Intelligent tracing and automatic detection method and system for vulnerability of power information system based on LLM

Abstract

This invention discloses an intelligent vulnerability tracing and automated detection method and system for power information systems based on LLM (Limited Language Management), belonging to the field of artificial intelligence technology. Step 1: Obtain the software project in the power information system, which includes source code, package management files, and developer documentation. Step 2: Perform structured analysis on the source code and developer documentation to obtain corresponding code structure nodes and edges, as well as document structure nodes and edges. Step 3: Merge the code structure nodes and edges with the document structure nodes and edges to obtain a project-level node set and edge set. Step 4: Parse the package management file to obtain a dependency node set and a dependency edge set. This method can utilize natural language descriptions in the documentation to aid in understanding the code intent, and combined with third-party dependency relationships, effectively solves the problem of missed detections due to lack of context in complex power information systems, greatly improving the accuracy of vulnerability location.

Images