cedricbonhomme commited on
Commit
50551d6
·
verified ·
1 Parent(s): f0d2dee

End of training

Browse files
Files changed (5) hide show
  1. README.md +34 -74
  2. config.json +1 -1
  3. emissions.csv +1 -1
  4. model.safetensors +1 -1
  5. training_args.bin +1 -1
README.md CHANGED
@@ -1,69 +1,50 @@
1
  ---
2
  library_name: transformers
3
- license: cc-by-4.0
4
  base_model: roberta-base
5
- metrics:
6
- - accuracy
7
  tags:
8
  - generated_from_trainer
9
- - text-classification
10
- - classification
11
- - nlp
12
- - vulnerability
13
  model-index:
14
  - name: vulnerability-severity-classification-roberta-base
15
  results: []
16
- datasets:
17
- - CIRCL/vulnerability-scores
18
  ---
19
 
 
 
20
 
21
- # VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification
22
-
23
- # Severity classification
24
-
25
- This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on the dataset [CIRCL/vulnerability-scores](https://huggingface.co/datasets/CIRCL/vulnerability-scores).
26
-
27
- The model was presented in the paper [VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification](https://huggingface.co/papers/2507.03607) [[arXiv](https://arxiv.org/abs/2507.03607)].
28
-
29
- **Abstract:** VLAI is a transformer-based model that predicts software vulnerability severity levels directly from text descriptions. Built on RoBERTa, VLAI is fine-tuned on over 600,000 real-world vulnerabilities and achieves over 82% accuracy in predicting severity categories, enabling faster and more consistent triage ahead of manual CVSS scoring. The model and dataset are open-source and integrated into the Vulnerability-Lookup service.
30
-
31
- You can read [this page](https://www.vulnerability-lookup.org/user-manual/ai/) for more information.
32
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
33
 
34
  ## Model description
35
 
36
- It is a classification model and is aimed to assist in classifying vulnerabilities by severity based on their descriptions.
37
-
38
- ## How to get started with the model
39
-
40
- ```python
41
- from transformers import AutoModelForSequenceClassification, AutoTokenizer
42
- import torch
43
-
44
- labels = ["low", "medium", "high", "critical"]
45
-
46
- model_name = "CIRCL/vulnerability-severity-classification-roberta-base"
47
- tokenizer = AutoTokenizer.from_pretrained(model_name)
48
- model = AutoModelForSequenceClassification.from_pretrained(model_name)
49
- model.eval()
50
 
51
- print("Model revision:", model.config._commit_hash)
52
 
53
- test_description = "SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries \
54
- that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system."
55
- inputs = tokenizer(test_description, return_tensors="pt", truncation=True, padding=True)
56
 
57
- # Run inference
58
- with torch.no_grad():
59
- outputs = model(**inputs)
60
- predictions = torch.nn.functional.softmax(outputs.logits, dim=-1)
61
 
62
- # Print results
63
- print("Predictions:", predictions)
64
- predicted_class = torch.argmax(predictions, dim=-1).item()
65
- print("Predicted severity:", labels[predicted_class])
66
- ```
67
 
68
  ## Training procedure
69
 
@@ -78,41 +59,20 @@ The following hyperparameters were used during training:
78
  - lr_scheduler_type: linear
79
  - num_epochs: 5
80
 
81
- It achieves the following results on the evaluation set:
82
- - Loss: 2.0378
83
- - Accuracy: 0.8152
84
- - F1 Macro: 0.7487
85
- - Low Precision: 0.6544
86
- - Low Recall: 0.5105
87
- - Low F1: 0.5736
88
- - Medium Precision: 0.8440
89
- - Medium Recall: 0.8653
90
- - Medium F1: 0.8545
91
- - High Precision: 0.8110
92
- - High Recall: 0.8111
93
- - High F1: 0.8111
94
- - Critical Precision: 0.7619
95
- - Critical Recall: 0.7493
96
- - Critical F1: 0.7556
97
-
98
  ### Training results
99
 
