{"id":"https://openalex.org/W2902270076","doi":"https://doi.org/10.29007/2c1q","title":"Analysis of Attack Graph Representations for Ranking Vulnerability Fixes","display_name":"Analysis of Attack Graph Representations for Ranking Vulnerability Fixes","publication_year":2018,"publication_date":"2018-09-17","ids":{"openalex":"https://openalex.org/W2902270076","doi":"https://doi.org/10.29007/2c1q","mag":"2902270076"},"language":"en","primary_location":{"id":"doi:10.29007/2c1q","is_oa":true,"landing_page_url":"https://doi.org/10.29007/2c1q","pdf_url":"https://easychair.org/publications/open/ZBHj","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://easychair.org/publications/open/ZBHj","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5024214675","display_name":"Tom Gonda","orcid":"https://orcid.org/0000-0002-0222-2876"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","IL"],"is_corresponding":false,"raw_author_name":"Tom Gonda","raw_affiliation_strings":["Information and Software Systems Engineering, Ben Gurion University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information and Software Systems Engineering, Ben Gurion University","institution_ids":["https://openalex.org/I124227911","https://openalex.org/I97750245"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060261667","display_name":"Tal Pascal","orcid":null},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","IL"],"is_corresponding":false,"raw_author_name":"Tal Pascal","raw_affiliation_strings":["Information and Software Systems Engineering, Ben Gurion University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information and Software Systems Engineering, Ben Gurion University","institution_ids":["https://openalex.org/I124227911","https://openalex.org/I97750245"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5059447087","display_name":"Rami Puzis","orcid":"https://orcid.org/0000-0002-7229-3899"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","IL"],"is_corresponding":false,"raw_author_name":"Rami Puzis","raw_affiliation_strings":["Information and Software Systems Engineering, Ben Gurion University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information and Software Systems Engineering, Ben Gurion University","institution_ids":["https://openalex.org/I124227911","https://openalex.org/I97750245"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006317361","display_name":"Guy Shani","orcid":"https://orcid.org/0000-0003-4131-0382"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","IL"],"is_corresponding":false,"raw_author_name":"Guy Shani","raw_affiliation_strings":["Information and Software Systems Engineering, Ben Gurion University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information and Software Systems Engineering, Ben Gurion University","institution_ids":["https://openalex.org/I124227911","https://openalex.org/I97750245"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5086920790","display_name":"Bracha Shapira","orcid":"https://orcid.org/0000-0003-4943-9324"},"institutions":[{"id":"https://openalex.org/I124227911","display_name":"Ben-Gurion University of the Negev","ror":"https://ror.org/05tkyf982","country_code":"IL","type":"education","lineage":["https://openalex.org/I124227911"]},{"id":"https://openalex.org/I97750245","display_name":"Software (Spain)","ror":"https://ror.org/02ethns06","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210087817","https://openalex.org/I97750245"]}],"countries":["ES","IL"],"is_corresponding":false,"raw_author_name":"Bracha Shapira","raw_affiliation_strings":["Information and Software Systems Engineering, Ben Gurion University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information and Software Systems Engineering, Ben Gurion University","institution_ids":["https://openalex.org/I124227911","https://openalex.org/I97750245"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":16,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"55","issue":null,"first_page":"215","last_page":"200"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.9745000004768372,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9702000021934509,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/centrality","display_name":"Centrality","score":0.7630148530006409},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7223374843597412},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5674422979354858},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5085581541061401},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.4895871579647064},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.4588208496570587},{"id":"https://openalex.org/keywords/graph-theory","display_name":"Graph theory","score":0.44617679715156555},{"id":"https://openalex.org/keywords/ranking","display_name":"Ranking (information