{"id":"https://openalex.org/W7161679604","doi":"https://doi.org/10.48550/arxiv.2605.16714","title":"GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction","display_name":"GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction","publication_year":2026,"publication_date":"2026-05-15","ids":{"openalex":"https://openalex.org/W7161679604","doi":"https://doi.org/10.48550/arxiv.2605.16714"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.16714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.16714","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136504961","display_name":"Liangyi Huang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Huang, Liangyi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136462473","display_name":"Zichen Liu","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Zichen","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136500985","display_name":"Fei Shao","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Shao, Fei","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136479766","display_name":"Shang Ma","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ma, Shang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136496746","display_name":"Mengshi Zhang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Zhang, Mengshi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136481701","display_name":"Zihao Chen","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chen, Zihao","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136489425","display_name":"Yanfang Ye","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ye, Yanfang","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5012621594","display_name":"Xusheng Xiao","orcid":"https://orcid.org/0000-0003-4797-4294"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Xiao, Xusheng","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.6082000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.6082000136375427,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.08839999884366989,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.049800001084804535,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/grid","display_name":"Grid","score":0.5206000208854675},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.5182999968528748},{"id":"https://openalex.org/keywords/knowledge-graph","display_name":"Knowledge graph","score":0.5102999806404114},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.4977000057697296},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.49729999899864197},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.4645000100135803},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.44530001282691956},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.41359999775886536},{"id":"https://openalex.org/keywords/knowledge-representation-and-reasoning","display_name":"Knowledge representation and reasoning","score":0.39980000257492065}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7476999759674072},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.5206000208854675},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.5182999968528748},{"id":"https://openalex.org/C2987255567","wikidata":"https://www.wikidata.org/wiki/Q33002955","display_name":"Knowledge graph","level":2,"score":0.5102999806404114},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.4977000057697296},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.49729999899864197},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.48989999294281006},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.4645000100135803},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.44530001282691956},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.42089998722076416},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.41359999775886536},{"id":"https://openalex.org/C161301231","wikidata":"https://www.wikidata.org/wiki/Q3478658","display_name":"Knowledge representation and reasoning","level":2,"score":0.39980000257492065},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.39489999413490295},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.3874000012874603},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.30869999527931213},{"id":"https://openalex.org/C153604712","wikidata":"https://www.wikidata.org/wiki/Q7310755","display_name":"Relationship extraction","level":3,"score":0.30329999327659607},{"id":"https://openalex.org/C121329065","wikidata":"https://www.wikidata.org/wiki/Q185612","display_name":"Regular expression","level":2,"score":0.30000001192092896},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.29600000381469727},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.273499995470047},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.27090001106262207},{"id":"https://openalex.org/C155846161","wikidata":"https://www.wikidata.org/wiki/Q1143367","display_name":"Graphical model","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.26600000262260437},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.263700008392334},{"id":"https://openalex.org/C120567893","wikidata":"https://www.wikidata.org/wiki/Q1582085","display_name":"Knowledge extraction","level":2,"score":0.2628999948501587},{"id":"https://openalex.org/C4554734","wikidata":"https://www.wikidata.org/wiki/Q593744","display_name":"Knowledge base","level":2,"score":0.26030001044273376},{"id":"https://openalex.org/C121822524","wikidata":"https://www.wikidata.org/wiki/Q5157582","display_name":"Computer security model","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.16714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.16714","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.16714","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Security":[0],"knowledge":[1,54],"graphs":[2],"can":[3,203],"provide":[4],"computable":[5],"external":[6],"memory":[7],"for":[8,51],"security":[9,52],"agents,":[10],"but":[11],"constructing":[12],"them":[13],"from":[14,62,140],"long-form":[15],"cyber":[16],"threat":[17],"intelligence":[18],"(CTI)":[19],"remains":[20],"difficult:":[21],"LLMs":[22],"often":[23],"lack":[24],"grounded":[25],"security-domain":[26,60],"knowledge,":[27],"and":[28,73,126,145,164,173,181,193,208,219,226],"end-to-end":[29,49],"document-to-graph":[30,80],"training":[31],"is":[32],"hard":[33],"to":[34],"supervise":[35],"with":[36,91,107,132,151,177],"cheap,":[37],"stable":[38,98],"rewards.":[39,135],"We":[40],"present":[41],"GRID":[42,57,154],"(Graph":[43],"Representation":[44],"of":[45],"Intelligence":[46],"Data),":[47],"an":[48,108],"framework":[50],"text":[53,75],"graph":[55,71,105],"construction.":[56],"first":[58],"builds":[59],"supervision":[61,113],"CTI":[63,138],"articles":[64,139],"by":[65],"creating":[66],"traceable":[67],"article-graph":[68],"alignments":[69],"through":[70],"extraction":[72,155],"knowledge-graph-conditioned":[74],"revision.":[76],"It":[77],"then":[78],"turns":[79],"learning":[81],"into":[82],"a":[83,121,127],"scripted":[84],"task":[85],"bank":[86],"combining":[87],"four-option":[88],"multi-select":[89],"questions":[90],"triple-level":[92],"regex":[93],"matching":[94],"targets,":[95],"yielding":[96],"more":[97],"task-specific":[99],"rewards":[100,202],"than":[101],"repeatedly":[102],"scoring":[103],"full":[104],"outputs":[106],"LLM":[109],"judge.":[110],"Using":[111],"this":[112],"pipeline,":[114],"we":[115],"train":[116],"two":[117],"Qwen3-4B-Instruct-2507-based":[118],"4B":[119],"extractors:":[120],"primary":[122],"Task-bank":[123,148],"Reward":[124,130,149,186,225],"model":[125,131,150,187],"secondary":[128],"End2End":[129,185,216,227],"LLM-as-judge":[133,217],"precision/recall":[134],"On":[136],"249":[137],"GRID,":[141],"CASIE,":[142],"CTINexus,":[143],"MalKG,":[144],"SecureNLP,":[146],"the":[147,152,169],"ontology-guided":[153],"pipeline":[156],"reaches":[157,188],"84.62%":[158],"source-averaged":[159,162,171],"precision,":[160,190],"64.91%":[161],"recall,":[163,192],"68.53%":[165],"Avg":[166,175,195],"F1,":[167],"achieving":[168],"best":[170],"recall":[172],"near-top":[174],"F1":[176],"lower":[178],"token":[179],"usage":[180],"deployment":[182],"cost.":[183],"The":[184],"76.91%":[189],"53.85%":[191],"58.06%":[194],"F1.":[196],"Further":[197],"analyses":[198],"show":[199],"that":[200],"task-bank":[201],"be":[204],"built":[205],"once":[206],"offline":[207],"reused":[209],"across":[210],"later":[211],"post-training":[212],"runs,":[213],"outperforming":[214],"online":[215],"reward":[218],"weaker":[220],"alternatives":[221],"such":[222],"as":[223],"Choice-only":[224],"SFT":[228],"without":[229],"RL.":[230]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-20T00:00:00"}