{"id":"https://openalex.org/W2088688030","doi":"https://doi.org/10.1145/2046684.2046695","title":"An algorithm to find optimal attack paths in nondeterministic scenarios","display_name":"An algorithm to find optimal attack paths in nondeterministic scenarios","publication_year":2011,"publication_date":"2011-10-21","ids":{"openalex":"https://openalex.org/W2088688030","doi":"https://doi.org/10.1145/2046684.2046695","mag":"2088688030"},"language":"en","primary_location":{"id":"doi:10.1145/2046684.2046695","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2046684.2046695","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Security and artificial intelligence","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/1306.4040","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Carlos Sarraute","orcid":null},"institutions":[{"id":"https://openalex.org/I4210133962","display_name":"Instituto Tecnol\u00f3gico de Buenos Aires (ITBA)","ror":"https://ror.org/02qwadn23","country_code":"AR","type":"education","lineage":["https://openalex.org/I4210133962"]}],"countries":["AR"],"is_corresponding":false,"raw_author_name":"Carlos Sarraute","raw_affiliation_strings":["Core Security Technologies and ITBA, Buenos Aires, Argentina"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Core Security Technologies and ITBA, Buenos Aires, Argentina","institution_ids":["https://openalex.org/I4210133962"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Gerardo Richarte","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Gerardo Richarte","raw_affiliation_strings":["Core Security Technologies, Buenos Aires, Argentina"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Core Security Technologies, Buenos Aires, Argentina","institution_ids":[]}]},{"author_position":"last","author":{"id":null,"display_name":"Jorge Luc\u00e1ngeli Obes","orcid":null},"institutions":[{"id":"https://openalex.org/I24354313","display_name":"Universidad de Buenos Aires","ror":"https://ror.org/0081fs513","country_code":"AR","type":"education","lineage":["https://openalex.org/I24354313"]}],"countries":["AR"],"is_corresponding":false,"raw_author_name":"Jorge Luc\u00e1ngeli Obes","raw_affiliation_strings":["Universidad de Buenos Aires, Buenos Aires, Argentina"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universidad de Buenos Aires, Buenos Aires, Argentina","institution_ids":["https://openalex.org/I24354313"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":31,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"71","last_page":"80"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9983000159263611,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/nondeterministic-algorithm","display_name":"Nondeterministic algorithm","score":0.7907999753952026},{"id":"https://openalex.org/keywords/probabilistic-logic","display_name":"Probabilistic logic","score":0.66839998960495},{"id":"https://openalex.org/keywords/bayesian-network","display_name":"Bayesian network","score":0.4196000099182129},{"id":"https://openalex.org/keywords/plan","display_name":"Plan (archaeology)","score":0.4043000042438507},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.3273000121116638},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.28839999437332153}],"concepts":[{"id":"https://openalex.org/C176181172","wikidata":"https://www.wikidata.org/wiki/Q3490301","display_name":"Nondeterministic algorithm","level":2,"score":0.7907999753952026},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7450000047683716},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.66839998960495},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.4196000099182129},{"id":"https://openalex.org/C2776505523","wikidata":"https://www.wikidata.org/wiki/Q4785468","display_name":"Plan (archaeology)","level":2,"score":0.4043000042438507},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4004000127315521},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.3273000121116638},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.2969000041484833},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.28839999437332153},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C107673813","wikidata":"https://www.wikidata.org/wiki/Q812534","display_name":"Bayesian probability","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.25609999895095825},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.25529998540878296}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/2046684.2046695","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2046684.2046695","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Security and artificial intelligence","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:1306.4040","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1306.4040","pdf_url":"https://arxiv.org/pdf/1306.4040","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:1306.4040","is_oa":true,"landing_page_url":"http://arxiv.org/abs/1306.4040","pdf_url":"https://arxiv.org/pdf/1306.4040","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":7,"referenced_works":["https://openalex.org/W2054127354","https://openalex.org/W2083658929","https://openalex.org/W2119709400","https://openalex.org/W2133265840","https://openalex.org/W2136225013","https://openalex.org/W2137204060","https://openalex.org/W3009677796"],"related_works":[],"abstract_inverted_index":{"As":[0],"penetration":[1],"testing":[2],"frameworks":[3],"have":[4,7],"evolved":[5],"and":[6,45,51,75,141,155,225],"become":[8,20],"more":[9],"complex,":[10],"the":[11,16,43,48,67,81,99,102,105,148,153,182,188,207,218],"problem":[12,38,209],"of":[13,87,104,113,115,150,152,163,190,213],"controlling":[14],"automatically":[15],"pentesting":[17],"tool":[18],"has":[19],"an":[21,30],"important":[22],"question.":[23],"This":[24],"can":[25,177],"be":[26,178],"naturally":[27],"addressed":[28],"as":[29,110,200],"attack":[31,58,88,175],"planning":[32,68,94,121,176],"problem.":[33],"Previous":[34],"approaches":[35,61],"to":[36,56,79,134],"this":[37,85,126],"were":[39],"based":[40],"on":[41],"modeling":[42],"actions":[44,72,154],"assets":[46],"in":[47,84,161,203],"PDDL":[49],"language,":[50],"using":[52],"off-the-shelf":[53],"AI":[54],"tools":[55],"generate":[57],"plans.":[59],"These":[60,143],"however":[62],"are":[63,73,195,198],"limited.":[64],"In":[65],"particular,":[66],"is":[69,108],"classical":[70],"(the":[71],"deterministic)":[74],"thus":[76,171],"not":[77],"able":[78],"handle":[80],"uncertainty":[82,100],"involved":[83],"form":[86],"planning.":[89],"We":[90,118,170,215],"herein":[91],"contribute":[92],"a":[93,111,204],"model":[95],"that":[96,128,173,184],"does":[97],"capture":[98],"about":[101],"results":[103,220],"actions,":[106],"which":[107,197],"modeled":[109],"probability":[112,149],"success":[114,151],"each":[116],"action.":[117],"present":[119,217],"efficient":[120],"algorithms,":[122],"specifically":[123],"designed":[124],"for":[125,181,230],"problem,":[127],"achieve":[129],"industrial-scale":[130],"runtime":[131],"performance":[132],"(able":[133],"solve":[135],"scenarios":[136,183],"with":[137,222,227],"several":[138],"hundred":[139],"hosts":[140],"exploits).":[142],"algorithms":[144],"take":[145],"into":[146,210],"account":[147],"their":[156],"expected":[157],"cost":[158],"(for":[159],"example":[160],"terms":[162],"execution":[164],"time,":[165],"or":[166],"network":[167],"traffic":[168],"generated).":[169],"show":[172],"probabilistic":[174],"solved":[179],"efficiently":[180],"arise":[185],"when":[186],"assessing":[187],"security":[189],"large":[191],"networks.":[192],"Two":[193],"\"primitives\"":[194],"presented,":[196],"used":[199],"building":[201],"blocks":[202],"framework":[205],"separating":[206],"overall":[208],"two":[211],"levels":[212],"abstraction.":[214],"also":[216],"experimental":[219],"obtained":[221],"our":[223],"implementation,":[224],"conclude":[226],"some":[228],"ideas":[229],"further":[231],"work.":[232]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":5},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4},{"year":2017,"cited_by_count":2},{"year":2016,"cited_by_count":1},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":2},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2016-06-24T00:00:00"}