AI KnowledgeIntermediateUpcoming
SECURE CHAIN: Vulnerability Detection Tool for Software Dependencies
The Challenge
Prototype a vulnerability detection tool that analyzes the software dependencies of a given software product. Using open-source library data and CVE (or other security) databases, the tool identifies vulnerabilities present in those dependencies. This challenge focuses on basic knowledge-graph concepts and triplet extraction, along with simple text parsing
About This Challenge
This challenge involves building a tool that can automatically detect vulnerabilities in a software product’s dependencies. The prototype should analyze dependency information, connect it with open-source library data, and check for known vulnerabilities using CVE data or other security databases. Participants will apply foundational knowledge-graph concepts by extracting triplets from the data, allowing relationships between dependencies and vulnerabilities to be represented clearly. The task also includes text parsing to process dependency files and security records. This is the easiest difficulty level and is intended to help participants understand how KGs can be used for vulnerability analysis.
