Update README.md

README.md

@@ -1,34 +1,191 @@
-## 🛡️ CybersecurityRiskAnalyst — Cybersecurity Risk Assessment LLM
-
-CybersecurityRiskAnalyst is a custom fine-tuned Large Language Model (LLM) designed to act as a senior cybersecurity risk assessor and strategist. It provides comprehensive and actionable risk assessments for organizations based on their current security posture, infrastructure, and strategic goals.
-
-### 🚀 Key Features
-- Risk Posture Evaluation: Assesses current cybersecurity maturity based on provided company data.
-- Framework Mapping: Aligns recommendations with NIST CSF, CIS Controls, MITRE ATT&CK, and ISO/IEC 27001.
-- Threat Intelligence Awareness: Updated knowledge of exploits, zero-day vulnerabilities, and adversarial tactics.
-- Gap Analysis: Identifies areas of weakness compared to industry best practices.
-- Prioritized Recommendations: Categorizes findings by risk level and provides short/long-term remediations.
-- Human-Centric Reports: Outputs are structured for both technical and executive audiences.
-- Explainability: Justifies each recommendation with clear rationale to support decision-making.
-
-### 📝 How to Use
-Start by feeding the model a detailed company profile, including:
-- Type of industry, company size
-- Existing tech stack and infrastructure
-- Compliance mandates (e.g., HIPAA, GDPR, PCI-DSS)
-- Security policies and access controls
-- Any known incidents or concerns
-
-##### Example prompt:
-We are a mid-sized fintech company with hybrid cloud architecture (AWS + Azure), using Okta for IAM, Kubernetes for deployment, and Office 365 for collaboration. No SIEM is currently in place. Data is encrypted at rest but not in transit. We are PCI-DSS compliant but not SOC2. What is our risk posture, and what should we aim for?
-
-##### 📄 Sample Output Structure
-
-The model will respond with :
- > Executive Summary, Current State Assessment, Risk Matrix (Low / Medium / High), Gap Analysis vs. Standards, Recommended Actions, Suggested Tools and Controls, Strategic Roadmap
-
-### 📚 References
-- NIST Cybersecurity Framework (CSF)
-- MITRE ATT&CK
-- CIS Critical Security Controls
-- ISO/IEC 27001
+# CybersecurityRiskAnalyst
+
+> ⭐ **Find this useful? Clone it, [star the repo](https://github.com/ravyg/cybersecurity-risk-analyst), and cite the paper.** If you use this model in academic or professional work, please cite [arXiv:2603.20131](https://arxiv.org/abs/2603.20131) (see [How to cite](#how-to-cite)). Model DOI: [`10.57967/hf/9777`](https://doi.org/10.57967/hf/9777).
+
+**CybersecurityRiskAnalyst** is a custom fine-tuned Large Language Model (LLM) designed to act as a senior cybersecurity risk assessor and strategist. It is published on Ollama and has **1,400+ downloads**. This repository makes the model formally citable and links it to the research paper it accompanies.
+
+- **Model:** [`saki007ster/CybersecurityRiskAnalyst`](https://ollama.com/saki007ster/CybersecurityRiskAnalyst) on Ollama
+- **Base model:** Llama 3.1 8B (`llama` architecture, 8.03B parameters)
+- **Quantization:** Q4_0 · **Size:** 4.7 GB · **Context window:** 128K
+- **Tags:** text, cybersecurity, risk assessment
+
+### What it does
+
+- **Risk Posture Evaluation** — assesses an organization's overall security posture
+- **Framework Mapping** — NIST CSF, CIS Controls, MITRE ATT&CK, ISO/IEC 27001
+- **Threat Intelligence Awareness**
+- **Gap Analysis**
+- **Prioritized Recommendations**
+- **Human-Centric Reports** — clear, decision-ready output
+- **Explainability** — reasoning you can follow and audit
+
+---
+
+## DOI
+
+[![DOI](https://img.shields.io/badge/DOI-10.57967%2Fhf%2F9777-blue)](https://doi.org/10.57967/hf/9777)
+
+**Model DOI (Hugging Face):** [`10.57967/hf/9777`](https://doi.org/10.57967/hf/9777)
+
+---
+
+## Install & Use
+
+Requires [Ollama](https://ollama.com/download).
+
+```bash
+# Pull the model
+ollama pull saki007ster/CybersecurityRiskAnalyst
+
+# Or pull-and-run in one step
+ollama run saki007ster/CybersecurityRiskAnalyst
+```
+
+### Minimal usage example
+
+```bash
+ollama run saki007ster/CybersecurityRiskAnalyst \
+  "We run a 200-person fintech on AWS with no formal incident response plan. \
+   Assess our top cyber risks and map them to NIST CSF."
+```
+
+Or via the Ollama HTTP API:
+
+```bash
+curl http://localhost:11434/api/generate -d '{
+  "model": "saki007ster/CybersecurityRiskAnalyst",
+  "prompt": "Perform a NIST CSF gap analysis for a small healthcare provider storing PHI in a single on-prem server.",
+  "stream": false
+}'
+```
+
+Python:
+
+```python
+import ollama
+
+response = ollama.chat(
+    model="saki007ster/CybersecurityRiskAnalyst",
+    messages=[{
+        "role": "user",
+        "content": "Prioritize remediation for an org with exposed RDP, no MFA, and unpatched VPN.",
+    }],
+)
+print(response["message"]["content"])
+```
+
+---
+
+## How to cite
+
+This model accompanies the paper below — **if you use the model in academic or professional work, please cite the paper.**
+
+> Gupta, Ravish; Kumar, Saket; Sharma, Shreeya; Dang, Maulik; and Aggarwal, Abhishek (2026).
