{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:49:02Z","timestamp":1783439342461,"version":"3.54.6"},"publisher-location":"Cham","reference-count":29,"publisher":"Springer International Publishing","isbn-type":[{"value":"9783030648800","type":"print"},{"value":"9783030648817","type":"electronic"}],"license":[{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2020,1,1]],"date-time":"2020-01-01T00:00:00Z","timestamp":1577836800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020]]},"DOI":"10.1007\/978-3-030-64881-7_6","type":"book-chapter","created":{"date-parts":[[2020,12,2]],"date-time":"2020-12-02T00:04:16Z","timestamp":1606867456000},"page":"89-103","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Vulsploit: A Module for Semi-automatic Exploitation of Vulnerabilities"],"prefix":"10.1007","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-7991-2410","authenticated-orcid":false,"given":"Arcangelo","family":"Castiglione","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7100-9748","authenticated-orcid":false,"given":"Francesco","family":"Palmieri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mariangela","family":"Petraglia","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5722-1179","authenticated-orcid":false,"given":"Raffaele","family":"Pizzolante","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2020,12,2]]},"reference":[{"key":"6_CR1","doi-asserted-by":"publisher","first-page":"173524","DOI":"10.1109\/ACCESS.2019.2956770","volume":"7","author":"AS Al-Ahmad","year":"2019","unstructured":"Al-Ahmad, A.S., Kahtan, H., Hujainah, F., Jalab, H.A.: Systematic literature review on penetration testing for mobile cloud computing applications. IEEE Access 7, 173524\u2013173540 (2019)","journal-title":"IEEE Access"},{"issue":"3","key":"6_CR2","doi-asserted-by":"publisher","first-page":"817","DOI":"10.3390\/s18030817","volume":"18","author":"B Ali","year":"2018","unstructured":"Ali, B., Awad, A.: Cyber and physical security vulnerability assessment for IoT-based smart homes. Sensors 18(3), 817 (2018)","journal-title":"Sensors"},{"key":"6_CR3","doi-asserted-by":"crossref","unstructured":"Almubairik, N.A., Wills, G.: Automated penetration testing based on a threat model. In: 2016 11th International Conference for Internet Technology and Secured Transactions (ICITST), pp. 413\u2013414 (2016)","DOI":"10.1109\/ICITST.2016.7856742"},{"key":"6_CR4","doi-asserted-by":"crossref","unstructured":"Ankele, R., Marksteiner, S., Nahrgang, K., Vallant, H.: Requirements and recommendations for IoT\/IIoT models to automate security assurance through threat modelling, security analysis and penetration testing. In: Proceedings of the 14th International Conference on Availability, Reliability and Security. ARES 2019. Association for Computing Machinery (2019)","DOI":"10.1145\/3339252.3341482"},{"issue":"2","key":"6_CR5","doi-asserted-by":"publisher","first-page":"114","DOI":"10.1016\/j.ijcip.2014.03.001","volume":"7","author":"R Bodenheim","year":"2014","unstructured":"Bodenheim, R., Butts, J., Dunlap, S., Mullins, B.: Evaluation of the ability of the Shodan search engine to identify internet-facing industrial control devices. Int. J. Crit. Infrastruct. Prot. 7(2), 114\u2013123 (2014)","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"6_CR6","doi-asserted-by":"crossref","unstructured":"Bojjagani, S., Sastry, V.N.: VAPTAi: a threat model for vulnerability assessment and penetration testing of android and iOS mobile banking apps. In: 2017 IEEE 3rd International Conference on Collaboration and Internet Computing (CIC), pp. 77\u201386 (2017)","DOI":"10.1109\/CIC.2017.00022"},{"key":"6_CR7","doi-asserted-by":"crossref","unstructured":"Casola, V., De Benedictis, A., Rak, M., Villano, U.: Towards automated penetration testing for cloud applications. In: 2018 IEEE 27th International Conference on Enabling Technologies: Infrastructure for Collaborative Enterprises (WETICE), pp. 24\u201329 (2018)","DOI":"10.1109\/WETICE.2018.00012"},{"issue":"2","key":"6_CR8","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1504\/IJGUC.2020.105541","volume":"11","author":"V Casola","year":"2020","unstructured":"Casola, V., De Benedictis, A., Rak, M., Villano, U.: A methodology for automated penetration testing of cloud applications. Int. J. Grid Util. Comput. 11(2), 267\u2013277 (2020)","journal-title":"Int. J. Grid Util. Comput."