100
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
101
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
102
- | 2.3504 | 1.0 | 17926 | 2.6006 | 0.7357 | 0.6372 | 0.5440 | 0.3233 | 0.4056 | 0.7788 | 0.8171 | 0.7975 | 0.7123 | 0.7369 | 0.7244 | 0.6738 | 0.5764 | 0.6213 |
103
- | 2.4658 | 2.0 | 35852 | 2.3303 | 0.7636 | 0.6543 | 0.7435 | 0.2598 | 0.3850 | 0.7912 | 0.8500 | 0.8195 | 0.7377 | 0.7716 | 0.7543 | 0.7336 | 0.5973 | 0.6585 |
104
- | 2.0186 | 3.0 | 53778 | 2.1500 | 0.7856 | 0.7041 | 0.6568 | 0.3937 | 0.4923 | 0.8148 | 0.8526 | 0.8333 | 0.7805 | 0.7728 | 0.7767 | 0.7146 | 0.7138 | 0.7142 |
105
- | 1.7673 | 4.0 | 71704 | 2.0545 | 0.8046 | 0.7352 | 0.5998 | 0.5178 | 0.5558 | 0.8334 | 0.8602 | 0.8466 | 0.8018 | 0.7995 | 0.8007 | 0.7623 | 0.7150 | 0.7379 |
106
- | 1.2162 | 5.0 | 89630 | 2.0378 | 0.8152 | 0.7487 | 0.6544 | 0.5105 | 0.5736 | 0.8440 | 0.8653 | 0.8545 | 0.8110 | 0.8111 | 0.8111 | 0.7619 | 0.7493 | 0.7556 |
107
 
108
 
109
  ### Framework versions
110
 
111
- - Transformers 5.14.1
112
  - Pytorch 2.13.0+cu130
113
  - Datasets 4.8.5
114
  - Tokenizers 0.22.2
115
-
116
- ## Funding
117
-
118
- [AIPITCH](https://aipitch.eu/) (AI-Powered Innovative Toolkit for Cybersecurity Hubs) is a co-funded EU project supported by the European Cybersecurity Competence Centre (ECCC) under the DIGITAL-ECCC-2024-DEPLOY-CYBER-06-ENABLINGTECH program and [CIRCL](https://www.circl.lu/).
 
1
  ---
2
  library_name: transformers
3
+ license: mit
4
  base_model: roberta-base
 
 
5
  tags:
6
  - generated_from_trainer
7
+ metrics:
8
+ - accuracy
 
 
9
  model-index:
10
  - name: vulnerability-severity-classification-roberta-base
11
  results: []
 
 
12
  ---
13
 
14
+ <!-- This model card has been generated automatically according to the information the Trainer had access to. You
15
+ should probably proofread and complete it, then remove this comment. -->
16
 
17
+ # vulnerability-severity-classification-roberta-base
 
 
 
 
 
 
 
 
 
 
18
 
19
+ This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on an unknown dataset.
20
+ It achieves the following results on the evaluation set:
21
+ - Loss: 2.0411
22
+ - Accuracy: 0.8164
23
+ - F1 Macro: 0.7491
24
+ - Low Precision: 0.6536
25
+ - Low Recall: 0.5148
26
+ - Low F1: 0.5759
27
+ - Medium Precision: 0.8377
28
+ - Medium Recall: 0.8712
29
+ - Medium F1: 0.8541
30
+ - High Precision: 0.8236
31
+ - High Recall: 0.8077
32
+ - High F1: 0.8156
33
+ - Critical Precision: 0.7561
34
+ - Critical Recall: 0.7457
35
+ - Critical F1: 0.7509
36
 
37
  ## Model description
38
 
39
+ More information needed
 
 
 
 
 
 
 
 
 
 
 
 
 
40
 
41
+ ## Intended uses & limitations
42
 
43
+ More information needed
 
 
44
 
45
+ ## Training and evaluation data
 
 
 
46
 
47
+ More information needed
 
 
 
 
48
 
49
  ## Training procedure
50
 
 
59
  - lr_scheduler_type: linear
60
  - num_epochs: 5
61
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
62
  ### Training results
63
 
64
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
65
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
66
+ | 2.6595 | 1.0 | 18151 | 2.5896 | 0.7341 | 0.6285 | 0.6716 | 0.2567 | 0.3714 | 0.7917 | 0.7991 | 0.7954 | 0.7002 | 0.7492 | 0.7239 | 0.6326 | 0.6141 | 0.6232 |
67
+ | 2.4978 | 2.0 | 36302 | 2.3990 | 0.7614 | 0.6814 | 0.5762 | 0.4255 | 0.4895 | 0.7779 | 0.8556 | 0.8149 | 0.7881 | 0.7133 | 0.7488 | 0.6681 | 0.6771 | 0.6726 |
68
+ | 1.7617 | 3.0 | 54453 | 2.1975 | 0.7879 | 0.7097 | 0.6682 | 0.4156 | 0.5125 | 0.8119 | 0.8615 | 0.8360 | 0.8056 | 0.7546 | 0.7793 | 0.6775 | 0.7484 | 0.7112 |
69
+ | 1.7304 | 4.0 | 72604 | 2.0677 | 0.8075 | 0.7366 | 0.6663 | 0.4761 | 0.5554 | 0.8389 | 0.8588 | 0.8487 | 0.8077 | 0.8021 | 0.8049 | 0.7248 | 0.7506 | 0.7375 |
70
+ | 1.4189 | 5.0 | 90755 | 2.0411 | 0.8164 | 0.7491 | 0.6536 | 0.5148 | 0.5759 | 0.8377 | 0.8712 | 0.8541 | 0.8236 | 0.8077 | 0.8156 | 0.7561 | 0.7457 | 0.7509 |
71
 
