Athena: Vulnerability-Affected Library Identification via Knowledge Graph Completion

arXiv:2609.01187 · cs.SE, cs.AI, cs.CR · Submitted 2026-09-01 · Read on arXiv

cs.SE, cs.AI, cs.CR

Submitted: 2026-09-01

Updated: 2026-09-01

Code: https://github.com/thanhlecongg/Athena

Terminology

• Knowledge Graph — 38× in this paper · explained in 7 episodes
• Ablation — 11× in this paper · explained in 1 episode
• Embeddings — 8× in this paper · explained in 2 episodes
• Knowledge Graph Completion — 7× in this paper
• Benchmark — 5× in this paper · explained in 2 episodes
• Core — 4× in this paper · explained in 2 episodes
• Fine-Tuning — 4× in this paper · explained in 5 episodes
• Knowledge graphs — 4× in this paper · explained in 2 episodes
• Contrastive Learning — 3× in this paper · explained in 5 episodes
• Representation Learning — 3× in this paper · explained in 2 episodes
• Ablation Studies — 2× in this paper · explained in 1 episode
• Ablation study — 2× in this paper · explained in 1 episode
• Knowledge Graph Completion (KGC) — 2× in this paper · explained in 2 episodes
• National Vulnerability Database — 2× in this paper
• RAG — 2× in this paper · explained in 3 episodes
• Robustness — 2× in this paper · explained in 5 episodes
• Abstraction — 1× in this paper · explained in 1 episode
• Accuracy — 1× in this paper · explained in 1 episode
• Adaptation — 1× in this paper · explained in 1 episode
• Alert Fatigue — 1× in this paper · explained in 1 episode
• Clustering — 1× in this paper · explained in 2 episodes
• Cosine Similarity — 1× in this paper · explained in 3 episodes
• External Validation — 1× in this paper · explained in 2 episodes
• F1 Score — 1× in this paper · explained in 3 episodes
• Generalizability — 1× in this paper · explained in 6 episodes
• Graph Construction — 1× in this paper · explained in 3 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• Instruction Tuning — 1× in this paper · explained in 2 episodes
• LLM-as-a-Judge — 1× in this paper · explained in 3 episodes
• Retrieval-Augmented Generation (RAG) — 1× in this paper · explained in 16 episodes
• Software Composition Analysis — 1× in this paper
• Transformer — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• PatchSeeker: Mapping NVD Records to their Vulnerability-fixing Commits with LLM Generated Commits and Embeddings
• KG-BERT: BERT for Knowledge Graph Completion
• Llama 2: Open Foundation and Fine-Tuned Chat Models

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties