{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T14:06:55Z","timestamp":1765202815973,"version":"3.46.0"},"reference-count":101,"publisher":"Springer Science and Business Media LLC","issue":"12","license":[{"start":{"date-parts":[[2025,11,5]],"date-time":"2025-11-05T00:00:00Z","timestamp":1762300800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,11,5]],"date-time":"2025-11-05T00:00:00Z","timestamp":1762300800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"the Committee of Science of the Ministry of Science and Higher Education of the Republic of Kazakhstan","award":["BR24992852"],"award-info":[{"award-number":["BR24992852"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Computing"],"published-print":{"date-parts":[[2025,12]]},"DOI":"10.1007\/s00607-025-01583-z","type":"journal-article","created":{"date-parts":[[2025,11,5]],"date-time":"2025-11-05T06:43:55Z","timestamp":1762325035000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Next-generation penetration testing: a cross-domain review of challenges, trends, and taxonomy for urban digital ecosystems"],"prefix":"10.1007","volume":"107","author":[{"given":"Elhadj","family":"Benkhelifa","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Tamara","family":"Zhukabayeva","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Sabrine","family":"Ennaji","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,11,5]]},"reference":[{"key":"1583_CR1","doi-asserted-by":"crossref","unstructured":"Lnenicka M, Nikiforova A, Luterek M, Milic P, Rudmark D, Neumaier S, Kevi\u0107 K, Zuiderwijk A, Bol\u00edvar MPR (2024) Understanding the development of public data ecosystems: from a conceptual model to a six-generation model of the evolution of public data ecosystems. Telematics Inform, 102190","DOI":"10.1016\/j.tele.2024.102190"},{"key":"1583_CR2","doi-asserted-by":"crossref","unstructured":"Rossini E, Bicocchi N, Hadjidimitriou NS, Pietri M, Picone M, Mamei M (2024) Towards a distributed data mesh model for the iot-edge-cloud continuum in smart cities. In: 2024 IEEE\/ACM Symposium on Edge Computing (SEC). IEEE, pp 383\u2013388","DOI":"10.1109\/SEC62691.2024.00041"},{"issue":"3","key":"1583_CR3","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/1541880.1541882","volume":"41","author":"V Chandola","year":"2009","unstructured":"Chandola V, Banerjee A, Kumar V (2009) Anomaly detection: a survey. ACM Comput Surv 41(3):1\u201358","journal-title":"ACM Comput Surv"},{"key":"1583_CR4","doi-asserted-by":"publisher","first-page":"19","DOI":"10.1016\/j.jnca.2015.11.016","volume":"60","author":"M Ahmed","year":"2016","unstructured":"Ahmed M, Mahmood AN, Hu J (2016) A survey of network anomaly detection techniques. J Netw Comput Appl 60:19\u201331","journal-title":"J Netw Comput Appl"},{"issue":"3","key":"1583_CR5","doi-asserted-by":"publisher","first-page":"809","DOI":"10.1109\/TBDATA.2020.2991008","volume":"8","author":"M Zhang","year":"2020","unstructured":"Zhang M, Li T, Yu Y, Li Y, Hui P, Zheng Y (2020) Urban anomaly analytics: description, detection, and prediction. IEEE Trans Big Data 8(3):809\u2013826","journal-title":"IEEE Trans Big Data"},{"issue":"10","key":"1583_CR6","doi-asserted-by":"publisher","first-page":"351","DOI":"10.3390\/ijgi13100351","volume":"13","author":"Y Mao","year":"2024","unstructured":"Mao Y, Shi Y, Lu B (2024) Detecting urban traffic anomalies using traffic-monitoring data. ISPRS Int J Geo Inf 13(10):351","journal-title":"ISPRS Int J Geo Inf"},{"key":"1583_CR7","doi-asserted-by":"publisher","first-page":"12 083","DOI":"10.1109\/ACCESS.2020.3047996","volume":"9","author":"M Rahouti","year":"2020","unstructured":"Rahouti M, Xiong K, Xin Y (2020) Secure software-defined networking communication systems for smart cities: current status, challenges, and trends. IEEE Access 9:12 083-12 113","journal-title":"IEEE Access"},{"key":"1583_CR8","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2020.102655","volume":"66","author":"D Chen","year":"2021","unstructured":"Chen D, Wawrzynski P, Lv Z (2021) Cyber security in smart cities: a review of deep learning-based applications and case studies. Sustain Cities Soc 66:102655","journal-title":"Sustain Cities Soc"},{"key":"1583_CR9","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2020.102023","volume":"55","author":"J Laufs","year":"2020","unstructured":"Laufs J, Borrion H, Bradford B (2020) Security and the smart city: a systematic review. Sustain Cities Soc 55:102023","journal-title":"Sustain Cities