# Physics-Informed Graph Neural Networks for Attack Path Prediction
## Appendix E Complexity Analysis
### Path Prediction Architecture
In Proceedings of the 2023 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW), Delft, The Netherlands, 3-7 July 2023; pp. 194-206. * FIRST (2025) FIRST. Common Vulnerability Scoring System. Available online: [[https://www.first.org/](https://www.first.org/)]([https://www.first.org/](https://www.first.org/)) (accessed on 7 April 2025). * [PERSON] et al. (2021) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Exploit prediction scoring system (epss). _Digit. Threat. Res. Pract._**2021**, \(2\), 1-17. [CrossRef]
* [PERSON] and [PERSON] (2012) [PERSON]; [PERSON] A preliminary analysis of vulnerability scores for attacks in wild: The ekits and sym datasets. In Proceedings of the 2012 ACM Workshop on Building Analysis Datasets and Gathering Experience Returns for Security, Raleigh, NC, USA, 15 October 2012; pp. 17-24. * [PERSON] and [PERSON] (2014) [PERSON]; [PERSON] Comparing vulnerability severity and exploits using case-control studies. _ACM Trans. Inf. Syst. Secur. (TISSEC)_**2014**, _17_, 1-20. [CrossRef]
* [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] [PERSON] Comparing and evaluating CVSS base metrics and microsoft rating system. In Proceedings of the 2015 IEEE International Conference on Software Quality, Reliability and Security, Vancouver, BC, Canada, 3-5 August 2015; pp. 252-261. * [PERSON] et al. (2022) [PERSON]; [PERSON]; [PERSON]; [PERSON]; [PERSON] Expected exploitability: Predicting the development of functional vulnerability exploits. In Proceedings of the 31 st USENIX Security Symposium (USENIX Security 22), Boston, MA, USA, 10-12 August 2022; pp. 377-394. * [PERSON] et al. (1989) [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON] _Deep Learning_; MIT Press: Cambridge, MA, USA; Boston, MA, USA, 2016
* [PERSON] (1989) [PERSON] Approximation by superpositions of a sigmoidal function. _Math. Control Signals Syst._**1989**, \(2\), 303-314. [CrossRef]
* [PERSON] (2024) [PERSON]; [PERSON]; [PERSON] [PERSON] Latent States: Model Based Machine Learning Perspectives on Cyber Resilience. In Proceedings of the IEEE 4 th Intelligent Cybersecurity Conference (ICSC), Valencia, Spain, 17-20 September 2024. * [PERSON] and [PERSON] (2020) [PERSON]; [PERSON]; [PERSON] A literature review on mining cyberthreat intelligence from unstructured texts. In Proceedings of the 2020 International Conference on Data Mining Workshops (ICDMW), Virtual, 17-20 November 2020; pp. 516-525. * [PERSON] et al. (2023) [PERSON]; [PERSON] [PERSON]; [PERSON]; [PERSON] [PERSON]; [PERSON] [PERSON]; [PERSON] Knowledge mining of unstructured information: Application to cyber domain. _Sci. Rep._**2023**, _13_, 1714. [CrossRef]
* [PERSON] and [PERSON] (2021) [PERSON]; [PERSON] [PERSON] Deep reinforcement learning for cyber security. _IEEE Trans. Neural Netw. Learn. Syst._**2021**, _34_, 3779-3795. [CrossRef] [PubMed]
* [PERSON] et al. (2016) [PERSON]; [PERSON]; [PERSON] [PERSON] A problem shared is a problem halved: A survey on the dimensions of collective cyber defense through security information sharing. _Comput. Secur._**2016**, _60_, 154-176. [CrossRef]
* [PERSON] and [PERSON] (2018) [PERSON]; [PERSON] Cybersecurity information sharing governance structures: An ecosystem of diversity, trust, and tradeoffs. _arXiv_**2018**, arXiv:1805.12266. * [PERSON] and [PERSON] (2019) [PERSON]; [PERSON] Information sharing in cybersecurity: A review. _Decis. Anal._**2019**, _16_, 172-196. [CrossRef]
* [PERSON] (2015) [PERSON] _Cybersecurity and Information Sharing: Legal Challenges and Solutions_; Congressional Research Service: Washington, DC, USA, 2015; Volume 5. * [PERSON] and [PERSON] (2015) [PERSON]; [PERSON] Anonymity vs. trust in cyber-security collaboration. In Proceedings of the 2 nd ACM Workshop on Information Sharing and Collaborative Security, Denver, CO, USA, 12 October 2015; pp. 27-29. * [PERSON] and [PERSON] (2013) [PERSON]; [PERSON], O.S. Towards improved cyber security information sharing. In Proceedings of the 2013 5 th International Conference on Cyber Conflict (CYCON 2013), Talinn, Estonia, 4-7 June 2013; pp. 1-16.