Zscaler ThreatLabz. Zscaler threatlabz finds a 400% increase in iot
and ot malware attacks year-over-year, underscoring need for better zero
trust security to protect critical infrastructures. Zscaler, 2023. Accessed:
2024-10-11.
[2] GOV.UK, Department for Digital. Cyber security breaches survey 2022,
gov.uk, 2022.
[3] S. C. Vetrivel, R. Maheswari, and T. P. Saravanan. Security challenges
for industrial iot. Wireless networks and industrial IoT: Applications,
challenges and enablers, 2021.
[4] Dirk Johannes Beukes. The importance of vulnerability assessments
and penetration testing in cybersecurity. Journal of Cybersecurity and
Privacy, 2(4):123–138, 2019. Accessed: 2024-10-11.
[5] Farah Abu-Dabaseh and Esraa Alshammari. Automated penetration
testing: An overview. In The 4th International Conference on Natural
Language Computing, pages 121–129, Copenhagen, Denmark, 2018.
[6] Ralph Ankele, Stefan Marksteiner, Kai Nahrgang, and Heribert Vallant.
Requirements and recommendations for iot/iiot models to automate
security assurance through threat modelling, security analysis and penetration
testing. In Proceedings of the 14th International Conference
on Availability, Reliability and Security (ARES 2019), pages 1–8. ACM,
2019.
[7] L.P. Ledwaba and G.P. Hancke. Security challenges for industrial
iot. Wireless networks and industrial IoT: Applications, challenges and
enablers, pages 193–206, 2021.
[8] Pengfei Shi, Futong Qin, Ruosi Cheng, and Kunsong Zhu. The
penetration testing framework for large-scale network based on network
fingerprint. In 2019 International Conference on Communications,
Information System and Computer Engineering (CISCE), pages 378–
381. IEEE, 2019.
[9] Yaroslav Stefinko, Andrian Piskozub, and Roman Banakh. Manual
and automated penetration testing: Benefits and drawbacks. modern
tendency. In 2016 13th International Conference on Modern Problems
of Radio Engineering, Telecommunications and Computer Science (TCSET),
pages 488–491. IEEE, 2016.
[10] Sarah Tutton. The disadvantages of manual penetration testing. IT
Governance Blog, 2023.
[11] Zhenguo Hu, Razvan Beuran, and Yasuo Tan. Automated penetration
testing using deep reinforcement learning. In 2020 IEEE European
Symposium on Security and Privacy Workshops (EuroS&PW), pages 2–
10. IEEE, 2020.
[12] Fabio Massimo Zennaro and Laszlo Erdodi. Modeling penetration
testing with reinforcement learning using capture-the-flag challenges:
Trade-offs between model-free learning and a priori knowledge. arXiv
e-prints, pages arXiv–2005, 2021.
[13] Ferheen Ayaz, Zhengguo Sheng, Daxin Tian, Maziar Nekovee, and
Nagham Saeed. Blockchain-empowered ai for 6g-enabled internet of
vehicles. Electronics, 11(20):3339, 2022. Accessed: 2024-02-04.
[14] O Valea and C Opris¸a. Towards pentesting automation using the
metasploit framework. In 2020 IEEE 16th International Conference
on Intelligent Computer Communication and Processing (ICCP), pages
171–178. IEEE, 2020.
[15] Oracle Corporation. Virtualbox user manual. Oracle VirtualBox, 2024.
Accessed: 2024-02-02.
[16] Offensive Security. Kali linux documentation. Kali Linux, 2024.
Accessed: 2024-02-02.
[17] Rapid7. Metasploitable 2: Vulnerable machine for testing. Metasploit
Framework, 2024. Accessed: 2024-02-02.
[18] Tenable. Nessus essentials: The most comprehensive vulnerability
scanner, 2023. Accessed: 2024-10-11.
[19] Python Software Foundation. XML Processing Modules, 2024. Accessed:
2024-10-11.
[20] Rapid7. Metasploit RPC API Documentation, 2023. Accessed: 2024-
10-11.
[21] WhatIsMyIPAddress.com. Classless inter-domain routing (cidr) and
notation for beginners, 2022.
[22] PostgreSQL Global Development Group. PostgreSQL: The World’s Most
Advanced Open Source Relational Database, 2023. Accessed: 2024-10-
11.