Soc"},{"key":"1583_CR10","doi-asserted-by":"crossref","unstructured":"Ibitoye O, Shafiq O, Matrawy A (2019) Analyzing adversarial attacks against deep learning for intrusion detection in iot networks. In: IEEE global communications conference (GLOBECOM). IEEE 2019:1\u20136","DOI":"10.1109\/GLOBECOM38437.2019.9014337"},{"issue":"8","key":"1583_CR11","doi-asserted-by":"publisher","first-page":"226","DOI":"10.1007\/s10462-025-11147-4","volume":"58","author":"S Pelekis","year":"2025","unstructured":"Pelekis S, Koutroubas T, Blika A, Berdelis A, Karakolis E, Ntanos C, Spiliotis E, Askounis D (2025) Adversarial machine learning: a review of methods, tools, and critical industry sectors. Artif Intell Rev 58(8):226","journal-title":"Artif Intell Rev"},{"key":"1583_CR12","doi-asserted-by":"publisher","first-page":"120 331","DOI":"10.1109\/ACCESS.2020.3006358","volume":"8","author":"B Liao","year":"2020","unstructured":"Liao B, Ali Y, Nazir S, He L, Khan HU (2020) Security analysis of iot devices by using mobile computing: a systematic literature review. IEEE Access 8:120 331-120 350","journal-title":"IEEE Access"},{"issue":"3","key":"1583_CR13","doi-asserted-by":"publisher","first-page":"894","DOI":"10.3390\/smartcities3030046","volume":"3","author":"G Ahmadi-Assalemi","year":"2020","unstructured":"Ahmadi-Assalemi G, Al-Khateeb H, Epiphaniou G, Maple C (2020) Cyber resilience and incident response in smart cities: a systematic literature review. Smart Cities 3(3):894\u2013927","journal-title":"Smart Cities"},{"issue":"2","key":"1583_CR14","first-page":"125","volume":"6","author":"T Deng","year":"2021","unstructured":"Deng T, Zhang K, Shen Z-JM (2021) A systematic review of a digital twin city: a new pattern of urban governance toward smart cities. J Manag Sci Eng 6(2):125\u2013134","journal-title":"J Manag Sci Eng"},{"key":"1583_CR15","doi-asserted-by":"publisher","DOI":"10.1016\/j.scs.2021.103542","volume":"77","author":"R Al Sharif","year":"2022","unstructured":"Al Sharif R, Pokharel S (2022) Smart city dimensions and associated risks: review of literature. Sustain Cities Soc 77:103542","journal-title":"Sustain Cities Soc"},{"key":"1583_CR16","doi-asserted-by":"publisher","first-page":"7999","DOI":"10.1016\/j.egyr.2021.08.124","volume":"7","author":"C Ma","year":"2021","unstructured":"Ma C (2021) Smart city and cyber-security; technologies used, leading challenges and future recommendations. Energy Rep 7:7999\u20138012","journal-title":"Energy Rep"},{"key":"1583_CR17","doi-asserted-by":"crossref","unstructured":"Brooks C (2024) Inside cyber: how AI, 5G, IoT, and quantum computing will transform privacy and our security. Wiley","DOI":"10.1002\/9781394310562"},{"issue":"3","key":"1583_CR18","doi-asserted-by":"publisher","DOI":"10.1016\/j.im.2022.103623","volume":"59","author":"A Andersson","year":"2022","unstructured":"Andersson A, Hedstr\u00f6m K, Karlsson F (2022) Standardizing information security: a structurational analysis. Inf Manag 59(3):103623","journal-title":"Inf Manag"},{"key":"1583_CR19","doi-asserted-by":"crossref","unstructured":"Al Shebli HMZ, Beheshti BD (2018) A study on penetration testing process and tools. In: IEEE Long Island systems, applications and technology conference (LISAT). IEEE 2018:1\u20137","DOI":"10.1109\/LISAT.2018.8378035"},{"issue":"3","key":"1583_CR20","doi-asserted-by":"publisher","first-page":"33","DOI":"10.3390\/computers11030033","volume":"11","author":"J Hance","year":"2022","unstructured":"Hance J, Milbrath J, Ross N, Straub J (2022) Distributed attack deployment capability for modern automated penetration testing. Computers 11(3):33","journal-title":"Computers"},{"key":"1583_CR21","doi-asserted-by":"crossref","unstructured":"Jiao J, Zhao H, Cao H (2021) Using deep learning to construct auto web penetration test. In: Proceedings of the 2021 13th international conference on machine learning and computing, pp 59\u201366","DOI":"10.1145\/3457682.3457691"},{"key":"1583_CR22","doi-asserted-by":"crossref","unstructured":"Ennaji S, El Akkad N, Haddouch K (2021) A powerful ensemble learning approach for improving network intrusion detection system (nids). In: Fifth international conference on intelligent computing in data sciences (ICDS). IEEE 2021:1\u20136","DOI":"10.1109\/ICDS53782.2021.9626727"},{"key":"1583_CR23","doi-asserted-by":"crossref","unstructured":"Gao P, Liu X, Choi E, Soman B, Mishra C, Farris K, Song D (2021) A system for automated open-source threat intelligence gathering and management. In: Proceedings of the 2021 international conference