\babel@toc {nil}{}\relax \contentsline {section}{\numberline {1}Introduction}{2}{section.1}% \contentsline {subsection}{\numberline {1.1}Attack Graphs}{2}{subsection.1.1}% \contentsline {subsection}{\numberline {1.2}Compliance Graphs}{2}{subsection.1.2}% \contentsline {subsection}{\numberline {1.3}Difficulties of Compliance Graph Analysis}{3}{subsection.1.3}% \contentsline {section}{\numberline {2}Related Works}{3}{section.2}% \contentsline {section}{\numberline {3}Experimental Networks}{4}{section.3}% \contentsline {section}{\numberline {4}Centralities and their Applications to Compliance Graphs}{5}{section.4}% \contentsline {subsection}{\numberline {4.1}Introduction}{5}{subsection.4.1}% \contentsline {subsection}{\numberline {4.2}Degree}{5}{subsection.4.2}% \contentsline {subsection}{\numberline {4.3}Betweenness}{5}{subsection.4.3}% \contentsline {subsection}{\numberline {4.4}Katz}{6}{subsection.4.4}% \contentsline {subsection}{\numberline {4.5}K-Path Edge}{7}{subsection.4.5}% \contentsline {subsection}{\numberline {4.6}Adapted Page Rank}{7}{subsection.4.6}% \contentsline {section}{\numberline {5}Transitive Closure}{8}{section.5}% \contentsline {subsection}{\numberline {5.1}Introduction and Application}{8}{subsection.5.1}% \contentsline {section}{\numberline {6}Dominant Tree}{9}{section.6}% \contentsline {subsection}{\numberline {6.1}Introduction and Application}{9}{subsection.6.1}% \contentsline {section}{\numberline {7}Results and Result Analysis}{10}{section.7}% \contentsline {subsection}{\numberline {7.1}Results}{10}{subsection.7.1}% \contentsline {subsection}{\numberline {7.2}Result Analysis}{10}{subsection.7.2}% \contentsline {section}{\numberline {8}Conclusions and Future Work}{15}{section.8}% \contentsline {subsection}{\numberline {8.1}Conclusions}{15}{subsection.8.1}% \contentsline {subsection}{\numberline {8.2}Future Work}{16}{subsection.8.2}% \contentsline {section}{Bibliography}{17}{subsection.8.2}% \contentsline {section}{\numberline {A}HIPAA Results}{19}{appendix.A}% \contentsline {section}{\numberline {B}PCI DSS Results}{23}{appendix.B}%