,70,99],"previous":[35,66],"crown":[36],"jewels":[37],"(CJ)":[38],"identification":[39,101],"that":[40,50,73],"focused":[41],"the":[43,65,71,85,92,100],"target":[44],"goal":[45],"computing":[47],"adversaries":[51,106],"may":[52],"traverse":[53],"toward":[54],"compromising":[55],"CJs":[56],"or":[57],"hosts":[58],"within":[59],"their":[60],"proximity.":[61],"inverts":[64],"CJ":[67],"approach":[68],"based":[69,98],"assumption":[72],"has":[75],"been":[76],"stolen":[77],"now":[79],"must":[80],"be":[81],"quietly":[82],"exfiltrated":[83],"from":[84],"network.":[86],"RL":[87],"is":[88],"utilized":[89],"support":[91],"development":[93],"a":[95,115],"function":[97],"those":[103],"where":[105],"desire":[107],"reduced":[108],"detection.":[109],"Results":[110],"demonstrate":[111],"promising":[112],"performance":[113],"sizable":[116],"network":[117],"environment.":[118]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3}],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-10-10T00:00:00"}