AI RESEARCH
RuleForge: Automated Generation and Validation for Web Vulnerability Detection at Scale
arXiv CS.LG
•
ArXi:2604.01977v1 Announce Type: cross Security teams face a challenge: the volume of newly disclosed Common Vulnerabilities and Exposures (CVEs) far exceeds the capacity to manually develop detection mechanisms. In 2025, the National Vulnerability Database published over 48,000 new vulnerabilities, motivating the need for automation. We present RuleForge, an AWS internal system that automatically generates detection rules--JSON-based patterns that identify malicious HTTP requests exploiting specific vulnerabilities--from structured Nuclei templates describing CVE details.