VulnScopper: Unveiling Hidden Links Between Unseen Security Entities
The NVD announced it could no longer fully enrich new CVEs at the pace they arrive. VulnScopper combines knowledge graphs and LLMs - using a GNN foundation model (ULTRA) in an inductive setup - to automate vulnerability enrichment and link CVEs to related security entities, including ones the model has not seen at training time.
Authors: Daniel Alfasi, Tal Shapira, Anat Bremler-Barr. Published in Proceedings of the 3rd GNNet Workshop on Graph Neural Networking, pages 33-40.