README.md

---
language:
- en
license: odc-by
task_categories:
- text-generation
pretty_name: Primus-Instruct
configs:
- config_name: default
  data_files:
  - split: train
    path: data/*
dataset_info:
  features:
  - name: prompt
    dtype: string
  - name: prompt_id
    dtype: string
  - name: messages
    list:
    - name: content
      dtype: string
    - name: role
      dtype: string
extra_gated_fields:
  Affiliation: text
  Country: country
  I want to use this model for:
    type: select
    options:
    - Research
    - Commercial
    - label: Other
      value: other
  Job title:
    type: select
    options:
    - Student
    - Research graduate
    - AI researcher
    - AI developer/engineer
    - Cybersecurity researcher
    - Reporter
    - Other
  geo: ip_location
library_name: transformers
tags:
- cybersecurity
- IFT
- SFT
size_categories:
- n<1K
---

# PRIMUS: A Pioneering Collection of Open-Source Datasets for Cybersecurity LLM Training



## 🤗 Primus-Instruct

The **Primus-Instruct** dataset contains hundreds of expert-curated cybersecurity business scenario use case instructions, with responses generated by GPT-4o. It includes tasks such as:

- Explaining detected alerts  
- Answering questions about retrieved security documents  
- Analyzing executed suspicious commands  
- Generating query languages for retrieving security events  
- Providing security recommendations and risk assessments for Terraform configurations  

🚀🚀 For more details, see our paper:  
[https://arxiv.org/abs/2502.11191](https://arxiv.org/abs/2502.11191)

### 🔹 Message Format
Conversations are stored in `messages` in the following format:

```json
[
  {"role": "user", "content": "..."},
  {"role": "assistant", "content": "..."},
  {"role": "user", "content": "..."},
  {"role": "assistant", "content": "..."}
]
```



## Dataset Sample Statistics

| Task                                      | Samples |
|-------------------------------------------|---------|
| **Cybersecurity-related Tasks**             |         |
| Alert Explanation                         | 100     |
| Retrieved Security Doc QA                 | 100     |
| Suspicious Command Analysis               | 100     |
| Security Event Query Generation           | 100     |
| Terraform Security Misconfiguration Fix   | 96      |
| **General (Multi-turn)**                    |         |
| General Instruction Following             | 339     |



## License

This dataset is released under the **ODC-By** license.