},{"key":"6_CR9","doi-asserted-by":"crossref","unstructured":"Ceccato, M., Scandariato, R.: Static analysis and penetration testing from the perspective of maintenance teams. In: Proceedings of the 10th ACM\/IEEE International Symposium on Empirical Software Engineering and Measurement. ESEM 2016. Association for Computing Machinery (2016)","DOI":"10.1145\/2961111.2962611"},{"key":"6_CR10","doi-asserted-by":"crossref","unstructured":"Chaudhary, S., O\u2019Brien, A., Xu, S.: Automated post-breach penetration testing through reinforcement learning. In: 2020 IEEE Conference on Communications and Network Security (CNS), pp. 1\u20132 (2020)","DOI":"10.1109\/CNS48642.2020.9162301"},{"issue":"4","key":"6_CR11","doi-asserted-by":"publisher","first-page":"82","DOI":"10.1109\/MC.2018.2141033","volume":"51","author":"C Chen","year":"2018","unstructured":"Chen, C., Zhang, Z., Lee, S., Shieh, S.: Penetration testing in the IoT age. Computer 51(4), 82\u201385 (2018)","journal-title":"Computer"},{"key":"6_CR12","doi-asserted-by":"crossref","unstructured":"Chu, G., Lisitsa, A.: Penetration testing for internet of things and its automation. In: 2018 IEEE 20th International Conference on High Performance Computing and Communications; IEEE 16th International Conference on Smart City; IEEE 4th International Conference on Data Science and Systems (HPCC\/SmartCity\/DSS), pp. 1479\u20131484 (2018)","DOI":"10.1109\/HPCC\/SmartCity\/DSS.2018.00244"},{"key":"6_CR13","doi-asserted-by":"crossref","unstructured":"Denis, M., Zena, C., Hayajneh, T.: Penetration testing: concepts, attack methods, and defense strategies. In: 2016 IEEE Long Island Systems, Applications and Technology Conference (LISAT), pp. 1\u20136 (2016)","DOI":"10.1109\/LISAT.2016.7494156"},{"key":"6_CR14","doi-asserted-by":"crossref","unstructured":"Fischer, M., Langer, F., Mono, J., Nasenberg, C., Albartus, N.: Hardware penetration testing knocks your SoCs off. IEEE Des. Test PP, 1 (2020)","DOI":"10.1109\/MDAT.2020.3013730"},{"key":"6_CR15","doi-asserted-by":"crossref","unstructured":"Ghanem, M.C., Chen, T.M.: Reinforcement learning for intelligent penetration testing. In: 2018 Second World Conference on Smart Trends in Systems, Security and Sustainability (WorldS4), pp. 185\u2013192 (2018)","DOI":"10.1109\/WorldS4.2018.8611595"},{"issue":"1","key":"6_CR16","doi-asserted-by":"publisher","first-page":"6","DOI":"10.3390\/info11010006","volume":"11","author":"MC Ghanem","year":"2019","unstructured":"Ghanem, M.C., Chen, T.M.: Reinforcement learning for efficient network penetration testing. Information 11(1), 6 (2019)","journal-title":"Information"},{"issue":"6","key":"6_CR17","doi-asserted-by":"publisher","first-page":"635","DOI":"10.1002\/(SICI)1097-024X(199606)26:6<635::AID-SPE26>3.0.CO;2-P","volume":"26","author":"R Ierusalimschy","year":"1996","unstructured":"Ierusalimschy, R., De Figueiredo, L.H., Filho, W.C.: Lua - an extensible extension language. Softw. Pract. Exp. 26(6), 635\u2013652 (1996)","journal-title":"Softw. Pract. Exp."},{"key":"6_CR18","doi-asserted-by":"crossref","unstructured":"Ierusalimschy, R., de Figueiredo, L.H., Celes, W.: The evolution of Lua. In: Proceedings of the third ACM SIGPLAN Conference on History of Programming Languages, pp. 1\u20132 (2007)","DOI":"10.1145\/1238844.1238846"},{"key":"6_CR19","unstructured":"Lyon, G.F.: Nmap Network Scanning: The Official Nmap Project Guide to Network Discovery and Security Scanning. Insecure, Sunnyvale (2009)"},{"key":"6_CR20","doi-asserted-by":"crossref","unstructured":"Mahmoodi, Y., Reiter, S., Viehl, A., Bringmann, O., Rosenstiel, W.: Attack surface modeling and assessment for penetration testing of IoT system designs. In: 2018 21st Euromicro Conference on Digital System Design (DSD), pp. 177\u2013181 (2018)","DOI":"10.1109\/DSD.2018.00043"},{"issue":"6","key":"6_CR21","doi-asserted-by":"publisher","first-page":"105336","DOI":"10.1016\/j.clsr.2019.06.007","volume":"35","author":"D Markopoulou","year":"2019","unstructured":"Markopoulou, D., Papakonstantinou, V., de Hert, P.: The new EU cybersecurity framework: the NIS directive, ENISA\u2019s role and the general data protection regulation. Comput. Law Secur. Rev. 35(6), 105336 (2019)","journal-title":"Comput. Law Secur. Rev."},{"key":"6_CR22","doi-asserted-by":"publisher","first-page":"175","DOI":"10.1016\/j.compeleceng.2019.02.022","volume":"75","author":"DR McKinnel","year":"2019","unstructured":"McKinnel, D.R., Dargahi, T., Dehghantanha, A., Choo, K.K.R.: A systematic literature review and meta-analysis on artificial intelligence in penetration testing and vulnerability assessment. Comput. Electr. Eng. 75, 175\u2013188 (2019)","journal-title":"Comput. Electr. Eng."