Copertina

Dynamic Vulnerability Knowledge Graph Construction via Multi-Source Data Fusion and Large Language Model Reasoning

Salvato in:
Pubblicato in:Electronics vol. 14, no. 12 (2025), p. 2334-2360
Autore principale: Liu Ruitong
Altri autori: Xie Yaxuan, Dang Zexu, Hao Jinyi, Quan Xiaowen, Xiao Yongcai, Peng Chunlei
Pubblicazione:
MDPI AG
Soggetti:
Language
Forgery
Dictionaries
Accuracy
Large language models
Graphs
Conditional random fields
Ontology
Neural networks
Reasoning
Cybersecurity
Software reliability
Databases
Data collection
Data integration
Natural language processing
Network analysis
Knowledge representation
Semantics
Accesso online:Citation/Abstract
Full Text + Graphics
Full Text - PDF
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
Abstract:With the increasing number of network security threats and the frequent occurrence of software vulnerability attacks, the effective management and large-scale retrieval of vulnerability data have become urgent needs. Existing vulnerability information is scattered across heterogeneous sources and is difficult to integrate, which in turn makes it hard for security analysts to quickly retrieve and analyze relevant security knowledge. To address this problem, this paper proposes a method to construct a vulnerability knowledge graph by integrating multi-source vulnerability data, combining graph embedding technology with large language model reasoning to aggregate, infer, and enrich vulnerability knowledge. Experiments demonstrated that our domain-tuned Bidirectional Long Short-Term Memory–Conditional Random Field (BiLSTM-CRF) named entity recognition (NER), enhanced with a cybersecurity dictionary, achieved a 90.1% F1-score for entity extraction. For link prediction, a hybrid Graph Attention Network fused with GPT-3 reasoning boosted Hits1 by 0.137, Hits3 by 0.116, and Hits10 by 0.101 over the baseline. These results confirm that our approach markedly enhanced entity identification and relationship inference, yielding a more complete and dynamically updatable cybersecurity knowledge graph.
ISSN:2079-9292
DOI:10.3390/electronics14122334
Fonte:Advanced Technologies & Aerospace Database