SEEK: Agentic Knowledge Graph Retrieval for Secure Code Generation
[Kryptografia i bezpieczeństwo] Autorzy: Varun Gadey, Markus Tohn, Lichao Wu i 2 więcej
Large Language Models (LLMs) can generate functionally correct code while introducing exploitable security weaknesses, particularly when developers specify functionality without explicit security requirements. Recent state-of-the-art approaches mitigate this problem using external security knowledge, but largely rely on flat similarity-based retrieval over independent artifacts, making it difficult to infer the relevant vulnerability space and retrieve targeted knowledge when direct matches are unavailable. We propose SEEK, an agentic Graph RAG framework for secure code generation that constructs a security knowledge graph using the Common Weakness Enumeration (CWE) taxonomy as its structural backbone and injects it with curated real-world CVE vulnerability-fix instances. At inference time, a Planner Agent predicts potential CWE weaknesses associated with the developer query, which guid…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo