arXiv:2607.04070cs.CRcs.IR2026-07

构建时间感知的修复图,解决安全信息缺失与延迟问题。

Conductance-Repair Evidence Graphs for Prospective Security Retrieval

  • 用时序可接受掩码和确定性图流修复缺失证据链
  • 召回率从0.017提升至0.069,平均精度达0.060
  • 适合安全研判、漏洞分析与系统化验证场景

安全检索通常在完整证据上评估排序,但实际威胁研判是前瞻性的:CVE描述、弱点元数据、修复提交、EPSS评分、已知暴露清单(KEV)成员资格、验证向量元数据及侧信道基准路径通过不同渠道独立到达,常出现缺失、延迟、污染或决策后才可见。本文提出导通修复证据图,一种带时间戳的框架,检索基于时间可接受掩码进行,缺失通道通过确定性图流递归填补,而非依赖学习型预测器。该方法输出一份修复证书,记录源探测、决策时间、被隐藏边、修复通道、禁止的决策后边、后端可用性、数值偏差及验证结果。理论层给出缺失通道识别的自适应⌈log₂N⌉下界、最小有害修复的NP难性证明,以及针对q个可疑通道的固定参数可证搜索界。当前实现包含30个去重公开安全记录、57个术语和58条被隐藏的可接受文档-术语边。随机边遮蔽下,导通修复使recall@k从0.017升至0.069,平均精度从0.062升至0.060;合成安全补丁使recall@k从0.055升至0.099;公开数据集的AP下降揭示了广泛可接受修复在随机边污染下的局限性。实现对NumPy、PyTorch、JAX和TensorFlow中的相同流/分解/张量积内核进行基准测试,记录不可用后端而非静默替换。BBBC019和LIVECell元数据仅作为稀疏动态源通道的结构控制,不涉及临床或生物性能主张。

原文摘要 · Abstract (English)

Security retrieval is often evaluated as ranking over complete evidence, but operational triage is prospective: CVE descriptions, weakness metadata, fix commits, EPSS scores, KEV membership, validation-vector metadata, and side-channel benchmark routes arrive through separate channels, and many are missing, delayed, poisoned, or visible only after the decision time. We introduce conductance-repair evidence graphs, a timestamped framework in which retrieval is performed over a temporal admissibility mask and missing channels are widened by a deterministic graph-flow recurrence rather than by a learned predictor. The method emits a repair certificate recording source probes, decision time, withheld edges, repaired channels, forbidden post-decision edges, backend availability, numerical deviation, and verifier results. The theoretical layer gives an adaptive \(\lceil\log_2 N\rceil\) lower bound for missing-channel identification, an NP-hardness result for minimum harmful repair, and a fixed-parameter certified search bound for \(q\) questionable channels. The current artifact materializes 30 deduplicated public security records, 57 terms, and 58 withheld admissible document-term edges. Under random edge withholding, conductance repair changes recall@\(k\) from 0.017 to 0.069 and average precision from 0.062 to 0.060, while a synthetic security fixture improves recall@\(k\) from 0.055 to 0.099; the public AP drop exposes a limit of broad admissible repair under random edge corruption. The implementation benchmarks the same flow/SVD/einsum kernel under NumPy, PyTorch, JAX, and TensorFlow when available, recording unavailable backends rather than silently substituting them. BBBC019 and LIVECell metadata are retained only as structural controls for sparse evolving source channels, with no clinical or biological performance claim.

安全检索证据图时间建模修复机制

Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。