Open Daily: 10am - 10pm | Alley door pickup 10am - 7pm 3038 Hennepin Ave Minneapolis, MN
612-822-4611

  • Open Daily: 10am - 10pm
    Alley-side Pickup: 10am - 7pm

    3038 Hennepin Ave Minneapolis, MN
    612-822-4611

Open Daily: 10am - 10pm | Alley-side Pickup: 10am - 7pm
3038 Hennepin Ave Minneapolis, MN
612-822-4611
Use of Gnn to Automate Ssdlc Alert Dismissal Review Process: Study on the Usage & Efficacy of Novel Deep Learning Techniques in Appsec

Use of Gnn to Automate Ssdlc Alert Dismissal Review Process: Study on the Usage & Efficacy of Novel Deep Learning Techniques in Appsec

Raha, Devjyoti

Paperback

PhysicsComputer Security

ISBN10: 3658514957
ISBN13: 9783658514952
Publisher: Springer Vieweg
Published: May 22 2026
Pages: 123
Weight: 0.42
Height: 0.32 Width: 5.91 Depth: 8.26
Language: English

The work grew out of a very practical problem: the AppSec team was drowning in security scanning alerts but still occasionally missed real issues that had been dismissed as false positives. Wanted to present a way not just to tune individual tools, but to look across CodeQL, OWASP ZAP, GHAS secret scanning, and other scanners and understand where the triage process itself was failing. That led to the idea of treating the entire alert history as a graph, where alerts, code files, services, dependencies, users, and incidents are all connected nodes linked by data flows, temporal relationships, and shared context. From there, the team designed a JSON schema to normalize alerts from different tools, built a heterogeneous graph on top of that data, and implemented a graph neural network to learn patterns that distinguish correctly closed alerts from those that later turned out to be genuine issues.

Also in

Physics

View All