},{"key":"6_CR23","unstructured":"Pale, P.C.: Mastering the Nmap Scripting Engine. Packt Publishing Ltd., Birmingham (2015)"},{"key":"6_CR24","doi-asserted-by":"crossref","unstructured":"Rahman, A., Williams, L.: A bird\u2019s eye view of knowledge needs related to penetration testing. In: Proceedings of the 6th Annual Symposium on Hot Topics in the Science of Security. HotSoS 2019. Association for Computing Machinery (2019)","DOI":"10.1145\/3314058.3317294"},{"key":"6_CR25","unstructured":"Schwartz, J., Kurniawati, H.: Autonomous penetration testing using reinforcement learning. CoRR abs\/1905.05965 (2019)"},{"key":"6_CR26","doi-asserted-by":"crossref","unstructured":"Shebli, H.M.Z.A., Beheshti, B.D.: A study on penetration testing process and tools. In: 2018 IEEE Long Island Systems, Applications and Technology Conference (LISAT), pp. 1\u20137 (2018)","DOI":"10.1109\/LISAT.2018.8378035"},{"key":"6_CR27","doi-asserted-by":"crossref","unstructured":"Stefinko, Y., Piskozub, A., Banakh, R.: Manual and automated penetration testing. Benefits and drawbacks. Modern tendency. In: 2016 13th International Conference on Modern Problems of Radio Engineering, Telecommunications and Computer Science (TCSET), pp. 488\u2013491 (2016)","DOI":"10.1109\/TCSET.2016.7452095"},{"key":"6_CR28","doi-asserted-by":"publisher","unstructured":"Voigt, P., Von dem Bussche, A.: The EU General Data Protection Regulation (GDPR). A Practical Guide, 1st Edn. Springer, Cham (2017). https:\/\/doi.org\/10.1007\/978-3-319-57959-7","DOI":"10.1007\/978-3-319-57959-7"},{"key":"6_CR29","unstructured":"Zennaro, F.M., Erdodi, L.: Modeling penetration testing with reinforcement learning using capture-the-flag challenges and tabular Q-learning. arXiv preprint arXiv:2005.12632 (2020)"}],"container-title":["Lecture Notes in Computer Science","Testing Software and Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-030-64881-7_6","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,12,2]],"date-time":"2024-12-02T00:18:04Z","timestamp":1733098684000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-030-64881-7_6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020]]},"ISBN":["9783030648800","9783030648817"],"references-count":29,"URL":"https:\/\/doi.org\/10.1007\/978-3-030-64881-7_6","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020]]},"assertion":[{"value":"2 December 2020","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICTSS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP International Conference on Testing Software and Systems","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Naples","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Italy","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2020","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 December 2020","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"11 December 2020","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"32","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"pts2020","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"http:\/\/home.ing.unisannio.it\/ictss2020\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Single-blind","order":1,"name":"type","label":"Type","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"EasyChair","order":2,"name":"conference_management_system","label":"Conference Management System","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"43","order":3,"name":"number_of_submissions_sent_for_review","label":"Number of Submissions Sent for Review","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"17","order":4,"name":"number_of_full_papers_accepted","label":"Number of Full Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"4","order":5,"name":"number_of_short_papers_accepted","label":"Number of Short Papers Accepted","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"40% - The value is computed by the equation \"Number of Full Papers Accepted \/ Number of Submissions Sent for Review * 100\" and then rounded to a whole number.","order":6,"name":"acceptance_rate_of_full_papers","label":"Acceptance Rate of Full Papers","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2.85","order":7,"name":"average_number_of_reviews_per_paper","label":"Average Number of Reviews per Paper","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"2","order":8,"name":"average_number_of_papers_per_reviewer","label":"Average Number of Papers per Reviewer","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"Yes","order":9,"name":"external_reviewers_involved","label":"External Reviewers Involved","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}},{"value":"The conference was held virtually due to the COVID-19 pandemic.","order":10,"name":"additional_info_on_review_process","label":"Additional Info on Review Process","group":{"name":"ConfEventPeerReviewInformation","label":"Peer Review Information (provided by the conference organizers)"}}]}}