on management of data, pp 2716\u20132720","DOI":"10.1145\/3448016.3452745"},{"key":"1583_CR24","doi-asserted-by":"publisher","first-page":"631","DOI":"10.1016\/j.procs.2020.01.057","volume":"165","author":"VN Dornadula","year":"2019","unstructured":"Dornadula VN, Geetha S (2019) Credit card fraud detection using machine learning algorithms. Procedia Comput Sci 165:631\u2013641","journal-title":"Procedia Comput Sci"},{"issue":"1","key":"1583_CR25","doi-asserted-by":"publisher","first-page":"538","DOI":"10.1109\/COMST.2022.3233793","volume":"25","author":"K He","year":"2023","unstructured":"He K, Kim DD, Asghar MR (2023) Adversarial machine learning for network intrusion detection systems: a comprehensive survey. IEEE Commun Surv Tutorials 25(1):538\u2013566","journal-title":"IEEE Commun Surv Tutorials"},{"key":"1583_CR26","doi-asserted-by":"crossref","unstructured":"Ennaji S, Gaspari FD, Hitaj D, Kbidi A, Mancini LV (2025) Adversarial challenges in network intrusion detection systems: research insights and future prospects. IEEE Access, pp 1\u20131","DOI":"10.1109\/ACCESS.2025.3600984"},{"key":"1583_CR27","doi-asserted-by":"publisher","first-page":"1102","DOI":"10.1109\/TIFS.2019.2934069","volume":"15","author":"B Flowers","year":"2019","unstructured":"Flowers B, Buehrer RM, Headley WC (2019) Evaluating adversarial evasion attacks in the context of wireless communications. IEEE Trans Inf Forensics Secur 15:1102\u20131113","journal-title":"IEEE Trans Inf Forensics Secur"},{"key":"1583_CR28","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103988","volume":"145","author":"FV Jedrzejewski","year":"2024","unstructured":"Jedrzejewski FV, Thode L, Fischbach J, Gorschek T, Mendez D, Lavesson N (2024) Adversarial machine learning in industry: a systematic literature review. Comput Secur 145:103988","journal-title":"Comput Secur"},{"key":"1583_CR29","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2022.118101","volume":"208","author":"FA Yerlikaya","year":"2022","unstructured":"Yerlikaya FA, Bahtiyar \u015e (2022) Data poisoning attacks against machine learning algorithms. Expert Syst Appl 208:118101","journal-title":"Expert Syst Appl"},{"key":"1583_CR30","doi-asserted-by":"crossref","unstructured":"Zhang Q, Ding Y, Tian Y, Guo J, Yuan M, Jiang Y (2021) Advdoor: adversarial backdoor attack of deep learning system. In: Proceedings of the 30th ACM SIGSOFT international symposium on software testing and analysis, pp 127\u2013138","DOI":"10.1145\/3460319.3464809"},{"key":"1583_CR31","doi-asserted-by":"crossref","unstructured":"Patel A, Pandey P, Ragothaman H, Molleti R, Tanikonda A (2025) Securing cloud ai workloads: protecting generative ai models from adversarial attacks. In: 2025 IEEE 4th international conference on AI in cybersecurity (ICAIC). IEEE, pp 1\u20137","DOI":"10.1109\/ICAIC63015.2025.10848877"},{"issue":"7","key":"1583_CR32","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.5906","volume":"34","author":"Y Zhao","year":"2022","unstructured":"Zhao Y, Chen J, Zhang J, Wu D, Blumenstein M, Yu S (2022) Detecting and mitigating poisoning attacks in federated learning using generative adversarial networks. Concurr Comput Pract Exp 34(7):e5906","journal-title":"Concurr Comput Pract Exp"},{"key":"1583_CR33","doi-asserted-by":"crossref","unstructured":"Jiang L, Ma X, Chen S, Bailey J, Jiang Y-G (2019) Black-box adversarial attacks on video recognition models. In: Proceedings of the 27th ACM international conference on multimedia, pp 864\u2013872","DOI":"10.1145\/3343031.3351088"},{"key":"1583_CR34","unstructured":"HiddenLayer (2025) What\u2019s in the box? overview of ai adversarial tools. Accessed 08 March 2025. https:\/\/hiddenlayer.com\/innovation-hub\/whats-in-the-box\/"},{"key":"1583_CR35","unstructured":"Nicolae M-I, Sinn M, Tran MN, Buesser B, Rawat A, Wistuba M, Zantedeschi V, Baracaldo N, Chen B, Ludwig H, et al. (2018) Adversarial robustness toolbox v1. 