cedricbonhomme commited on
Commit
97aafaf
·
verified ·
1 Parent(s): 3a20fd8

End of training

Browse files
Files changed (5) hide show
  1. README.md +35 -72
  2. config.json +1 -1
  3. emissions.csv +1 -1
  4. model.safetensors +1 -1
  5. training_args.bin +1 -1
README.md CHANGED
@@ -1,69 +1,50 @@
1
  ---
2
  library_name: transformers
3
- license: cc-by-4.0
4
  base_model: roberta-base
5
- metrics:
6
- - accuracy
7
  tags:
8
  - generated_from_trainer
9
- - text-classification
10
- - classification
11
- - nlp
12
- - vulnerability
13
  model-index:
14
  - name: vulnerability-severity-classification-roberta-base
15
  results: []
16
- datasets:
17
- - CIRCL/vulnerability-scores
18
  ---
19
 
 
 
20
 
21
- # VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification
22
-
23
- # Severity classification
24
-
25
- This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on the dataset [CIRCL/vulnerability-scores](https://huggingface.co/datasets/CIRCL/vulnerability-scores).
26
-
27
- The model was presented in the paper [VLAI: A RoBERTa-Based Model for Automated Vulnerability Severity Classification](https://huggingface.co/papers/2507.03607) [[arXiv](https://arxiv.org/abs/2507.03607)].
28
-
29
- **Abstract:** VLAI is a transformer-based model that predicts software vulnerability severity levels directly from text descriptions. Built on RoBERTa, VLAI is fine-tuned on over 600,000 real-world vulnerabilities and achieves over 82% accuracy in predicting severity categories, enabling faster and more consistent triage ahead of manual CVSS scoring. The model and dataset are open-source and integrated into the Vulnerability-Lookup service.
30
-
31
- You can read [this page](https://www.vulnerability-lookup.org/user-manual/ai/) for more information.
32
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
33
 
34
  ## Model description
35
 
36
- It is a classification model and is aimed to assist in classifying vulnerabilities by severity based on their descriptions.
37
-
38
- ## How to get started with the model
39
-
40
- ```python
41
- from transformers import AutoModelForSequenceClassification, AutoTokenizer
42
- import torch
43
-
44
- labels = ["low", "medium", "high", "critical"]
45
 
46
- model_name = "CIRCL/vulnerability-severity-classification-roberta-base"
47
- tokenizer = AutoTokenizer.from_pretrained(model_name)
48
- model = AutoModelForSequenceClassification.from_pretrained(model_name)
49
- model.eval()
50
 
51
- print("Model revision:", model.config._commit_hash)
52
 
53
- test_description = "SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries \
54
- that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system."
55
- inputs = tokenizer(test_description, return_tensors="pt", truncation=True, padding=True)
56
 
57
- # Run inference
58
- with torch.no_grad():
59
- outputs = model(**inputs)
60
- predictions = torch.nn.functional.softmax(outputs.logits, dim=-1)
61
-
62
- # Print results
63
- print("Predictions:", predictions)
64
- predicted_class = torch.argmax(predictions, dim=-1).item()
65
- print("Predicted severity:", labels[predicted_class])
66
- ```
67
 
68
  ## Training procedure
69
 
@@ -78,38 +59,20 @@ The following hyperparameters were used during training:
78
  - lr_scheduler_type: linear
79
  - num_epochs: 5
80
 
81
- It achieves the following results on the evaluation set:
82
- - Loss: 2.0382
83
- - Accuracy: 0.8157
84
- - F1 Macro: 0.7437
85
- - Low Precision: 0.6809
86
- - Low Recall: 0.4729
87
- - Low F1: 0.5582
88
- - Medium Precision: 0.8445
89
- - Medium Recall: 0.8690
90
- - Medium F1: 0.8566
91
- - High Precision: 0.8090
92
- - High Recall: 0.8124
93
- - High F1: 0.8107
94
- - Critical Precision: 0.7555
95
- - Critical Recall: 0.7430
96
- - Critical F1: 0.7492
97
-
98
-
99
  ### Training results
100
 
