{"id":"https://openalex.org/W2110908300","doi":"https://doi.org/10.1145/1180405.1180446","title":"A scalable approach to attack graph generation","display_name":"A scalable approach to attack graph generation","publication_year":2006,"publication_date":"2006-10-30","ids":{"openalex":"https://openalex.org/W2110908300","doi":"https://doi.org/10.1145/1180405.1180446","mag":"2110908300"},"language":"en","primary_location":{"id":"doi:10.1145/1180405.1180446","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1180405.1180446","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th ACM conference on Computer and communications security","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5113810433","display_name":"Xinming Ou","orcid":"https://orcid.org/0009-0007-2501-7991"},"institutions":[{"id":"https://openalex.org/I219193219","display_name":"Purdue University West Lafayette","ror":"https://ror.org/02dqehb95","country_code":"US","type":"education","lineage":["https://openalex.org/I219193219"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinming Ou","raw_affiliation_strings":["Purdue University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Purdue University","institution_ids":["https://openalex.org/I219193219"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055088985","display_name":"Wayne F. Boyer","orcid":null},"institutions":[{"id":"https://openalex.org/I2800102766","display_name":"Idaho National Laboratory","ror":"https://ror.org/00ty2a548","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I2800102766","https://openalex.org/I2801818860"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wayne F. Boyer","raw_affiliation_strings":["Idaho National Laboratory","[Idaho National Laboratory]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Idaho National Laboratory","institution_ids":["https://openalex.org/I2800102766"]},{"raw_affiliation_string":"[Idaho National Laboratory]","institution_ids":["https://openalex.org/I2800102766"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011886469","display_name":"Miles McQueen","orcid":null},"institutions":[{"id":"https://openalex.org/I2800102766","display_name":"Idaho National Laboratory","ror":"https://ror.org/00ty2a548","country_code":"US","type":"facility","lineage":["https://openalex.org/I1325736334","https://openalex.org/I1330989302","https://openalex.org/I2800102766","https://openalex.org/I2801818860"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Miles A. McQueen","raw_affiliation_strings":["Idaho National Laboratory","[Idaho National Laboratory]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Idaho National Laboratory","institution_ids":["https://openalex.org/I2800102766"]},{"raw_affiliation_string":"[Idaho National Laboratory]","institution_ids":["https://openalex.org/I2800102766"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":71.6691,"has_fulltext":false,"cited_by_count":613,"citation_normalized_percentile":{"value":0.99921326,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"336","last_page":"345"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9983999729156494,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9940999746322632,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7466870546340942},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5915775895118713},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5771628022193909},{"id":"https://openalex.org/keywords/timing-attack","display_name":"Timing attack","score":0.5043762922286987},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.2421802580356598},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.17645058035850525}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7466870546340942},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5915775895118713},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5771628022193909},{"id":"https://openalex.org/C28420585","wikidata":"https://www.wikidata.org/wiki/Q2665075","display_name":"Timing attack","level":4,"score":0.5043762922286987},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.2421802580356598},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.17645058035850525},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.0},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/1180405.1180446","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1180405.1180446","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 13th ACM conference on Computer and communications security","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.468.1616","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.468.1616","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cse.psu.edu/~tjaeger/cse598-f11/docs/ou_attack_graphs.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.92.3114","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.92.3114","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://people.cis.ksu.edu/~xou/publications/ccs06.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.550000011920929,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":15,"referenced_works":["https://openalex.org/W193500057","https://openalex.org/W1506042709","https://openalex.org/W1590752147","https://openalex.org/W1774324140","https://openalex.org/W1965332127","https://openalex.org/W2025113626","https://openalex.org/W2054127354","https://openalex.org/W2083658929","https://openalex.org/W2084044852","https://openalex.org/W2101438812","https://openalex.org/W2117694832","https://openalex.org/W2121805588","https://openalex.org/W2207375515","https://openalex.org/W2752929869","https://openalex.org/W6635235395"],"related_works":["https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W2376932109","https://openalex.org/W2389214306","https://openalex.org/W2382290278","https://openalex.org/W2350741829","https://openalex.org/W2130043461","https://openalex.org/W2530322880"],"abstract_inverted_index":{"Attack":[0],"graphs":[1,16,196],"are":[2],"important":[3],"tools":[4],"for":[5,197],"analyzing":[6],"security":[7,143],"vulnerabilities":[8],"in":[9,39,47,157,174],"enterprise":[10],"networks.":[11],"Previous":[12],"work":[13,61],"on":[14,72,146],"attack":[15,43,49,102,107,115,122,134,172,184,195],"has":[17,125],"not":[18],"provided":[19],"an":[20],"account":[21],"of":[22,25,36,42,201,211],"the":[23,26,40,48,67,129,158,166],"scalability":[24],"graph":[27,50,123,135,173,185],"generating":[28],"process,":[29],"and":[30,55,100,117,162],"there":[31],"is":[32,66,188],"often":[33],"a":[34,87,95,141,154,170,205],"lack":[35],"logical":[37,74,106,112,121,147,171,183,194],"formalism":[38],"representation":[41],"graphs,":[44,108],"which":[45,109],"results":[46],"being":[51,131],"difficult":[52],"to":[53,81,98,128,152,164,168],"use":[54,165],"understand":[56],"by":[57,62],"human":[58],"beings.":[59],"Pioneer":[60],"Sheyner,":[63],"et":[64],"al.":[65],"first":[68],"attack-graph":[69],"tool":[70,85,137],"based":[71,145],"formal":[73],"techniques,":[75],"namely":[76],"model-checking.":[77],"However,":[78],"when":[79],"applied":[80],"moderate-sized":[82],"networks,":[83],"Sheyner's":[84],"encountered":[86],"significant":[88],"exponential":[89],"explosion":[90],"problem.":[91],"This":[92],"paper":[93],"describes":[94],"new":[96],"approach":[97],"represent":[99],"generate":[101,169],"graphs.":[103],"We":[104,149,177,191],"propose":[105],"directly":[110],"illustrate":[111],"dependencies":[113],"among":[114],"goals":[116],"configuration":[118],"information.":[119],"A":[120],"always":[124],"size":[126],"polynomial":[127],"network":[130,142],"analyzed.":[132],"Our":[133],"generation":[136,186],"builds":[138],"upon":[139],"MulVAL,":[140],"analyzer":[144],"programming.":[148],"demonstrate":[150],"how":[151,163],"produce":[153],"derivation":[155],"trace":[156,167],"MulVAL":[159],"logic-programming":[160],"engine,":[161],"quadratic":[175],"time.":[176],"show":[178],"experimental":[179],"evidence":[180],"that":[181],"our":[182],"algorithm":[187],"very":[189],"efficient.":[190],"have":[192],"generated":[193],"fully":[198],"connected":[199],"networks":[200],"1000":[202],"machines":[203],"using":[204],"Pentium":[206],"4":[207],"CPU":[208],"with":[209],"1GB":[210],"RAM.":[212]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":18},{"year":2024,"cited_by_count":27},{"year":2023,"cited_by_count":37},{"year":2022,"cited_by_count":27},{"year":2021,"cited_by_count":22},{"year":2020,"cited_by_count":35},{"year":2019,"cited_by_count":37},{"year":2018,"cited_by_count":40},{"year":2017,"cited_by_count":48},{"year":2016,"cited_by_count":32},{"year":2015,"cited_by_count":34},{"year":2014,"cited_by_count":40},{"year":2013,"cited_by_count":40},{"year":2012,"cited_by_count":33}],"updated_date":"2026-06-14T07:44:22.658603","created_date":"2025-10-10T00:00:00"}
