## Appendix A
\begin{tabular}{c c} \hline
**Term** & **Meaning of the Term** \\ \hline \multirow{4}{*}{_AND/OR nodes_} & AND nodes have conjunctive, whereas OR nodes have disjunctive relationships with their predecessors. More specifically, if all predecessors must be accessed before the considered node is attacked, such a node is called an AND node. If executing/accessing any predecessor is sufficient to achieve the considered node, then such a node is called an OR node. \\ \multirow{4}{*}{_condition_} & a specific prerequisite must be fulfilled or achieved for a successful exploit. \\  & a network of interconnected physical and computer components to securely, flexibly, and effectively manage \\  & _system (CPS)_ & integrated computing, networking, and physical processes. \\  & _cybersecurity_ & the state of the network being free from danger or threat. \\  & _cyber-defense_ & the action of defending from or resisting attack. \\  & \multirow{2}{*}{_data exfiltration_} & a type of security breach that includes unauthorized copying, transfer, or retrieval of data from either a server or an individual's computer without proper authorization with malicious intent. \\  & _defender_ & an application or an individual that monitors in real-time for malware, viruses, and other security threats. \\  & a piece of software/data or a set of commands that use a vulnerability to cause unintended or unanticipated \\  & _exploit_ & behavior in a CPS's software or hardware. Exploits allow attackers to gain remote access to a target network and penetrate deeper into the network. \\  & \multirow{2}{*}{_exploit-dependency graph_ (EDG)} & a directed attack graph composed of two types of nodes: _exploit nodes_ and _condition nodes_. An _exploit node_ corresponds to an exploit in the considered network; a _condition node_ denotes that a specific host is reachable by an intruder, this host has a vulnerability, and an attacker compromises the host. Edges run from condition nodes to exploit nodes or from exploit nodes to condition nodes, i.e., the exploit-dependency graph is bipartite. \\  & _hardening a system_ & see _network hardening_. \\  & \multirow{2}{*}{_hostile attack_} & a form of a cyber warfare that has a goal of espionage, where information or data are stolen via the Internet, or of sabotage, such as compromising a node. The attacks usually come in the form of a computer virus or through a coordinated attack by a network of hostile computer systems. \\  & _intruder_ & see _attacker_. \\  & _leverages access to_ & to effectively use system access to exploit vulnerabilities. \\  & _leverage attack paths_ & to use different paths to access sensitive information and exploit a vulnerable configuration or resource. \\  & _intentionally designed malicious software to cause disruption or damage, steal data, damage or destroy_ & intentionally designed malicious software to cause disruption or damage, steal data, damage or destroy_ \\  & _malware_ & computers and computer systems; the types of malware include viruses, worms, trojans, spyware, and \\  & \multirow{2}{*}{_monotonicity_} & an assumption that if a network component is compromised by an attacker once, it will remain \\  & & compromised then and forever after. The _monotonicity_ allows for a significant reduction in the AG size. \\  & _network hardening_ & implementing cyber-security actions and measures to strengthen a network's defenses and protect sensitive \\  & _network hardening_ & data. It includes vulnerability assessments, securing open ports, and predicting an attacker's likely paths. \\  & _parent node, child_ & a node \(v\) that has an edge leading to it from an immediately preceding node \(w\) is called the _parent_ node (or \\  & _purelice_ & successor), while \(w\) is a _predecessor_ or _child_ of \(v\). \\  & \multirow{2}{*}{_privilege_} & a permission/right to perform a computer operation or access a database. \\  & & an instance or more weaknesses in a computer system that an attacker can exploit to carry out a \\  & _vulnerability_ & successful malicious attack, causing a negative impact on confidentiality, integrity, or availability of the \\  & _system. It can happen due to user flaws or errors, and attackers will exploit any of them._ \\  & _vulnerability_ & methodology that is systematically carried out to identify, classify, prioritize, and mitigate vulnerabilities \\  & _analysis_ & and security risks \\  & _weaponization_ & creating or modifying _malware_ to exploit specific vulnerabilities; _weaponization_ enhances the effectiveness of \\  & _(in cybersecurity)_ & cyber-attacks, making them more sophisticated and harder to detect. \\ \hline \end{tabular}