0.0, arXiv preprint arXiv:1807.01069"},{"key":"1583_CR36","doi-asserted-by":"crossref","unstructured":"Ennaji S, De\u00a0Gaspari F, Hitaj D, Kbidi A, Mancini LV (2024) Adversarial challenges in network intrusion detection systems: research insights and future prospects. arXiv preprint arXiv:2409.18736","DOI":"10.1109\/ACCESS.2025.3600984"},{"key":"1583_CR37","doi-asserted-by":"crossref","unstructured":"Balaaditya M, Dunston SD, et\u00a0al. (2023) Analysis of the effect of adversarial training in defending efficientnet-b0 model from deepfool attack. In: 2023 3rd International conference on intelligent communication and computational techniques (ICCT). IEEE, pp 1\u20137","DOI":"10.1109\/ICCT56969.2023.10075774"},{"key":"1583_CR38","doi-asserted-by":"crossref","unstructured":"Carlini N, Wagner D (2017) Towards evaluating the robustness of neural networks. In: IEEE symposium on security and privacy (sp). IEEE 2017:39\u201357","DOI":"10.1109\/SP.2017.49"},{"key":"1583_CR39","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2014) Explaining and harnessing adversarial examples. arXiv preprint arXiv:1412.6572"},{"issue":"3","key":"1583_CR40","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3469659","volume":"3","author":"G Apruzzese","year":"2022","unstructured":"Apruzzese G, Andreolini M, Ferretti L, Marchetti M, Colajanni M (2022) Modeling realistic adversarial attacks against network intrusion detection systems. Digital Threats Res Pract 3(3):1\u201319","journal-title":"Digital Threats Res Pract"},{"key":"1583_CR41","doi-asserted-by":"publisher","first-page":"93 104","DOI":"10.1109\/ACCESS.2022.3204051","volume":"10","author":"Z Zhang","year":"2022","unstructured":"Zhang Z, Al Hamadi H, Damiani E, Yeun CY, Taher F (2022) Explainable artificial intelligence applications in cyber security: state-of-the-art in research. IEEE Access 10:93 104-93 139","journal-title":"IEEE Access"},{"key":"1583_CR42","doi-asserted-by":"crossref","unstructured":"Bouayad A, Blilat A, Mejhed NEH, El\u00a0Ghazi M (2012) Cloud computing: security challenges. In: 2012 Colloquium in information science and technology. IEEE, pp 26\u201331","DOI":"10.1109\/CIST.2012.6388058"},{"issue":"4","key":"1583_CR43","doi-asserted-by":"publisher","first-page":"422","DOI":"10.1016\/j.dcan.2021.07.006","volume":"8","author":"Y Zheng","year":"2022","unstructured":"Zheng Y, Li Z, Xu X, Zhao Q (2022) Dynamic defenses in cyber security: techniques, methods and challenges. Digital Commun Netw 8(4):422\u2013435","journal-title":"Digital Commun Netw"},{"key":"1583_CR44","doi-asserted-by":"crossref","unstructured":"Odun-Ayo I, Misra S, Abayomi-Alli O, Ajayi O (2017) Cloud multi-tenancy: issues and developments. In: Companion proceedings of the10th international conference on utility and cloud computing, pp 209\u2013214","DOI":"10.1145\/3147234.3148095"},{"key":"1583_CR45","doi-asserted-by":"publisher","first-page":"357","DOI":"10.1016\/j.ins.2015.01.025","volume":"305","author":"M Ali","year":"2015","unstructured":"Ali M, Khan SU, Vasilakos AV (2015) Security in cloud computing: opportunities and challenges. Inf Sci 305:357\u2013383","journal-title":"Inf Sci"},{"issue":"24","key":"1583_CR46","doi-asserted-by":"publisher","first-page":"7148","DOI":"10.3390\/s20247148","volume":"20","author":"E Ukwandu","year":"2020","unstructured":"Ukwandu E, Farah MAB, Hindy H, Brosset D, Kavallieros D, Atkinson R, Tachtatzis C, Bures M, Andonovic I, Bellekens X (2020) A review of cyber-ranges and test-beds: current and future trends. Sensors 20(24):7148","journal-title":"Sensors"},{"issue":"17","key":"1583_CR47","doi-asserted-by":"publisher","first-page":"13\u00a0712","DOI":"10.1109\/JIOT.2021.3067667","volume":"8","author":"AN Jahromi","year":"2021","unstructured":"Jahromi AN, Karimipour H, Dehghantanha A, Choo K-KR (2021) Toward detection and attribution of cyber-attacks in iot-enabled cyber-physical systems. IEEE Internet Things J 8(17):13\u00a0712-13\u00a0722","journal-title":"IEEE Internet Things J"},{"key":"1583_CR48","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.iotcps.2021.07.001","volume":"1","author":"MK Kagita","year":"2021","unstructured":"Kagita MK, Bojja GR, Kaosar M (2021) A framework for intelligent iot firmware compliance testing. Internet Things Cyber-Phys Syst 1:1\u20137","journal-title":"Internet Things Cyber-Phys Syst"},{"issue":"4","key":"1583_CR49","doi-asserted-by":"publisher","first-page":"3648","DOI":"10.1109\/JSEN.2021.3133405","volume":"22","author":"EH Hafshejani","year":"2021","unstructured":"Hafshejani EH, TaheriNejad N, Rabbani R, Azizi Z, Mohin S, Fotowat-Ahmady A, Mirabbasi S (2021) Self-aware data processing for power saving in resource-constrained iot cyber-physical systems. IEEE Sens J 22(4):3648\u20133659","journal-title":"IEEE Sens J"},{"key":"1583_CR50","doi-asserted-by":"publisher","DOI":"10.1016\/j.cie.2021.107750","volume":"162","author":"P Thakur","year":"2021","unstructured":"Thakur P, Sehgal VK (2021) Emerging architecture for heterogeneous smart cyber-physical systems for industry 5.0. Comput Ind Eng 162:107750","journal-title":"Comput Ind