retrieval)","score":0.41541779041290283},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.4105437099933624},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.19010010361671448},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.1286609172821045},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.07716041803359985}],"concepts":[{"id":"https://openalex.org/C53811970","wikidata":"https://www.wikidata.org/wiki/Q5062194","display_name":"Centrality","level":2,"score":0.7630148530006409},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7223374843597412},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5674422979354858},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5085581541061401},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.4895871579647064},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.4588208496570587},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.44617679715156555},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.41541779041290283},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.4105437099933624},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.19010010361671448},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.1286609172821045},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.07716041803359985},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.29007/2c1q","is_oa":true,"landing_page_url":"https://doi.org/10.29007/2c1q","pdf_url":"https://easychair.org/publications/open/ZBHj","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.29007/2c1q","is_oa":true,"landing_page_url":"https://doi.org/10.29007/2c1q","pdf_url":"https://easychair.org/publications/open/ZBHj","source":{"id":"https://openalex.org/S4220651395","display_name":"EPiC series in computing","issn_l":"2398-7340","issn":["2398-7340"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"EPiC Series in Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322252","display_name":"Israel Science Foundation","ror":"https://ror.org/04sazxf24"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2902270076.pdf","grobid_xml":"https://content.openalex.org/works/W2902270076.grobid-xml"},"referenced_works_count":25,"referenced_works":["https://openalex.org/W107001363","https://openalex.org/W1508191694","https://openalex.org/W1585458578","https://openalex.org/W1590752147","https://openalex.org/W1731763842","https://openalex.org/W1751204289","https://openalex.org/W1854214752","https://openalex.org/W1971937094","https://openalex.org/W1997322704","https://openalex.org/W2025460523","https://openalex.org/W2042645728","https://openalex.org/W2046071314","https://openalex.org/W2061412683","https://openalex.org/W2099970772","https://openalex.org/W2110908300","https://openalex.org/W2117694832","https://openalex.org/W2143396794","https://openalex.org/W2150802402","https://openalex.org/W2151645094","https://openalex.org/W2199768745","https://openalex.org/W2257448745","https://openalex.org/W2399906603","https://openalex.org/W2510460164","https://openalex.org/W2737470465","https://openalex.org/W3104718257"],"related_works":["https://openalex.org/W4229078645","https://openalex.org/W1977345676","https://openalex.org/W4282032776","https://openalex.org/W2047552823","https://openalex.org/W4321606905","https://openalex.org/W3130445735","https://openalex.org/W3013212210","https://openalex.org/W2002039869","https://openalex.org/W2340502785","https://openalex.org/W2954517350"],"abstract_inverted_index":{"Software":[0],"vulnerabilities":[1,21],"in":[2,71],"organizational":[3],"computer":[4],"networks":[5],"can":[6],"be":[7],"leveraged":[8],"by":[9,33,87],"an":[10,64,75],"attacker":[11],"to":[12,15,28,82,96],"gain":[13],"access":[14],"sensitive":[16],"information.":[17],"As":[18],"fixing":[19],"all":[20],"requires":[22],"much":[23],"effort,":[24],"it":[25],"is":[26],"critical":[27,57],"rank":[29],"the":[30,44,55,67,78,84,98,108,126,131,139,145],"possible":[31,101],"fixes":[32],"their":[34],"importance.":[35],"Centrality":[36],"measures":[37,124],"over":[38,43,125,138],"logical":[39,79,127],"attack":[40,80,102,128,149],"graphs,":[41],"or":[42],"network":[45],"connectivity":[46],"graph,":[47,69,81,133],"often":[48],"provide":[49],"a":[50,114,119],"scalable":[51],"method":[52],"for":[53,77],"finding":[54],"most":[56],"vulnerabilities.":[58],"In":[59],"this":[60],"paper":[61],"we":[62],"suggest":[63],"analysis":[65],"of":[66,100,110,121,147],"planning":[68,91,132,140],"originating":[70],"classical":[72],"planning,":[73],"as":[74],"alternative":[76],"improve":[83],"ranking":[85,123],"produced":[86],"centrality":[88],"measures.":[89],"The":[90],"graph":[92,129,141],"also":[93],"allows":[94],"us":[95],"enumerate":[97],"set":[99,120,146],"plans,":[103],"and":[104,130],"hence,":[105],"directly":[106],"count":[107],"number":[109],"attacks":[111],"that":[112,135],"use":[113],"given":[115],"vulnerability.":[116],"We":[117],"evaluate":[118],"centrality-based":[122],"showing":[134],"metrics":[136],"computed":[137],"reduce":[142],"more":[143],"rapidly":[144],"shortest":[148],"plans.":[150]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":2},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}