Text Classification
Transformers
Safetensors
English
roberta
security
vulnerability
cve
mitre-attack
cti
multi-label-classification
Generated from Trainer
Eval Results (legacy)
text-embeddings-inference
Instructions to use CIRCL/vulnerability-attack-technique-classification-roberta-base with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- Transformers
How to use CIRCL/vulnerability-attack-technique-classification-roberta-base with Transformers:
# Use a pipeline as a high-level helper from transformers import pipeline pipe = pipeline("text-classification", model="CIRCL/vulnerability-attack-technique-classification-roberta-base")# Load model directly from transformers import AutoTokenizer, AutoModelForSequenceClassification tokenizer = AutoTokenizer.from_pretrained("CIRCL/vulnerability-attack-technique-classification-roberta-base") model = AutoModelForSequenceClassification.from_pretrained("CIRCL/vulnerability-attack-technique-classification-roberta-base", device_map="auto") - Notebooks
- Google Colab
- Kaggle
Update citation: paper published on arXiv (2607.25572)
Browse files
README.md
CHANGED
|
@@ -63,7 +63,8 @@ vulnerability page has an ATT&CK tab with the model's suggestions (example:
|
|
| 63 |
The methodology, evaluation protocol, and the negative result on
|
| 64 |
LLM-assisted label expansion are described in the paper
|
| 65 |
[*Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and
|
| 66 |
-
the Limits of LLM-Assisted Label Expansion*](https://
|
|
|
|
| 67 |
|
| 68 |
DOI: [10.57967/hf/9623](https://doi.org/10.57967/hf/9623)
|
| 69 |
|
|
@@ -173,7 +174,7 @@ zero-shot embedding-similarity baseline reported in the paper. Across five
|
|
| 173 |
seeds under the identical protocol, the numbers of record are recall@5
|
| 174 |
0.673 ± 0.019, recall@3 0.536 ± 0.032, micro-F1 0.410 ± 0.006, macro-F1
|
| 175 |
0.177 ± 0.014. The complete trainer logs are published in the
|
| 176 |
-
[paper repository](https://github.com/vulnerability-lookup/cve-attack-mapping-paper/tree/
|
| 177 |
|
| 178 |
## Training procedure
|
| 179 |
|
|
@@ -255,17 +256,20 @@ The following hyperparameters were used during training:
|
|
| 255 |
| LLM expansion dataset (negative result) | [CIRCL/vulnerability-attack-techniques-llm-scaling](https://huggingface.co/datasets/CIRCL/vulnerability-attack-techniques-llm-scaling) | [10.57967/hf/9622](https://doi.org/10.57967/hf/9622) |
|
| 256 |
| LLM-expanded comparison model | [CIRCL/vulnerability-attack-technique-classification-roberta-base-llm-expanded](https://huggingface.co/CIRCL/vulnerability-attack-technique-classification-roberta-base-llm-expanded) | [10.57967/hf/9624](https://doi.org/10.57967/hf/9624) |
|
| 257 |
| Code | [vulnerability-lookup/VulnTrain](https://github.com/vulnerability-lookup/VulnTrain) | — |
|
| 258 |
-
| Paper
|
|
|
|
| 259 |
|
| 260 |
## Citation
|
| 261 |
|
| 262 |
```bibtex
|
| 263 |
-
@misc{
|
| 264 |
-
|
| 265 |
-
|
| 266 |
-
|
| 267 |
-
|
| 268 |
-
|
|
|
|
|
|
|
| 269 |
}
|
| 270 |
```
|
| 271 |
|
|
|
|
| 63 |
The methodology, evaluation protocol, and the negative result on
|
| 64 |
LLM-assisted label expansion are described in the paper
|
| 65 |
[*Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and
|
| 66 |
+
the Limits of LLM-Assisted Label Expansion*](https://arxiv.org/abs/2607.25572)
|
| 67 |
+
(arXiv:2607.25572).
|
| 68 |
|
| 69 |
DOI: [10.57967/hf/9623](https://doi.org/10.57967/hf/9623)
|
| 70 |
|
|
|
|
| 174 |
seeds under the identical protocol, the numbers of record are recall@5
|
| 175 |
0.673 ± 0.019, recall@3 0.536 ± 0.032, micro-F1 0.410 ± 0.006, macro-F1
|
| 176 |
0.177 ± 0.014. The complete trainer logs are published in the
|
| 177 |
+
[paper repository](https://github.com/vulnerability-lookup/cve-attack-mapping-paper/tree/master/trainer-logs).
|
| 178 |
|
| 179 |
## Training procedure
|
| 180 |
|
|
|
|
| 256 |
| LLM expansion dataset (negative result) | [CIRCL/vulnerability-attack-techniques-llm-scaling](https://huggingface.co/datasets/CIRCL/vulnerability-attack-techniques-llm-scaling) | [10.57967/hf/9622](https://doi.org/10.57967/hf/9622) |
|
| 257 |
| LLM-expanded comparison model | [CIRCL/vulnerability-attack-technique-classification-roberta-base-llm-expanded](https://huggingface.co/CIRCL/vulnerability-attack-technique-classification-roberta-base-llm-expanded) | [10.57967/hf/9624](https://doi.org/10.57967/hf/9624) |
|
| 258 |
| Code | [vulnerability-lookup/VulnTrain](https://github.com/vulnerability-lookup/VulnTrain) | — |
|
| 259 |
+
| Paper | [arXiv:2607.25572](https://arxiv.org/abs/2607.25572) | — |
|
| 260 |
+
| Paper LaTeX source + trainer logs | [vulnerability-lookup/cve-attack-mapping-paper](https://github.com/vulnerability-lookup/cve-attack-mapping-paper) | — |
|
| 261 |
|
| 262 |
## Citation
|
| 263 |
|
| 264 |
```bibtex
|
| 265 |
+
@misc{bonhomme2026mappingcvesmitreattck,
|
| 266 |
+
title={Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion},
|
| 267 |
+
author={Cédric Bonhomme and Alexandre Dulaunoy},
|
| 268 |
+
year={2026},
|
| 269 |
+
eprint={2607.25572},
|
| 270 |
+
archivePrefix={arXiv},
|
| 271 |
+
primaryClass={cs.CR},
|
| 272 |
+
url={https://arxiv.org/abs/2607.25572},
|
| 273 |
}
|
| 274 |
```
|
| 275 |
|