Eng"},{"issue":"9","key":"1583_CR51","doi-asserted-by":"publisher","first-page":"2130014","DOI":"10.1080\/17517575.2022.2130014","volume":"17","author":"C Greco","year":"2023","unstructured":"Greco C, Fortino G, Crispo B, Choo K-KR (2023) Ai-enabled iot penetration testing: state-of-the-art and research challenges. Enterp Inf Syst 17(9):2130014","journal-title":"Enterp Inf Syst"},{"issue":"4","key":"1583_CR52","doi-asserted-by":"publisher","first-page":"2483","DOI":"10.1109\/JIOT.2017.2767291","volume":"5","author":"M Frustaci","year":"2017","unstructured":"Frustaci M, Pace P, Aloi G, Fortino G (2017) Evaluating critical security issues of the iot world: present and future challenges. IEEE Internet Things J 5(4):2483\u20132495","journal-title":"IEEE Internet Things J"},{"key":"1583_CR53","doi-asserted-by":"crossref","unstructured":"Ruan Z (2023) Blockchain technology for security issues and challenges in iot. In: 2023 International conference on computer simulation and modeling, information security (CSMIS). IEEE, pp 572\u2013580","DOI":"10.1109\/CSMIS60634.2023.00108"},{"issue":"2","key":"1583_CR54","doi-asserted-by":"publisher","first-page":"47","DOI":"10.1002\/jcaf.22433","volume":"31","author":"BS White","year":"2020","unstructured":"White BS, King CG, Holladay J (2020) Blockchain security risk assessment and the auditor. J Corp Account Finance 31(2):47\u201353","journal-title":"J Corp Account Finance"},{"key":"1583_CR55","unstructured":"Perez D, Livshits B (2021) Smart contract vulnerabilities: vulnerable does not imply exploited. In: 30th USENIX security symposium (USENIX Security 21), pp 1325\u20131341"},{"key":"1583_CR56","doi-asserted-by":"publisher","first-page":"24 416","DOI":"10.1109\/ACCESS.2020.2970495","volume":"8","author":"S Sayeed","year":"2020","unstructured":"Sayeed S, Marco-Gisbert H, Caira T (2020) Smart contract: attacks and protections. IEEE Access 8:24 416-24 427","journal-title":"IEEE Access"},{"key":"1583_CR57","doi-asserted-by":"publisher","first-page":"77 894","DOI":"10.1109\/ACCESS.2019.2921624","volume":"7","author":"J Liu","year":"2019","unstructured":"Liu J, Liu Z (2019) A survey on security verification of blockchain smart contracts. IEEE Access 7:77 894-77 904","journal-title":"IEEE Access"},{"key":"1583_CR58","doi-asserted-by":"publisher","DOI":"10.1016\/j.cosrev.2022.100492","volume":"45","author":"D Marijan","year":"2022","unstructured":"Marijan D, Lal C (2022) Blockchain verification and validation: techniques, challenges, and research directions. Comput Sci Rev 45:100492","journal-title":"Comput Sci Rev"},{"issue":"21","key":"1583_CR59","doi-asserted-by":"publisher","first-page":"8744","DOI":"10.3390\/s23218744","volume":"23","author":"S Li","year":"2023","unstructured":"Li S, Chen Y, Chen L, Liao J, Kuang C, Li K, Liang W, Xiong N (2023) Post-quantum security: opportunities and challenges. Sensors 23(21):8744","journal-title":"Sensors"},{"issue":"2","key":"1583_CR60","doi-asserted-by":"publisher","DOI":"10.1103\/RevModPhys.92.025002","volume":"92","author":"F Xu","year":"2020","unstructured":"Xu F, Ma X, Zhang Q, Lo H-K, Pan J-W (2020) Secure quantum key distribution with realistic devices. Rev Mod Phys 92(2):025002","journal-title":"Rev Mod Phys"},{"key":"1583_CR61","doi-asserted-by":"crossref","unstructured":"Faruk MJH, Tahora S, Tasnim M, Shahriar H, Sakib N (2022) A review of quantum cybersecurity: threats, risks and opportunities. In: 2022 1st International conference on AI in cybersecurity (ICAIC). IEEE, pp 1\u20138","DOI":"10.1109\/ICAIC53980.2022.9896970"},{"key":"1583_CR62","doi-asserted-by":"crossref","unstructured":"Joshi A, Bhalgat P, Chavan P, Chaudhari T, Patil S (2024) Guarding against quantum threats: a survey of post-quantum cryptography standardization, techniques, and current implementations. In: International conference on applications and techniques in information security. Springer, pp 33\u201346","DOI":"10.1007\/978-981-97-9743-1_3"},{"key":"1583_CR63","unstructured":"Okika N, Nwatuzie GA, Olarinoye HS, Nwaka AA, Igba E, Dunee R (2025) Assessing the vulnerability of traditional and post-quantum cryptographic systems through penetration testing and strengthening cyber defenses with zero trust security in the era of quantum computing. Int J Innov Sci Res Technol 10(2)"},{"issue":"1","key":"1583_CR64","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10207-024-00959-0","volume":"24","author":"S-F Wen","year":"2025","unstructured":"Wen S-F, Shukla A, Katt B (2025) Artificial intelligence for