{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,19]],"date-time":"2026-07-19T06:05:14Z","timestamp":1784441114092,"version":"3.55.0"},"reference-count":32,"publisher":"IEEE","license":[{"start":{"date-parts":[[2022,6,22]],"date-time":"2022-06-22T00:00:00Z","timestamp":1655856000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2022,6,22]],"date-time":"2022-06-22T00:00:00Z","timestamp":1655856000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2022,6,22]]},"DOI":"10.1109\/dsc54232.2022.9888919","type":"proceedings-article","created":{"date-parts":[[2022,9,26]],"date-time":"2022-09-26T21:10:18Z","timestamp":1664226618000},"page":"1-8","source":"Crossref","is-referenced-by-count":30,"title":["Discovering Exfiltration Paths Using Reinforcement Learning with Attack Graphs"],"prefix":"10.1109","author":[{"given":"Tyler","family":"Cody","sequence":"first","affiliation":[{"name":"National Security Institute,Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Abdul","family":"Rahman","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Christopher","family":"Redino","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Lanxiao","family":"Huang","sequence":"additional","affiliation":[{"name":"National Security Institute,Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ryan","family":"Clark","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Akshay","family":"Kakkar","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Deepak","family":"Kushwaha","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Park","sequence":"additional","affiliation":[{"name":"Deloitte Consulting LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Peter","family":"Beling","sequence":"additional","affiliation":[{"name":"National Security Institute,Virginia Tech"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Edward","family":"Bowen","sequence":"additional","affiliation":[{"name":"Deloitte & Touche LLP"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref32","author":"corporation","year":"2021","journal-title":"Implementing least-privilege administrative models"},{"key":"ref31","author":"conti","year":"2018","journal-title":"On Cyber Towards an Operational Art for Cyber Conflict"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/ICCKE.2013.6682816"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SSCI50451.2021.9659947"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3140549.3140552"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2018.1331034"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2020.102108"},{"key":"ref14","first-page":"113","article-title":"Mulval: A logic-based network security analyzer","volume":"8","author":"ou","year":"2005","journal-title":"USENIX Security Symposium"},{"key":"ref15","first-page":"23","article-title":"A complete guide to the common vulnerability scoring system version 2.0","volume":"1","author":"mell","year":"2007","journal-title":"Published by FIRST-Forum of Incident Response and Security Teams"},{"key":"ref16","author":"sutton","year":"2018","journal-title":"Reinforcement Learning An Introduction"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1002\/SERIES1345"},{"key":"ref18","article-title":"Playing atari with deep reinforcement learning","author":"mnih","year":"2013","journal-title":"ArXiv Preprint"},{"key":"ref19","doi-asserted-by":"crossref","first-page":"529","DOI":"10.1038\/nature14236","article-title":"Human-level control through deep reinforcement learning","volume":"518","author":"mnih","year":"2015","journal-title":"Nature"},{"key":"ref28","first-page":"10","article-title":"Defining and assessing quantitative security risk measures using vulnerability lifecycle and cvss metrics","volume":"1","author":"joh","year":"2011","journal-title":"Proceedings of the 2011 International Conference on Security and Management (SAM'11)"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.3390\/info11010006"},{"key":"ref27","article-title":"On improving deep reinforcement learning for pomdps","author":"zhu","year":"2017","journal-title":"ArXiv Preprint"},{"key":"ref3","article-title":"Autonomous penetration testing using reinforcement learning","author":"schwartz","year":"2019","journal-title":"ArXiv Preprint"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00041"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2011.18"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162301"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSPW51379.2020.00010"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/MSN50589.2020.00086"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/WorldS4.2018.8611595"},{"key":"ref9","article-title":"Using cyber terrain in reinforcement learning for penetration testing","author":"gangupantulu","year":"2021","journal-title":"ArXiv Preprint"},{"key":"ref1","year":"2020","journal-title":"Security and Privacy Controls for Federal Information Systems and Organizations"},{"key":"ref20","first-page":"1928","article-title":"Asynchronous methods for deep rein-forcement learning","author":"mnih","year":"2016","journal-title":"International Conference on Machine Learning"},{"key":"ref22","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1145\/366173.366183","article-title":"Attack net penetration testing","author":"mcdermott","year":"2001","journal-title":"Proceedings of the 2000 Workshop on New Security Paradigms"},{"key":"ref21","article-title":"Deep reinforcement learning for cyber security","author":"nguyen","year":"2019","journal-title":"ArXiv Preprint"},{"key":"ref24","first-page":"215","article-title":"Analysis of attack graph representations for ranking vulnerability fixes","author":"gonda","year":"2018","journal-title":"GCAI"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.5220\/0010232504400449"},{"key":"ref26","article-title":"Constructing plan trees for simulated penetration testing","volume":"121","author":"shmaryahu","year":"2016","journal-title":"The International Conference on Automated Planning & Scheduling"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2018.2819967"}],"event":{"name":"2022 IEEE Conference on Dependable and Secure Computing (DSC)","location":"Edinburgh, United Kingdom","start":{"date-parts":[[2022,6,22]]},"end":{"date-parts":[[2022,6,24]]}},"container-title":["2022 IEEE Conference on Dependable and Secure Computing (DSC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9888143\/9888794\/09888919.pdf?arnumber=9888919","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,2,20]],"date-time":"2023-02-20T16:49:31Z","timestamp":1676911771000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9888919\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2022,6,22]]},"references-count":32,"URL":"https:\/\/doi.org\/10.1109\/dsc54232.2022.9888919","relation":{},"subject":[],"published":{"date-parts":[[2022,6,22]]}}}