cedricbonhomme commited on
Commit
34c4352
·
verified ·
1 Parent(s): 989f390

End of training

Browse files
Files changed (5) hide show
  1. README.md +35 -69
  2. config.json +1 -1
  3. model.safetensors +2 -2
  4. tokenizer_config.json +1 -0
  5. training_args.bin +2 -2
README.md CHANGED
@@ -1,67 +1,50 @@
1
  ---
2
  library_name: transformers
3
- license: cc-by-4.0
4
  base_model: roberta-base
5
- metrics:
6
- - accuracy
7
  tags:
8
  - generated_from_trainer
9
- - text-classification
10
- - classification
11
- - nlp
12
- - vulnerability
13
  model-index:
14
  - name: vulnerability-severity-classification-roberta-base
15
  results: []
16
- datasets:
17
- - CIRCL/vulnerability-scores
18
  ---
19
 
 
 
20
 
21
- # VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification
22
-
23
- # Severity classification
24
-
25
- This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on the dataset [CIRCL/vulnerability-scores](https://huggingface.co/datasets/CIRCL/vulnerability-scores).
26
-
27
- The model was presented in the paper [VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification](https://huggingface.co/papers/2507.03607) [[arXiv](https://arxiv.org/abs/2507.03607)].
28
-
29
- **Abstract:** VLAI is a transformer-based model that predicts software vulnerability severity levels directly from text descriptions. Built on RoBERTa, VLAI is fine-tuned on over 600,000 real-world vulnerabilities and achieves over 82% accuracy in predicting severity categories, enabling faster and more consistent triage ahead of manual CVSS scoring. The model and dataset are open-source and integrated into the Vulnerability-Lookup service.
30
-
31
- You can read [this page](https://www.vulnerability-lookup.org/user-manual/ai/) for more information.
32
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
33
 
34
  ## Model description
35
 
36
- It is a classification model and is aimed to assist in classifying vulnerabilities by severity based on their descriptions.
37
-
38
- ## How to get started with the model
39
-
40
- ```python
41
- from transformers import AutoModelForSequenceClassification, AutoTokenizer
42
- import torch
43
 
44
- labels = ["low", "medium", "high", "critical"]
45
 
46
- model_name = "CIRCL/vulnerability-severity-classification-roberta-base"
47
- tokenizer = AutoTokenizer.from_pretrained(model_name)
48
- model = AutoModelForSequenceClassification.from_pretrained(model_name)
49
- model.eval()
50
 
51
- test_description = "SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries \
52
- that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system."
53
- inputs = tokenizer(test_description, return_tensors="pt", truncation=True, padding=True)
54
 
55
- # Run inference
56
- with torch.no_grad():
57
- outputs = model(**inputs)
58
- predictions = torch.nn.functional.softmax(outputs.logits, dim=-1)
59
-
60
- # Print results
61
- print("Predictions:", predictions)
62
- predicted_class = torch.argmax(predictions, dim=-1).item()
63
- print("Predicted severity:", labels[predicted_class])
64
- ```
65
 
66
  ## Training procedure
67
 
@@ -76,37 +59,20 @@ The following hyperparameters were used during training:
76
  - lr_scheduler_type: linear
77
  - num_epochs: 5
78
 
79
- It achieves the following results on the evaluation set:
80
- - Loss: 2.0407
81
- - Accuracy: 0.8185
82
- - F1 Macro: 0.7505
83
- - Low Precision: 0.6657
84
- - Low Recall: 0.5010
85
- - Low F1: 0.5718
86
- - Medium Precision: 0.8460
87
- - Medium Recall: 0.8703
88
- - Medium F1: 0.8580
89
- - High Precision: 0.8113
90
- - High Recall: 0.8131
91
- - High F1: 0.8122
92
- - Critical Precision: 0.7715
93
- - Critical Recall: 0.7487
94
- - Critical F1: 0.7600
95
-
96
  ### Training results
97
 
98
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
99
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
100
- | 2.4052 | 1.0 | 15960 | 2.5659 | 0.7361 | 0.6356 | 0.6322 | 0.2785 | 0.3867 | 0.7888 | 0.8197 | 0.8039 | 0.7427 | 0.6876 | 0.7141 | 0.5704 | 0.7236 | 0.6379 |
101
- | 2.4105 | 2.0 | 31920 | 2.3267 | 0.7650 | 0.6895 | 0.5665 | 0.4571 | 0.5060 | 0.7853 | 0.8612 | 0.8215 | 0.7845 | 0.7028 | 0.7414 | 0.6847 | 0.6933 | 0.6890 |
102
- | 1.6032 | 3.0 | 47880 | 2.1721 | 0.7914 | 0.7087 | 0.6868 | 0.3825 | 0.4913 | 0.8350 | 0.8420 | 0.8385 | 0.7696 | 0.7942 | 0.7817 | 0.7144 | 0.7325 | 0.7233 |
103
- | 1.6972 | 4.0 | 63840 | 2.0397 | 0.8094 | 0.7359 | 0.6748 | 0.4567 | 0.5447 | 0.8360 | 0.8704 | 0.8528 | 0.8095 | 0.7912 | 0.8003 | 0.7370 | 0.7545 | 0.7456 |
104
- | 1.5162 | 5.0 | 79800 | 2.0407 | 0.8185 | 0.7505 | 0.6657 | 0.5010 | 0.5718 | 0.8460 | 0.8703 | 0.8580 | 0.8113 | 0.8131 | 0.8122 | 0.7715 | 0.7487 | 0.7600 |
105
 
