Undergraduate Thesis Uses Paraconsistent Logic to Eliminate AppSec False Positives
A software engineering undergraduate developed a security alert triage system using Two-valued Paraconsistent Annotated Logic (LPA2v) to address alert fatigue in application security pipelines. Instead of forcing contradictory scanner outputs into a binary verdict, the system assigns each finding two evidence degrees — favorable and unfavorable — allowing genuine contradictions to be flagged separately for human review. Five domain-specific neurons process signals from SAST, SCA, and DAST tools, feeding into a master neuron that separately aggregates consensus severity and contradiction levels. Tested against 3,005 synthetic events, the LPA2v cluster achieved 100% precision and zero false positives, compared to 8% precision and 2,493 false positives from a plain threshold approach. The trade-off was a recall drop to 65.6%, with missed detections concentrated in single-source evidence scenarios and cases affected by the system's temporal persistence window.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in