AI-Based Cross-Layer Vulnerability Management for Cloud-Native Systems

View at publisher
Authors: Oleh Polishchuk, Kateryna Babii
Cited by: 0
References: 6

Abstract

Cloud-native systems introduce complex and dynamic attack surfaces driven by microservice architectures, identity-centric access models, and continuously evolving runtime behavior. Traditional vulnerability management approaches rely on static severity scoring and siloed security signals, resulting in excessive alert noise and limited insight into real-world exploitability.This paper presents a novel AI-driven cross-layer vulnerability management framework that models exploitation risk as an evolving behavioral process rather than a static property of individual vulnerabilities. The proposed approach represents cloud-native environments as temporal cross-layer graphs and applies self-supervised sequence learning, graph-based risk propagation, and anomaly detection to identify multi-stage exploitation paths spanning application, identity, runtime, and endpoint layers.Unlike conventional prioritization techniques, the framework learns how risk propagates across layers over time and adapts to previously unseen attack strategies without reliance on labeled exploit data. A simulated Kubernetes-based case study demonstrates substantial alert noise reduction while preserving exploitation-relevant signals, outperforming severity-based and rule-based correlation approaches.

Fields of Study & Subjects

Web Application Security Vulnerabilities Network Security and Intrusion Detection Information and Cyber Security

Publication details

Journal / source
IEEE International Conference on AI in Cybersecurity (ICAIC)
Pages
1–3
Publication date
18 February 2026
Language
EN