106
 
107
  ### Framework versions
108
 
109
- - Transformers 5.5.4
110
  - Pytorch 2.11.0+cu130
111
- - Datasets 4.8.4
112
  - Tokenizers 0.22.2
 
1
  ---
2
  library_name: transformers
3
+ license: mit
4
  base_model: roberta-base
 
 
5
  tags:
6
  - generated_from_trainer
7
+ metrics:
8
+ - accuracy
 
 
9
  model-index:
10
  - name: vulnerability-severity-classification-roberta-base
11
  results: []
 
 
12
  ---
13
 
14
+ <!-- This model card has been generated automatically according to the information the Trainer had access to. You
15
+ should probably proofread and complete it, then remove this comment. -->
16
 
17
+ # vulnerability-severity-classification-roberta-base
 
 
 
 
 
 
 
 
 
 
18
 
19
+ This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on an unknown dataset.
20
+ It achieves the following results on the evaluation set:
21
+ - Loss: 2.0132
22
+ - Accuracy: 0.8191
23
+ - F1 Macro: 0.7488
24
+ - Low Precision: 0.6601
25
+ - Low Recall: 0.5006
26
+ - Low F1: 0.5694
27
+ - Medium Precision: 0.8440
28
+ - Medium Recall: 0.8767
29
+ - Medium F1: 0.8601
30
+ - High Precision: 0.8195
31
+ - High Recall: 0.8112
32
+ - High F1: 0.8153
33
+ - Critical Precision: 0.7618
34
+ - Critical Recall: 0.7392
35
+ - Critical F1: 0.7503
36
 
37
  ## Model description
38
 
39
+ More information needed
 
 
 
 
 
 
40
 
41
+ ## Intended uses & limitations
42
 
43
+ More information needed
 
 
 
44
 
45
+ ## Training and evaluation data
 
 
46
 
47
+ More information needed
 
 
 
 
 
 
 
 
 
48
 
49
  ## Training procedure
50
 
 
59
  - lr_scheduler_type: linear
60
  - num_epochs: 5
61
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
62
  ### Training results
63
 
64
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
65
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
66
+ | 2.3936 | 1.0 | 16180 | 2.5423 | 0.7404 | 0.6271 | 0.6925 | 0.2372 | 0.3534 | 0.7777 | 0.8359 | 0.8057 | 0.7237 | 0.7233 | 0.7235 | 0.6416 | 0.6110 | 0.6259 |
67
+ | 2.5847 | 2.0 | 32360 | 2.2926 | 0.7674 | 0.6790 | 0.6162 | 0.3880 | 0.4762 | 0.7899 | 0.8604 | 0.8237 | 0.7640 | 0.7458 | 0.7548 | 0.7115 | 0.6175 | 0.6612 |
68
+ | 2.0935 | 3.0 | 48540 | 2.1257 | 0.7920 | 0.7086 | 0.6727 | 0.4017 | 0.5030 | 0.8166 | 0.8670 | 0.8411 | 0.7907 | 0.7774 | 0.7840 | 0.7206 | 0.6927 | 0.7064 |
69
+ | 1.4077 | 4.0 | 64720 | 2.0427 | 0.8080 | 0.7367 | 0.5928 | 0.5203 | 0.5542 | 0.8334 | 0.8691 | 0.8509 | 0.8127 | 0.7952 | 0.8038 | 0.7583 | 0.7185 | 0.7379 |
70
+ | 1.0097 | 5.0 | 80900 | 2.0132 | 0.8191 | 0.7488 | 0.6601 | 0.5006 | 0.5694 | 0.8440 | 0.8767 | 0.8601 | 0.8195 | 0.8112 | 0.8153 | 0.7618 | 0.7392 | 0.7503 |
71
 
72
 
73
  ### Framework versions
74
 
75
+ - Transformers 5.6.2
76
  - Pytorch 2.11.0+cu130
77
+ - Datasets 4.8.5
78
  - Tokenizers 0.22.2
config.json CHANGED
@@ -34,7 +34,7 @@
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
- "transformers_version": "5.5.4",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
 
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
+ "transformers_version": "5.6.2",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
model.safetensors CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:4e18039e1d73763e786a092d7ba177f74b2b7b574768af0414a33e27d8c56af9
3
- size 498618952
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:8456ce885cec0af5ecdb77b8fcde82fe54354fc66e98935f9db4611770aa5b22
3
+ size 498618976
tokenizer_config.json CHANGED
@@ -6,6 +6,7 @@
6
  "eos_token": "</s>",
7
  "errors": "replace",
8
  "is_local": false,
 
9
  "mask_token": "<mask>",
10
  "model_max_length": 512,
11
  "pad_token": "<pad>",
 
6
  "eos_token": "</s>",
7
  "errors": "replace",
8
  "is_local": false,
9
+ "local_files_only": false,
10
  "mask_token": "<mask>",
11
  "model_max_length": 512,
12
  "pad_token": "<pad>",
training_args.bin CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:6a89f00003aad1fd8409cc273592dc9478b1934fab4e9a8a3b21a4719f2d2dc3
3
- size 5265
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:4fed503167938b6f5ae1dcf6f5ee14cb3ed1c9517c6dec60fa2d4cdf1068e8e0
3
+ size 5329