system security assurance: a systematic literature review. Int J Inf Secur 24(1):1\u201342","journal-title":"Int J Inf Secur"},{"key":"1583_CR65","doi-asserted-by":"crossref","unstructured":"Al-Khannak R, Nehal SS (2023) Penetration testing for the cloud-based web application. In: International conference on information and communication technology for competitive strategies. Springer, pp 35\u201356","DOI":"10.37394\/23205.2023.22.13"},{"key":"1583_CR66","doi-asserted-by":"crossref","unstructured":"Liao S, Zhou C, Zhao Y, Zhang Z, Zhang C, Gao Y, Zhong G (2020) A comprehensive detection approach of nmap: Principles, rules and experiments. In: International conference on cyber-enabled distributed computing and knowledge discovery (CyberC). IEEE 2020:64\u201371","DOI":"10.1109\/CyberC49757.2020.00020"},{"key":"1583_CR67","doi-asserted-by":"crossref","unstructured":"Valea O, Opri\u015fa C (2020) Towards pentesting automation using the metasploit framework. In: 2020 IEEE 16th international conference on intelligent computer communication and processing (ICCP). IEEE, pp 171\u2013178","DOI":"10.1109\/ICCP51029.2020.9266234"},{"issue":"5","key":"1583_CR68","doi-asserted-by":"publisher","first-page":"1229","DOI":"10.3390\/electronics12051229","volume":"12","author":"EA Altulaihan","year":"2023","unstructured":"Altulaihan EA, Alismail A, Frikha M (2023) A survey on web application penetration testing. Electronics 12(5):1229","journal-title":"Electronics"},{"key":"1583_CR69","doi-asserted-by":"crossref","unstructured":"Odun-Ayo I, Blessing O, Martins I, Owoka E, Owoseni T, Omonedo E (2024) Comparative review of vulnerability analysis tools. In: 2024 International conference on science, engineering and business for driving sustainable development goals (SEB4SDG). IEEE, pp 1\u20136","DOI":"10.1109\/SEB4SDG60871.2024.10630138"},{"issue":"19","key":"1583_CR70","doi-asserted-by":"publisher","first-page":"2991","DOI":"10.3390\/electronics11192991","volume":"11","author":"M Albahar","year":"2022","unstructured":"Albahar M, Alansari D, Jurcut A (2022) An empirical comparison of pen-testing tools for detecting web app vulnerabilities. Electronics 11(19):2991","journal-title":"Electronics"},{"key":"1583_CR71","doi-asserted-by":"crossref","unstructured":"Backes J, Bayless S, Cook B, Dodge C, Gacek A, Hu AJ, Kahsai T, Kocik B, Kotelnikov E, Kukovec J, et\u00a0al (2019) Reachability analysis for aws-based networks. In: Computer aided verification: 31st international conference, CAV 2019, New York City, NY, USA, July 15\u201318, 2019, Proceedings, Part II 31. Springer, 2019, pp 231\u2013241","DOI":"10.1007\/978-3-030-25543-5_14"},{"key":"1583_CR72","doi-asserted-by":"crossref","unstructured":"Kissoon Y, Bekaroo G (2022) Detecting vulnerabilities in smart contract within blockchain: a review and comparative analysis of key approaches. In: 2022 3rd International conference on next generation computing applications (NextComp). IEEE, pp 1\u20136","DOI":"10.1109\/NextComp55567.2022.9932169"},{"key":"1583_CR73","doi-asserted-by":"crossref","unstructured":"Karagiannis S, Fusco C, Agathos L, Mallouli W, Casola V, Ntantogian C, Magkos E (2024) Ai-powered penetration testing using shennina: from simulation to validation. In: Proceedings of the 19th international conference on availability, reliability and security, pp 1\u20137","DOI":"10.1145\/3664476.3670452"},{"issue":"16","key":"1583_CR74","doi-asserted-by":"publisher","first-page":"9328","DOI":"10.3390\/app13169328","volume":"13","author":"A S\u00e1nchez del Monte","year":"2023","unstructured":"S\u00e1nchez del Monte A, Hern\u00e1ndez-\u00c1lvarez L (2023) Analysis of cyber-intelligence frameworks for ai data processing. Appl Sci 13(16):9328","journal-title":"Appl Sci"},{"key":"1583_CR75","doi-asserted-by":"crossref","unstructured":"Hu Z, Shi J, Huang Y, Xiong J, Bu X (2018) Ganfuzz: a gan-based industrial network protocol fuzzing framework. In: Proceedings of the 15th ACM international conference on computing frontiers, pp 138\u2013145","DOI":"10.1145\/3203217.3203241"},{"key":"1583_CR76","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102108","volume":"100","author":"R Maeda","year":"2021","unstructured":"Maeda R, Mimura M (2021) Automating post-exploitation with deep reinforcement learning. Comput Secur 100:102108","journal-title":"Comput Secur"},{"key":"1583_CR77","doi-asserted-by":"crossref","unstructured":"Railkar DN, Joshi S (2024) Penetration testing framework using the q learning ensemble deep cnn discriminator framework. Int