Security Node Graph ยท Expert System Ontology View

5-layer security graph: Code โ†’ Exposure โ†’ Weakness โ†’ Vulnerability โ†’ Control Gap

Security graph ยท rag-chatbot

L0 ยท CodeL1 ยท ExposureL2 ยท WeaknessL3 ยท VulnerabilityL4 ยท Control GapPOST /chatrag_chat.py:42embed()embeddings.py:18User inputunvalidatedVector DB querychroma:8000LLM API callopenai gpt-4oLLM01Prompt InjectionLLM06Sensitive Info Disc.CVE-2024-35195requests 2.31CVE-2023-50782cryptography 41No input filter/chat endpointNo auth on /admin/admin/logs unprotected
Severity:criticalhighmediumlowEdges:triggersexposesexploitsmitigatescauses

Node detail

Click a node in the graph to see details

Security Gap Summary

Total Nodes

11

Critical Nodes

6

OWASP Fails

2

Control Gaps

2

Attack paths identified3

Node count by layer

L0 ยท Code
2
L1 ยท Exposure
3
L2 ยท Weakness
2
L3 ยท Vulnerability
2
L4 ยท Control Gap
2

5-Layer Security Ontology

L0Code

Source code changes, commits, and modified endpoints that enter the pipeline

POST /chatLLM callcommit abc1234
L1Exposure

Attack surface elements โ€” APIs, interfaces, and data flows exposed by the code

API endpointuser inputtool invocation
L2Weakness

OWASP LLM Top 10 weaknesses and CWE-mapped software flaws present in the code

LLM01LLM06CWE-89CWE-200
L3Vulnerability

Exploitable CVEs and confirmed vulnerabilities in dependencies or configuration

CVE-2024-35195CVE-2023-50782misconfigured TLS
L4Control Gap

Missing or failing security controls โ€” where the weakness goes unmitigated

missing authno rate-limitno output filteraudit gap

Edge Types

triggers

Code change triggers an exposure surface

exposes

Exposure reveals a weakness or flaw

causes

Weakness causes a specific vulnerability

exploits

Vulnerability is exploitable via attack path

mitigates

Control would mitigate the risk (gap = absent)