+> *An Agentic Multi-Agent Architecture for Cybersecurity Risk Management.* arXiv preprint arXiv:2603.20131.
+
+<details open>
+<summary><b>APA</b></summary>
+
+```
+Gupta, R., Kumar, S., Sharma, S., Dang, M., & Aggarwal, A. (2026). An Agentic Multi-Agent Architecture for Cybersecurity Risk Management. arXiv preprint arXiv:2603.20131.
+```
+</details>
+
+<details>
+<summary><b>MLA</b></summary>
+
+```
+Gupta, Ravish, et al. "An Agentic Multi-Agent Architecture for Cybersecurity Risk Management." arXiv preprint arXiv:2603.20131 (2026).
+```
+</details>
+
+<details>
+<summary><b>Chicago</b></summary>
+
+```
+Gupta, Ravish, Saket Kumar, Shreeya Sharma, Maulik Dang, and Abhishek Aggarwal. "An Agentic Multi-Agent Architecture for Cybersecurity Risk Management." arXiv preprint arXiv:2603.20131 (2026).
+```
+</details>
+
+<details>
+<summary><b>Harvard</b></summary>
+
+```
+Gupta, R., Kumar, S., Sharma, S., Dang, M. and Aggarwal, A., 2026. An Agentic Multi-Agent Architecture for Cybersecurity Risk Management. arXiv preprint arXiv:2603.20131.
+```
+</details>
+
+<details>
+<summary><b>Vancouver</b></summary>
+
+```
+Gupta R, Kumar S, Sharma S, Dang M, Aggarwal A. An Agentic Multi-Agent Architecture for Cybersecurity Risk Management. arXiv preprint arXiv:2603.20131. 2026.
+```
+</details>
+
+<details>
+<summary><b>BibTeX</b></summary>
+
+```bibtex
+@article{gupta2026agentic,
+  title   = {An Agentic Multi-Agent Architecture for Cybersecurity Risk Management},
+  author  = {Gupta, Ravish and Kumar, Saket and Sharma, Shreeya and Dang, Maulik and Aggarwal, Abhishek},
+  journal = {arXiv preprint arXiv:2603.20131},
+  year    = {2026}
+}
+```
+</details>
+
+A machine-readable [`CITATION.cff`](CITATION.cff) is also provided — GitHub will render a "Cite this repository" button from it.
+
+### Citing the model artifact directly (Hugging Face DOI)
+
+To cite the **model itself** (not the paper), use its Hugging Face DOI:
+
+```bibtex
+@misc{kumar2026cybersecurityriskanalyst,
+  author    = {Saket Kumar and Ravish Gupta},
+  title     = {CybersecurityRiskAnalyst (Revision 1842e1c)},
+  year      = {2026},
+  url       = {https://huggingface.co/saki007ster/CybersecurityRiskAnalyst},
+  doi       = {10.57967/hf/9777},
+  publisher = {Hugging Face}
+}
+```
+
+> **The model artifact was built by Saket Kumar and Ravish Gupta** (hence two authors on the model DOI). **The paper ([arXiv:2603.20131](https://arxiv.org/abs/2603.20131)) has five authors** — for academic/professional use, prefer the paper citation above; use the model DOI for reproducibility/data-availability statements.
+
+---
+
+## Authors & attribution
+
+**Model** (the fine-tuned artifact — Ollama & Hugging Face, DOI `10.57967/hf/9777`):
+
+- **Saket Kumar** — *model author / maintainer* ([`saki007ster`](https://huggingface.co/saki007ster))
+- **Ravish Gupta**
+
+**Paper** (*An Agentic Multi-Agent Architecture for Cybersecurity Risk Management*, arXiv:2603.20131):
+
+- **Ravish Gupta**
+- **Saket Kumar**
+- **Shreeya Sharma**
+- **Maulik Dang**
+- **Abhishek Aggarwal**
+
+---
+
+## License
+
+This model is a fine-tuned derivative of **Meta Llama 3.1 8B** and is therefore governed by the **[Llama 3.1 Community License Agreement](LICENSE)** (Version Release Date: July 23, 2024).
+
+- Built with Llama. Use is subject to Meta's [Acceptable Use Policy](https://www.llama.com/llama3_1/use-policy/).
+- The base-model license terms are inherited by this derivative; see [LICENSE](LICENSE) for the full text.
+
+---
+
+## Related
+
+- 📄 **Paper:** [An Agentic Multi-Agent Architecture for Cybersecurity Risk Management](https://arxiv.org/abs/2603.20131) (arXiv:2603.20131)
+- 🤖 **Model (Ollama):** [saki007ster/CybersecurityRiskAnalyst](https://ollama.com/saki007ster/CybersecurityRiskAnalyst)
+- 🤗 **Model (Hugging Face):** [saki007ster/CybersecurityRiskAnalyst](https://huggingface.co/saki007ster/CybersecurityRiskAnalyst) · DOI [`10.57967/hf/9777`](https://doi.org/10.57967/hf/9777)
+- 🛠 **Modelfile:** [Modelfile](Modelfile) in this repo