J Adv Comput Sci Appl, 15(3)","DOI":"10.14569\/IJACSA.2024.0150385"},{"key":"1583_CR78","doi-asserted-by":"publisher","first-page":"21 091","DOI":"10.1109\/ACCESS.2020.2968985","volume":"8","author":"TM Fernandez-Carames","year":"2020","unstructured":"Fernandez-Carames TM, Fraga-Lamas P (2020) Towards post-quantum blockchain: a review on blockchain cryptography resistant to quantum computing attacks. IEEE Access 8:21 091-21 116","journal-title":"IEEE Access"},{"key":"1583_CR79","doi-asserted-by":"crossref","unstructured":"Shafik W (2025) Quantum computing and generative adversarial networks (gans): ethics, privacy, and security. In: Quantum AI and its applications in blockchain technology. IGI Global Scientific Publishing, pp 111\u2013156","DOI":"10.4018\/979-8-3373-1657-4.ch007"},{"key":"1583_CR80","doi-asserted-by":"crossref","unstructured":"Kumar M, Pattnaik P (2020) Post quantum cryptography (pqc)-an overview. In: 2020 IEEE high performance extreme computing conference (HPEC). IEEE, pp 1\u20139","DOI":"10.1109\/HPEC43674.2020.9286147"},{"issue":"2","key":"1583_CR81","doi-asserted-by":"publisher","first-page":"260","DOI":"10.3390\/e24020260","volume":"24","author":"S Sun","year":"2022","unstructured":"Sun S, Huang A (2022) A review of security evaluation of practical quantum key distribution system. Entropy 24(2):260","journal-title":"Entropy"},{"key":"1583_CR82","doi-asserted-by":"crossref","unstructured":"Lei H, Ge Y, Zhu Q (2024) Adapt: a game-theoretic and neuro-symbolic framework for automated distributed adaptive penetration testing. In: MILCOM 2024\u20132024 IEEE military communications conference (MILCOM). IEEE, pp 7\u201312","DOI":"10.1109\/MILCOM61039.2024.10774038"},{"key":"1583_CR83","unstructured":"Alshehri I, Alshehri A, Almalki A, Bamardouf M, Akbar A (2024) Breachseek: a multi-agent automated penetration tester. arXiv preprint arXiv:2409.03789"},{"key":"1583_CR84","doi-asserted-by":"crossref","unstructured":"Kumaran U, Gurupriya M, Chinta HS, Maganti AUS (2024) Ai based pentest for ehr and other health monitoring devices. In: 2024 5th International conference on smart electronics and communication (ICOSEC). IEEE, pp 1614\u20131619","DOI":"10.1109\/ICOSEC61587.2024.10722070"},{"issue":"2","key":"1583_CR85","doi-asserted-by":"publisher","first-page":"267","DOI":"10.1504\/IJGUC.2020.105541","volume":"11","author":"V Casola","year":"2020","unstructured":"Casola V, Benedictis AD, Rak M, Villano U (2020) A methodology for automated penetration testing of cloud applications. Int J Grid Util Comput 11(2):267\u2013277","journal-title":"Int J Grid Util Comput"},{"key":"1583_CR86","doi-asserted-by":"crossref","unstructured":"Igwenagu U, Salami AA, Arigbabu AS, Esambe MC, Oladoyinbo TO, Olaniyi OO (2024) Securing the digital frontier: strategies for cloud computing security, database protection, and comprehensive penetration testing. Database Protection, and Comprehensive Penetration Testing (2024)","DOI":"10.2139\/ssrn.4818261"},{"issue":"1","key":"1583_CR87","doi-asserted-by":"publisher","first-page":"481","DOI":"10.1038\/s41597-024-03311-2","volume":"11","author":"T Puccetti","year":"2024","unstructured":"Puccetti T, Nardi S, Cinquilli C, Zoppi T, Ceccarelli A (2024) Rospace: intrusion detection dataset for a ros2-based cyber-physical system and iot networks. Sci Data 11(1):481","journal-title":"Sci Data"},{"issue":"3","key":"1583_CR88","doi-asserted-by":"publisher","first-page":"1331","DOI":"10.1109\/TETC.2021.3082525","volume":"10","author":"J Brown","year":"2021","unstructured":"Brown J, Saha T, Jha NK (2021) Gravitas: graphical reticulated attack vectors for internet-of-things aggregate security. IEEE Trans Emerg Top Comput 10(3):1331\u20131348","journal-title":"IEEE Trans Emerg Top Comput"},{"key":"1583_CR89","doi-asserted-by":"crossref","unstructured":"Babu SA, Ranganath A, Goswami MM, Gnanaprakasam T, Ishak MK (2024) Modified marine predators algorithm with deep learning-driven security solution for iot-assisted uav networks. IEEE Access","DOI":"10.1109\/ACCESS.2024.3386570"},{"key":"1583_CR90","doi-asserted-by":"publisher","first-page":"1404","DOI":"10.1016\/j.procs.2024.03.139","volume":"234","author":"BC Hidayanto","year":"2024","unstructured":"Hidayanto BC, Akbar IA, Zanesty RAR (2024) Penetration testing analysis: impact on smart contract market value. Procedia Comput Sci 234:1404\u20131411","journal-title":"Procedia Comput Sci"},{"issue":"6","key":"1583_CR91","doi-asserted-by":"publisher","DOI":"10.1002\/ett.4112","volume":"32","author":"P