The application discloses a kind of multi-
modal network
vulnerability false alarm static analysis methods based on large
language model, comprising the following steps: feature
library construction, based on
vulnerability standard data is generated with the
feature code fragment of matching
vulnerability description using large
language model, and after multidimensional
score screening, vulnerability feature
library is constructed;Index construction,
semantic clustering is carried out to
feature code fragment and constructs hierarchical retrieval index, and is associated with vulnerability
knowledge graph;Detection, the semantic vectorization
processing is carried out to the code to be detected, is matched in hierarchical retrieval index based on
semantic vector, recall normalized vulnerability knowledge according to matching result, the recalled vulnerability knowledge is input into large
language model with the code to be detected and carries out
vulnerability detection.The application is organically fused by
feature code generation, hierarchical index construction and adaptive retrieval reasoning, solves the problem that vulnerability feature is dispersed, homologous sample is difficult to aggregate, and retrieval link information is insufficiently associated, significantly improves the accuracy and efficiency of
vulnerability detection.