101
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
102
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
103
- | 2.8741 | 1.0 | 17172 | 2.5202 | 0.7382 | 0.6383 | 0.6267 | 0.2831 | 0.3901 | 0.7929 | 0.8125 | 0.8026 | 0.7325 | 0.7104 | 0.7213 | 0.5879 | 0.7000 | 0.6391 |
104
- | 2.1854 | 2.0 | 34344 | 2.3521 | 0.7651 | 0.6777 | 0.5519 | 0.4107 | 0.4709 | 0.8023 | 0.8400 | 0.8207 | 0.7551 | 0.7556 | 0.7554 | 0.6972 | 0.6333 | 0.6637 |
105
- | 1.9581 | 3.0 | 51516 | 2.1533 | 0.7877 | 0.7050 | 0.6228 | 0.4180 | 0.5002 | 0.8168 | 0.8561 | 0.8360 | 0.7776 | 0.7825 | 0.7800 | 0.7375 | 0.6728 | 0.7037 |
106
- | 1.5932 | 4.0 | 68688 | 2.0416 | 0.8051 | 0.7288 | 0.6510 | 0.4537 | 0.5348 | 0.8345 | 0.8642 | 0.8491 | 0.7984 | 0.8000 | 0.7992 | 0.7459 | 0.7192 | 0.7323 |
107
- | 1.7506 | 5.0 | 85860 | 2.0382 | 0.8157 | 0.7437 | 0.6809 | 0.4729 | 0.5582 | 0.8445 | 0.8690 | 0.8566 | 0.8090 | 0.8124 | 0.8107 | 0.7555 | 0.7430 | 0.7492 |
108
 
109
 
110
  ### Framework versions
111
 
112
- - Transformers 5.13.0
113
- - Pytorch 2.12.1+cu130
114
  - Datasets 4.8.5
115
  - Tokenizers 0.22.2
 
1
  ---
2
  library_name: transformers
3
+ license: mit
4
  base_model: roberta-base
 
 
5
  tags:
6
  - generated_from_trainer
7
+ metrics:
8
+ - accuracy
 
 
9
  model-index:
10
  - name: vulnerability-severity-classification-roberta-base
11
  results: []
 
 
12
  ---
13
 
14
+ <!-- This model card has been generated automatically according to the information the Trainer had access to. You
15
+ should probably proofread and complete it, then remove this comment. -->
16
 
17
+ # vulnerability-severity-classification-roberta-base
 
 
 
 
 
 
 
 
 
 
18
 
19
+ This model is a fine-tuned version of [roberta-base](https://huggingface.co/roberta-base) on an unknown dataset.
20
+ It achieves the following results on the evaluation set:
21
+ - Loss: 2.0236
22
+ - Accuracy: 0.8186
23
+ - F1 Macro: 0.7510
24
+ - Low Precision: 0.6773
25
+ - Low Recall: 0.5058
26
+ - Low F1: 0.5791
27
+ - Medium Precision: 0.8501
28
+ - Medium Recall: 0.8656
29
+ - Medium F1: 0.8578
30
+ - High Precision: 0.8109
31
+ - High Recall: 0.8214
32
+ - High F1: 0.8162
33
+ - Critical Precision: 0.7575
34
+ - Critical Recall: 0.7447
35
+ - Critical F1: 0.7510
36
 
37
  ## Model description
38
 
39
+ More information needed
 
 
 
 
 
 
 
 
40
 
41
+ ## Intended uses & limitations
 
 
 
42
 
43
+ More information needed
44
 
45
+ ## Training and evaluation data
 
 
46
 
47
+ More information needed
 
 
 
 
 
 
 
 
 
48
 
49
  ## Training procedure
50
 
 
59
  - lr_scheduler_type: linear
60
  - num_epochs: 5
61
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
62
  ### Training results
63
 
64
  | Training Loss | Epoch | Step | Validation Loss | Accuracy | F1 Macro | Low Precision | Low Recall | Low F1 | Medium Precision | Medium Recall | Medium F1 | High Precision | High Recall | High F1 | Critical Precision | Critical Recall | Critical F1 |
65
  |:-------------:|:-----:|:-----:|:---------------:|:--------:|:--------:|:-------------:|:----------:|:------:|:----------------:|:-------------:|:---------:|:--------------:|:-----------:|:-------:|:------------------:|:---------------:|:-----------:|
66
+ | 2.5373 | 1.0 | 17620 | 2.5717 | 0.7372 | 0.6397 | 0.5989 | 0.3038 | 0.4031 | 0.7881 | 0.8179 | 0.8027 | 0.7286 | 0.7113 | 0.7199 | 0.6012 | 0.6683 | 0.6330 |
67
+ | 2.0841 | 2.0 | 35240 | 2.3156 | 0.7658 | 0.6802 | 0.6251 | 0.3867 | 0.4778 | 0.8150 | 0.8241 | 0.8195 | 0.7404 | 0.7772 | 0.7584 | 0.6855 | 0.6458 | 0.6651 |
68
+ | 1.9451 | 3.0 | 52860 | 2.1746 | 0.7897 | 0.7152 | 0.6160 | 0.4740 | 0.5358 | 0.8102 | 0.8710 | 0.8395 | 0.8044 | 0.7546 | 0.7787 | 0.7101 | 0.7031 | 0.7066 |
69
+ | 1.8354 | 4.0 | 70480 | 2.0207 | 0.8059 | 0.7345 | 0.6308 | 0.5018 | 0.5590 | 0.8223 | 0.8780 | 0.8493 | 0.8119 | 0.7884 | 0.8000 | 0.7678 | 0.6952 | 0.7297 |
70
+ | 1.6430 | 5.0 | 88100 | 2.0236 | 0.8186 | 0.7510 | 0.6773 | 0.5058 | 0.5791 | 0.8501 | 0.8656 | 0.8578 | 0.8109 | 0.8214 | 0.8162 | 0.7575 | 0.7447 | 0.7510 |
71
 
