首页|期刊导航|计算机工程与科学|知识增强文本语义特征的漏洞自动分类模型

知识增强文本语义特征的漏洞自动分类模型OA

Automatic vulnerability classification model with knowledge-enhanced text semantic features

中文摘要英文摘要

在漏洞自动分类任务中,针对细化的漏洞类型导致各类型文本数量分布不均、以及漏洞描述文本中包含的信息存在显著差异的问题,提出一种知识增强文本语义特征的漏洞自动分类模型 BTH-KE.在数据处理阶段,根据《信息安全技术—网络安全漏洞分类分级指南》,统一归并了阿里云漏洞库中的 CWE 漏洞类型.在融合漏洞知识的语义特征增强阶段,所提模型通过识别漏洞文本的标识特征,实现关联漏洞文本相关的漏洞属性知识表示,并提出一种融合漏洞属性知识和漏洞文本语义的跨维融合策略,统一了知识与文本在表示维度上的差异,丰富并强化了漏洞文本的关键特征.实验结果表明,BTH-KE 模型在准确率、精确率、召回率和F1 值 4 个评价指标上分别达到了 93.37%,93.55%,93.37%和 93.41%.

In automatic vulnerability classification tasks,the uneven distribution of text samples across fine-grained vulnerability types and the significant differences in information contained in vulnera-bility descriptions pose major challenges.To address these issues,this paper proposes an automatic vul-nerability classification model with knowledge enhanced text semantic features,BerTrans H-knowledge-enhanced(BT H-KE).In the data preprocessing stage,CWE vulnerability types in the Alibaba Cloud vulnerability database are consolidated according to the Guidelines for Classification and Grading of Cybersecurity Vulnerabilities.In the knowledge-fused semantic feature enhancement stage,the model identifies distinctive features in vulnerability texts to represent related vulnerability attribute knowl-edge,and proposes a cross-dimensional fusion strategy that integrates vulnerability attribute knowledge with textual semantics.This strategy bridges the dimensional gap between knowledge and text represen-tation,enriching and strengthening key features of vulnerability texts.Experimental results show that the BTH-KE model achieves an accuracy of 93.37%,a precision of 93.55%,a recall of 93.37%,and an F1 score of 93.41%,respectively.

边晓云;赵刚;王泽辰

北京信息科技大学计算机学院,北京102206||北京信息科技大学商务智能研究所,北京 102206北京信息科技大学管理科学与工程学院,北京102206||北京信息科技大学商务智能研究所,北京 102206北京信息科技大学计算机学院,北京102206||北京信息科技大学商务智能研究所,北京 102206

信息技术与安全科学

知识增强预训练语言模型文本语义特征属性三元组漏洞自动分类

knowledge-enhancementpre-trained language modeltext semantic featureattribute tripletautomatic vulnerability classification

《计算机工程与科学》 2026 (9)

1594-1602,9

国家重点研发计划(2019YFB1405003)

10.3969/j.issn.1007-130X.2026.09.007

评论