72
 
73
  ### Framework versions
74
 
75
+ - Transformers 5.15.0
76
  - Pytorch 2.13.0+cu130
77
  - Datasets 4.8.5
78
  - Tokenizers 0.22.2
 
 
 
 
config.json CHANGED
@@ -34,7 +34,7 @@
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
- "transformers_version": "5.14.1",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
 
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
+ "transformers_version": "5.15.0",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
emissions.csv CHANGED
@@ -1,2 +1,2 @@
1
  timestamp,project_name,run_id,experiment_id,duration,emissions,emissions_rate,cpu_power,gpu_power,ram_power,cpu_energy,gpu_energy,ram_energy,energy_consumed,water_consumed,country_name,country_iso_code,region,cloud_provider,cloud_region,os,python_version,codecarbon_version,cpu_count,cpu_model,gpu_count,gpu_model,longitude,latitude,ram_total_size,tracking_mode,cpu_utilization_percent,gpu_utilization_percent,ram_utilization_percent,ram_used_gb,on_cloud,pue,wue
2
- 2026-08-10T10:57:27,VulnTrain,bbe287dc-2b90-4133-be54-f49439361a46,5b0fa12a-3dd7-45bb-9766-cc326314d9f1,17412.237488129,0.5062978248175911,2.9077126082318003e-05,70.00020254254338,855.9715475520533,70.0,0.338522028198362,4.133602226045805,0.3377122962777855,4.80983655052194,0.0,Luxembourg,LUX,luxembourg,,,Linux-6.8.0-137-generic-x86_64-with-glibc2.39,3.12.3,3.3.0,224,Intel(R) Xeon(R) Platinum 8480+,4,4 x NVIDIA L40S,6.1327,49.6098,2015.3354377746582,machine,0.9477997577714978,71.24766422515717,1.0,20.362818210125933,N,1.0,0.0
 
1
  timestamp,project_name,run_id,experiment_id,duration,emissions,emissions_rate,cpu_power,gpu_power,ram_power,cpu_energy,gpu_energy,ram_energy,energy_consumed,water_consumed,country_name,country_iso_code,region,cloud_provider,cloud_region,os,python_version,codecarbon_version,cpu_count,cpu_model,gpu_count,gpu_model,longitude,latitude,ram_total_size,tracking_mode,cpu_utilization_percent,gpu_utilization_percent,ram_utilization_percent,ram_used_gb,on_cloud,pue,wue
2
+ 2026-08-18T10:32:57,VulnTrain,0a366a90-c25c-437b-a16b-4a478dcc1c0c,5b0fa12a-3dd7-45bb-9766-cc326314d9f1,16404.755511164,0.49881326542091087,3.0406625998263205e-05,70.00022302887778,901.5634496219493,70.0,0.3189415151946195,4.101619937404433,0.318171676999283,4.738733129598346,0.0,Luxembourg,LUX,luxembourg,,,Linux-6.8.0-138-generic-x86_64-with-glibc2.39,3.12.3,3.3.0,224,Intel(R) Xeon(R) Platinum 8480+,4,4 x NVIDIA L40S,6.1327,49.6098,2015.3353958129883,machine,1.0084411205786796,76.34296266781095,1.0,20.37703774285654,N,1.0,0.0
model.safetensors CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:1355f24f024bb12965b7c7c80a6b0902b5e20eee936e5704e67b23eca84aa4f6
3
  size 498618976
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:4ba4b21ac198295265f25455d2ad7d2e419b22ef0477630f38f7c0b9ff298adb
3
  size 498618976
training_args.bin CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:a09f00c329f360c419ac28dd62f3535f567379e4e794921925634379badaec6f
3
  size 5265
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:8d5beed4688e2946e635ecfcb83d8b20fe50a51bf79351375018a906d82162fd
3
  size 5265