A Systematic Literature Review on Penetration Testing in Networks: Future Research Directions

M Alhamed, MMH Rahman - Applied Sciences, 2023 - mdpi.com
Given the widespread use of the internet at the individual, governmental, and
nongovernmental levels, and the opportunities it offers, such as online shopping, security …

Distributed web hacking by adaptive consensus-based reinforcement learning

N Ilić, D Dašić, M Vučetić, A Makarov, R Petrović - Artificial Intelligence, 2024 - Elsevier
In this paper, we propose a novel adaptive consensus-based learning algorithm for
automated and distributed web hacking. We aim to assist ethical hackers in conducting …

ESASCF: expertise extraction, generalization and reply framework for optimized automation of network security compliance

MC Ghanem, TM Chen, MA Ferrag… - IEEE Access, 2023 - ieeexplore.ieee.org
Organizations constantly exposed to cyber threats are compelled to comply with cyber
security standards and policies for protecting their digital assets. Vulnerability assessment …

Deep reinforcement learning for intelligent penetration testing path design

J Yi, X Liu - Applied Sciences, 2023 - mdpi.com
Penetration testing is an important method to evaluate the security degree of a network
system. The importance of penetration testing attack path planning lies in its ability to …

SoK: On the offensive potential of AI

SL Schröer, G Apruzzese, S Human, P Laskov… - arXiv preprint arXiv …, 2024 - arxiv.org
Our society increasingly benefits from Artificial Intelligence (AI). Unfortunately, more and
more evidence shows that AI is also used for offensive purposes. Prior works have revealed …

[HTML][HTML] A Survey on Penetration Path Planning in Automated Penetration Testing

Z Chen, F Kang, X Xiong, H Shu - Applied Sciences, 2024 - mdpi.com
Penetration Testing (PT) is an effective proactive security technique that simulates hacker
attacks to identify vulnerabilities in networks or systems. However, traditional PT relies on …

A hierarchical deep reinforcement learning model with expert prior knowledge for intelligent penetration testing

Q Li, M Zhang, Y Shen, R Wang, M Hu, Y Li, H Hao - Computers & Security, 2023 - Elsevier
Penetration testing (PT) is an effective method to assess the security of a network, mainly
carried out by experienced human experts, and is widely applied in practice. It is urgent to …

Transfer reinforcement learning for combinatorial optimization problems

GKB Souza, SOS Santos, ALC Ottoni, MS Oliveira… - Algorithms, 2024 - mdpi.com
Reinforcement learning is an important technique in various fields, particularly in automated
machine learning for reinforcement learning (AutoRL). The integration of transfer learning …

Hackphyr: A Local Fine-Tuned LLM Agent for Network Security Environments

M Rigaki, C Catania, S Garcia - arXiv preprint arXiv:2409.11276, 2024 - arxiv.org
Large Language Models (LLMs) have shown remarkable potential across various domains,
including cybersecurity. Using commercial cloud-based LLMs may be undesirable due to …

Advancing ESSecA: a step forward in Automated Penetration Testing

M Rak, F Moretta, D Granata - … of the 19th International Conference on …, 2024 - dl.acm.org
The growing importance of Information Technology (IT) services is accompanied by a surge
in security challenges. While traditional security tests focus on single applications, today's …