Kumar","year":"2021","unstructured":"Kumar P, Kumar R, Gupta GP, Tripathi R (2021) A distributed framework for detecting ddos attacks in smart contract-based blockchain-iot systems by leveraging fog computing. Trans Emerg Telecommun Technol 32(6):e4112","journal-title":"Trans Emerg Telecommun Technol"},{"key":"1583_CR92","doi-asserted-by":"crossref","unstructured":"Paltenghi M, Pradel M (2023) Morphq: metamorphic testing of the qiskit quantum computing platform. In: 2023 IEEE\/ACM 45th international conference on software engineering (ICSE). IEEE, pp 2413\u20132424","DOI":"10.1109\/ICSE48619.2023.00202"},{"key":"1583_CR93","unstructured":"Halak B, Csete CS, Joyce E, Papaioannou J, Pires A, Soma J, Gokkaya B, Murphy M (2024) A security assessment tool for quantum threat analysis, arXiv preprint arXiv:2407.13523"},{"issue":"6","key":"1583_CR94","doi-asserted-by":"publisher","first-page":"259","DOI":"10.3390\/fi17060259","volume":"17","author":"P Lillemets","year":"2025","unstructured":"Lillemets P, Bashir Jawad N, Kashi J, Sabah A, Dragoni N (2025) A systematic review of cyber range taxonomies: trends, gaps, and a proposed taxonomy. Future Internet 17(6):259","journal-title":"Future Internet"},{"key":"1583_CR95","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2025.104454","volume":"155","author":"C Skandylas","year":"2025","unstructured":"Skandylas C, Asplund M (2025) Automated penetration testing: formalization and realization. Comput Secur 155:104454","journal-title":"Comput Secur"},{"key":"1583_CR96","doi-asserted-by":"crossref","unstructured":"Kitt LJ, Cohen MB (2024) Morphq++: a reproducibility study of metamorphic testing on quantum compilers. In: Proceedings of the 39th IEEE\/ACM international conference on automated software engineering workshops, pp 8\u201314","DOI":"10.1145\/3691621.3694959"},{"key":"1583_CR97","doi-asserted-by":"publisher","DOI":"10.1016\/j.infsof.2021.106700","volume":"141","author":"RN Rajapakse","year":"2022","unstructured":"Rajapakse RN, Zahedi M, Babar MA, Shen H (2022) Challenges and solutions when adopting devsecops: a systematic review. Inf Softw Technol 141:106700","journal-title":"Inf Softw Technol"},{"key":"1583_CR98","doi-asserted-by":"crossref","unstructured":"Rangnau T, Buijtenen RV, Fransen F, Turkmen F (2020) Continuous security testing: a case study on integrating dynamic security testing tools in ci\/cd pipelines. In: 2020 IEEE 24th international enterprise distributed object computing conference (EDOC). IEEE, pp 145\u2013154","DOI":"10.1109\/EDOC49727.2020.00026"},{"key":"1583_CR99","unstructured":"Bird J (2016) Using metrics to manage your application security program. SANS Institute"},{"issue":"1","key":"1583_CR100","doi-asserted-by":"publisher","first-page":"277","DOI":"10.1109\/TII.2012.2198666","volume":"9","author":"M Cheminod","year":"2012","unstructured":"Cheminod M, Durante L, Valenzano A (2012) Review of security issues in industrial networks. IEEE Trans Ind Inf 9(1):277\u2013293","journal-title":"IEEE Trans Ind Inf"},{"issue":"5","key":"1583_CR101","doi-asserted-by":"publisher","first-page":"E18722121303293","DOI":"10.2174\/0118722121303293240801111043","volume":"19","author":"W Li","year":"2025","unstructured":"Li W, Tian D (2025) A review of hardware-in-the-loop simulation for control performance verification of permanent magnet synchronous motors. Recent Patents Eng 19(5):E18722121303293","journal-title":"Recent Patents Eng"}],"container-title":["Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-025-01583-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00607-025-01583-z\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00607-025-01583-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,12,8]],"date-time":"2025-12-08T14:02:46Z","timestamp":1765202566000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00607-025-01583-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,11,5]]},"references-count":101,"journal-issue":{"issue":"12","published-print":{"date-parts":[[2025,12]]}},"alternative-id":["1583"],"URL":"https:\/\/doi.org\/10.1007\/s00607-025-01583-z","relation":{},"ISSN":["0010-485X","1436-5057"],"issn-type":[{"type":"print","value":"0010-485X"},{"type":"electronic","value":"1436-5057"}],"subject":[],"published":{"date-parts":[[2025,11,5]]},"assertion":[{"value":"23 June 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 October 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"5 November 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"224"}}