cedricbonhomme commited on
Commit
2390157
·
verified ·
1 Parent(s): fde1107

Update README.md

Browse files
Files changed (1) hide show
  1. README.md +63 -28
README.md CHANGED
@@ -1,50 +1,68 @@
1
  ---
2
  library_name: transformers
3
- license: mit
4
  base_model: roberta-base
5
- tags:
6
- - generated_from_trainer
7
  metrics:
8
  - accuracy
 
 
 
 
 
 
9
  model-index:
10
  - name: vulnerability-severity-classification-roberta-base
11
  results: []
 
 
12
  ---
13
 
14
- <!-- This model card has been generated automatically according to the information the Trainer had access to. You
15
- should probably proofread and complete it, then remove this comment. -->
16
 
17
- # vulnerability-severity-classification-roberta-base
 
 
 
 
 
 
 
 
 
 
18
 
19
- This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on an unknown dataset.
20
- It achieves the following results on the evaluation set:
21
- - Loss: 2.0430
22
- - Accuracy: 0.8132
23
- - F1 Macro: 0.7438
24
- - Low Precision: 0.6379
25
- - Low Recall: 0.5097
26
- - Low F1: 0.5666
27
- - Medium Precision: 0.8494
28
- - Medium Recall: 0.8632
29
- - Medium F1: 0.8562
30
- - High Precision: 0.8038
31
- - High Recall: 0.8062
32
- - High F1: 0.8050
33
- - Critical Precision: 0.7484
34
- - Critical Recall: 0.7460
35
- - Critical F1: 0.7472
36
 
37
  ## Model description
38
 
39
- More information needed
 
 
 
 
 
 
 
 
 
 
 
 
 
40
 
41
- ## Intended uses & limitations
 
 
42
 
43
- More information needed
 
 
 
44
 
45
- ## Training and evaluation data
 
 
 
 
46
 
47
- More information needed
48
 
49
  ## Training procedure
50
 
@@ -59,6 +77,23 @@ The following hyperparameters were used during training:
59
  - lr_scheduler_type: linear
60
  - num_epochs: 5
61
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
62
  ### Training results
63
 
64
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
 
1
  ---
2
  library_name: transformers
3
+ license: cc-by-4.0
4
  base_model: roberta-base
 
 
5
  metrics:
6
  - accuracy
7
+ tags:
8
+ - generated_from_trainer
9
+ - text-classification
10
+ - classification
11
+ - nlp
12
+ - vulnerability
13
  model-index:
14
  - name: vulnerability-severity-classification-roberta-base
15
  results: []
16
+ datasets:
17
+ - CIRCL/vulnerability-scores
18
  ---
19
 
 
 
20
 
21
+ # VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification
22
+
23
+ # Severity classification
24
+
25
+ This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on the dataset [CIRCL/vulnerability-scores](https://huggingface.co/datasets/CIRCL/vulnerability-scores).
26
+
27
+ The model was presented in the paper [VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification](https://huggingface.co/papers/2507.03607) [[arXiv](https://arxiv.org/abs/2507.03607)].
28
+
29
+ **Abstract:** VLAI is a transformer-based model that predicts software vulnerability severity levels directly from text descriptions. Built on RoBERTa, VLAI is fine-tuned on over 600,000 real-world vulnerabilities and achieves over 82% accuracy in predicting severity categories, enabling faster and more consistent triage ahead of manual CVSS scoring. The model and dataset are open-source and integrated into the Vulnerability-Lookup service.
30
+
31
+ You can read [this page](https://www.vulnerability-lookup.org/user-manual/ai/) for more information.
32
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
33
 
34
  ## Model description
35
 
36
+ It is a classification model and is aimed to assist in classifying vulnerabilities by severity based on their descriptions.
37
+
38
+ ## How to get started with the model
39
+
40
+ ```python
41
+ from transformers import AutoModelForSequenceClassification, AutoTokenizer
42
+ import torch
43
+
44
+ labels = ["low", "medium", "high", "critical"]
45
+
46
+ model_name = "CIRCL/vulnerability-severity-classification-roberta-base"
47
+ tokenizer = AutoTokenizer.from_pretrained(model_name)
48
+ model = AutoModelForSequenceClassification.from_pretrained(model_name)
49
+ model.eval()
50
 
51
+ test_description = "SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries \
52
+ that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system."
53
+ inputs = tokenizer(test_description, return_tensors="pt", truncation=True, padding=True)
54
 
55
+ # Run inference
56
+ with torch.no_grad():
57
+ outputs = model(**inputs)
58
+ predictions = torch.nn.functional.softmax(outputs.logits, dim=-1)
59
 
60
+ # Print results
61
+ print("Predictions:", predictions)
62
+ predicted_class = torch.argmax(predictions, dim=-1).item()
63
+ print("Predicted severity:", labels[predicted_class])
64
+ ```
65
 
 
66
 
67
  ## Training procedure
68
 
 
77
  - lr_scheduler_type: linear
78
  - num_epochs: 5
79
 
80
+ It achieves the following results on the evaluation set:
81
+ - Loss: 2.0430
82
+ - Accuracy: 0.8132
83
+ - F1 Macro: 0.7438
84
+ - Low Precision: 0.6379
85
+ - Low Recall: 0.5097
86
+ - Low F1: 0.5666
87
+ - Medium Precision: 0.8494
88
+ - Medium Recall: 0.8632
89
+ - Medium F1: 0.8562
90
+ - High Precision: 0.8038
91
+ - High Recall: 0.8062
92
+ - High F1: 0.8050
93
+ - Critical Precision: 0.7484
94
+ - Critical Recall: 0.7460
95
+ - Critical F1: 0.7472
96
+
97
  ### Training results
98
 
99
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |