基于ML模型和LLM模型的各种数据类型的威胁分类优化.
1Seoul AI School, aSSIST University, Seoul, 03767, South Korea.
Scientific reports
|July 2, 2025
概括
这项研究整合了机器学习 (ML) 和大型语言模型 (LLM),通过分析安全新闻和源代码来检测网络安全威胁. 该框架有效地识别漏洞,提高检测准确性和减少错误阳性.
科学领域:
- 网络安全 网络安全
- 人工智能的人工智能
- 软件工程 软件工程 软件工程
背景情况:
- 人工智能技术的快速发展导致了复杂的网络安全威胁的增加.
- 现有的安全工具很难有效地检测和应对这些不断变化的威胁.
- 越来越需要能够分析各种数据源的综合系统来进行威胁检测.
研究的目的:
- 在统一的ML和LLM环境中,探索对异质数据的整体分析,包括安全威胁新闻和源代码缺陷.
- 开发和评估一个有效的安全威胁检测系统,利用ML和LLM能力.
- 提高源代码中漏洞检测的准确性和效率.
主要方法:
- 应用于 Post News 数据的缩放和规范化,以减轻偏差.
- 利用语法分析,语义分析和数据流信息来进行集成的源代码分析.
- 开发了一种系统化的数据标签和格式化方法,用于ML和LLM应用.
- 在源代码分析中使用抽象语法树 (AST) 进行特征提取.
主要成果:
- 在新闻后的数据上,ML模型 (XGBoost,SVM,Random Forest) 实现了0.96-0.97的F1得分.
- 在新闻后的数据上,LLM模型 (ST5-xxl,XLNet,BERT,CodeBERT,GraphCodeBERT) 获得了0.97的F1得分.
- 在C/C++弱点检测中,LLM模型 (ST5-xxl,XLNet,CodeBERT,GraphCodeBERT) 在C/C++弱点检测中实现了近乎完美的精度 (0.9999).
- 在源代码分析中,TF-IDF嵌入方法在ML模型中表现优于Word2Vec.
结论:
- 拟议的集成ML和LLM框架有效地使用AST检测源代码漏洞.
- 该框架通过考虑代码结构和语义来克服传统静态分析工具的局限性.
- 将基于AST的功能与LLM功能相结合,可以增强对新漏洞的概括性,并减少误报.
相关概念视频
Classification of Systems-I
319
Linearity is a system property characterized by a direct input-output relationship, combining homogeneity and additivity.
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
Homogeneity dictates that if an input x(t) is multiplied by a constant c, the output y(t) is multiplied by the same constant. Mathematically, this is expressed as:
319
Classification of Systems-II
242
Continuous-time systems have continuous input and output signals, with time measured continuously. These systems are generally defined by differential or algebraic equations. For instance, in an RC circuit, the relationship between input and output voltage is expressed through a differential equation derived from Ohm's law and the capacitor relation,
242
Improving Translational Accuracy
11.9K
Base complementarity between the three base pairs of mRNA codon and the tRNA anticodon is not a failsafe mechanism. Inaccuracies can range from a single mismatch to no correct base pairing at all. The free energy difference between the correct and nearly correct base pairs can be as small as 3 kcal/ mol. With complementarity being the only proofreading step, the estimated error frequency would be one wrong amino acid in every 100 amino acids incorporated. However, error frequencies observed in...
11.9K
Aggregates Classification
389
Aggregate classification is generally based on its size, petrographic characteristics, weight, and source. Size classification ranges from coarse to fine aggregates, defined by the size of the particles. Coarse aggregates are particles that do not pass through ASTM sieve No. 4, and aggregates that pass through the sieve are fine aggregates.
Petrographic classification groups aggregates based on common mineralogical characteristics. Some of the common mineral groups found in aggregates are...
Petrographic classification groups aggregates based on common mineralogical characteristics. Some of the common mineral groups found in aggregates are...
389
Language and Cognition
456
Language serves as a bridge between ideas and communication, influencing how individuals perceive and interact with the world. Psychologists have long debated whether language shapes thought or vice versa. This discussion gained grip with Edward Sapir and Benjamin Lee Whorf in the 1940s, who proposed that language determines thought, a concept known as linguistic determinism. They suggested that the vocabulary and structure of a language influence how its speakers think and perceive reality.
456
Language Development
460
Children master language quickly and with relative ease, supported by both biological predisposition and reinforcement. B. F. Skinner (1957) proposed that language is learned through reinforcement, while Noam Chomsky (1965) argued that language acquisition mechanisms are biologically determined.
The critical period for language acquisition suggests that the ability to acquire language is at its peak early in life. As people age, this proficiency decreases. Language development begins very...
The critical period for language acquisition suggests that the ability to acquire language is at its peak early in life. As people age, this proficiency decreases. Language development begins very...
460


