kin

コードのための新しい基盤。 Kinは、人とAIエージェントのためのグラフネイティブなコードリポジトリです。 ソースコード、記録されたコードの関係性、バージョン管理された履歴をリポジトリの状態として保存します。グラフはリポジトリのモデルそのものであり、別のリポジトリの隣で維持される検索インデックスではありません。 関数、型、そしてそれらの間の関係性は、コミット、ブランチ、マージできるデータです。正確なソースはバイト単位で保持され、ファイルシステム投影によって対応ツールは通常のファイルを使い続けられます。 パブリックベータ。...

checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

LCSAJdump

LCSAJdump 自動ガジェット発見のためのユニバーサルグラフベースフレームワーク LCSAJdump は、Return-Oriented Programming ROP および Jump-Oriented Programming JOP のガジェットを発見するために設計された静的解析フレームワークです。従来のスキャナーとは異なり、LCSAJdump はアーキテクチャ非依存 であり、グラフベースのアプローチを採用して、一般的な線形ツールでは見えない脆弱性を明らかにします。 なぜ LCSAJdump なのか？ 一般的な ROP...

apparatus

ASTo - Apparatus Software Tool アーカイブのお知らせ - 研究学位取得後、リポジトリはアーカイブされました。 ASToは私の研究に大きく貢献しました。より良いものにするために協力してくださった皆様に感謝申し上げます。 しかし、これで終わりではありません。アクティブな開発は CyberLens's リポジトリで継続されます。問題や機能リクエストはそちらにお寄せください。 IoTネットワークのセキュリティ分析および可視化ツール...

grapl

Grapl Grapl は、インシデントレスポンスエンジニアが構築したグラフベースのSIEMプラットフォームです。 お知らせ Grapl は企業としての活動を停止しました。そのため、このコードはもはや積極的に開発されていませんが、アーカイブされた状態で利用可能です。 詳細 Grapl は、その中核にグラフデータ構造を活用することで、データを効率的にクエリして接続し、複雑な攻撃者の振る舞いを検出のためにモデル化し、疑わしい振る舞いを容易に調査して進行中の侵入の全容を把握できるようにします。 Grapl の詳細な概要については、こちらをお読みください。 基本的に、Grapl...

BloodHound v9.7.1-rc1

BloodHound is a monolithic web application composed of an embedded React frontend with Sigma.js and a Go based REST API backend. It is deployed with a Postgresql application database and a Neo4j graph database, and is fed by the SharpHound and AzureHound data collectors. BloodHound leverages grap...

[SECURITY] Fedora 45 Update: gegl04-0.4.70-5.fc45

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

[SECURITY] Fedora 44 Update: gegl04-0.4.70-5.fc44

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

kin v0.6.4

A new foundation for code. Kin is a graph-native code repository for people and AI agents. It stores source, recorded code relationships, and versioned history as repository state. The graph is the repository model, not a search index maintained beside another repository. Functions, types, and th...

CVE-2026-59245 Apache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)

In the Apache Airflow FAB auth manager, a DAG whose dagid is DAGs collided with the global all-DAGs permission resource name produced by resourcename, so a user granted per-DAG accesscontrol on that one DAG was silently granted the global all-DAGs permission privilege escalation. The escalation...

Disentangling Adversarial Prompts: A Semantic-Graph Defense for Robust LLM Security

Large Language Models LLMs are increasingly vulnerable to adversarial prompts that exploit semantic ambiguities to bypass safety mechanisms, resulting in harmful or inappropriate outputs. Such attacks, including jailbreaking and prompt injection, pose significant risks to the integrity and...

PySpector 安全漏洞

PySpector is a high-performance Python static security analysis framework based on graphs, developed by Tommaso Bona. Versions of PySpector prior to 0.1.8 contained security vulnerabilities. These vulnerabilities stemmed from an incomplete blacklist of plugin security validators, which could allo...

[SECURITY] Fedora 44 Update: gegl04-0.4.70-2.fc44

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

HAL -- an Open-Source Framework for Gate-Level Netlist Analysis

HAL is an open-source framework for gate-level netlist analysis, an integral step in hardware reverse engineering. It provides analysts with an interactive GUI, an extensible plugin system, and APIs in both C++ and Python for rapid prototyping and automation. In addition, HAL ships with plugins f...

Changing the physics of cyber defense

The Deputy CISO blog series is whereMicrosoft Deputy Chief Information Security Officers CISOs share their thoughts on what is most important in their respective domains. In this series, you will get practical advice, tactics to start and stop deploying, forward-looking commentary on where the...

NatGVD: Natural Adversarial Example Attack Towards Graph-Based Vulnerability Detection

Graph-based models learn rich code graph structural information and present superior performance on various code analysis tasks. However, the robustness of these models against adversarial example attacks in the context of vulnerability detection remains an open question. This paper proposes...

State-Of-The-Art in Software Security Visualization: a Systematic Review

Software security visualization is an interdisciplinary field that combines the technical complexity of cybersecurity, including threat intelligence and compliance monitoring, with visual analytics, transforming complex security data into easily digestible visual formats. As software systems get...

Automated Cyber Defense with Generalizable Graph-Based Reinforcement Learning Agents

Deep reinforcement learning RL is emerging as a viable strategy for automated cyber defense ACD. The traditional RL approach represents networks as a list of computers in various states of safety or threat. Unfortunately, these models are forced to overfit to specific network topologies, renderin...

A Graph-Based Approach to Alert Contextualisation in Security Operations Centres

Interpreting the massive volume of security alerts is a significant challenge in Security Operations Centres SOCs. Effective contextualisation is important, enabling quick distinction between genuine threats and benign activity to prioritise what needs further analysis.This paper proposes a...

KillChainGraph: ML Framework for Predicting and Mapping ATT&CK Techniques

The escalating complexity and volume of cyberattacks demand proactive detection strategies that go beyond traditional rule-based systems. This paper presents a phase-aware, multi-model machine learning framework that emulates adversarial behavior across the seven phases of the Cyber Kill Chain...