72
 
73
  ### Framework versions
74
 
75
+ - Transformers 5.14.1
76
+ - Pytorch 2.13.0+cu130
77
  - Datasets 4.8.5
78
  - Tokenizers 0.22.2
config.json CHANGED
@@ -34,7 +34,7 @@
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
- "transformers_version": "5.13.0",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
 
34
  "pad_token_id": 1,
35
  "problem_type": "single_label_classification",
36
  "tie_word_embeddings": true,
37
+ "transformers_version": "5.14.1",
38
  "type_vocab_size": 1,
39
  "use_cache": true,
40
  "vocab_size": 50265
emissions.csv CHANGED
@@ -1,2 +1,2 @@
1
  timestamp,project_name,run_id,experiment_id,duration,emissions,emissions_rate,cpu_power,gpu_power,ram_power,cpu_energy,gpu_energy,ram_energy,energy_consumed,water_consumed,country_name,country_iso_code,region,cloud_provider,cloud_region,os,python_version,codecarbon_version,cpu_count,cpu_model,gpu_count,gpu_model,longitude,latitude,ram_total_size,tracking_mode,cpu_utilization_percent,gpu_utilization_percent,ram_utilization_percent,ram_used_gb,on_cloud,pue,wue
2
- 2026-07-06T12:42:35,VulnTrain,2680f708-c770-48b6-8393-7fb3df10a32a,5b0fa12a-3dd7-45bb-9766-cc326314d9f1,16440.105912438,0.47994661651595366,2.9193645045366957e-05,70.00017684249264,865.5521722855135,70.0,0.30804420089201184,3.943441759473106,0.3080137357859912,4.559499696151105,0.0,Luxembourg,LUX,luxembourg,,,Linux-6.8.0-134-generic-x86_64-with-glibc2.39,3.12.3,3.2.8,224,Intel(R) Xeon(R) Platinum 8480+,4,4 x NVIDIA L40S,6.1327,49.6098,2015.3354263305664,machine,0.9313255956017104,72.5873701893708,1.0,20.119296018335977,N,1.0,0.0
 
1
  timestamp,project_name,run_id,experiment_id,duration,emissions,emissions_rate,cpu_power,gpu_power,ram_power,cpu_energy,gpu_energy,ram_energy,energy_consumed,water_consumed,country_name,country_iso_code,region,cloud_provider,cloud_region,os,python_version,codecarbon_version,cpu_count,cpu_model,gpu_count,gpu_model,longitude,latitude,ram_total_size,tracking_mode,cpu_utilization_percent,gpu_utilization_percent,ram_utilization_percent,ram_used_gb,on_cloud,pue,wue
2
+ 2026-07-22T10:32:32,VulnTrain,07e4bcd3-dc27-4d56-8dca-2abdf599dbec,5b0fa12a-3dd7-45bb-9766-cc326314d9f1,17101.49111927,0.49649144895604547,2.903205606419886e-05,70.00020223721837,854.506252984916,70.0,0.3324758516935228,4.0525399956405135,0.33165999276215513,4.716675840096194,0.0,Luxembourg,LUX,luxembourg,,,Linux-6.8.0-136-generic-x86_64-with-glibc2.39,3.12.3,3.2.9,224,Intel(R) Xeon(R) Platinum 8480+,4,4 x NVIDIA L40S,6.1327,49.6098,2015.335433959961,machine,0.9794609829135107,71.30325582760848,1.0,20.34628215353247,N,1.0,0.0
model.safetensors CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:035a8e1f208d48a286aa5dd7ce73e4eaa3ad5f1fc97016980e6ebbe356e882ca
3
  size 498618976
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:c85cfd9b4ff3d4f3b4e83a532f58aebbb6a3a39e7d1bc9cd42706fe9c15b0bef
3
  size 498618976
training_args.bin CHANGED
@@ -1,3 +1,3 @@
1
  version https://git-lfs.github.com/spec/v1
2
- oid sha256:3230fdbea3e5fcbdde4bdddd3a0baf1ab45352e7f7e091246067fa7a5608f2ab
3
  size 5265
 
1
  version https://git-lfs.github.com/spec/v1
2
+ oid sha256:a09f00c329f360c419ac28dd62f3535f567379e4e794921925634379badaec6f
3
  size 5265