You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/index.md
+29-8Lines changed: 29 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,9 +6,10 @@
6
6
7
7
## Presentation
8
8
9
-
VulnTrain provides a set of tools to generate diverse AI-ready datasets and train models using comprehensive vulnerability data from Vulnerability-Lookup.
10
-
It leverages over one million JSON records from multiple advisory sources to build high-quality, domain-specific models.
9
+
VulnTrain provides a set of tools to generate diverse AI-ready datasets and train models using comprehensive vulnerability data from [Vulnerability-Lookup](https://vulnerability.circl.lu).
10
+
It leverages over one million JSON records from multiple advisory sources (CVE, GitHub advisories, CSAF, PySecDB, CNVD) to build severity classifiers, description generators, and CWE classifiers.
11
11
12
+
Models and datasets are published to Hugging Face Hub under the [CIRCL](https://huggingface.co/CIRCL) organization.
12
13
13
14
## Installation
14
15
@@ -20,18 +21,21 @@ poetry install
20
21
21
22
Three types of commands are available:
22
23
23
-
-**Dataset generation**: Create and prepare datasets.
24
+
-**Dataset generation**: Create and prepare datasets from vulnerability sources.
24
25
-**Model training**: Train models using the prepared datasets.
25
-
-**Model validation**: Evaluate the performance of trained models.
26
+
-**Model validation**: Evaluate and compare trained models.
Copy `vulntrain/config/conf_sample.py` to `vulntrain/config/conf.py` and fill in the Valkey connection details and tokens. Set the `VulnTrain_CONFIG` environment variable to point to your config file.
34
37
38
+
## Datasets
35
39
36
40
Ensure that the ``huggingface_hub`` package is installed:
37
41
@@ -45,23 +49,26 @@ Then log in to Hugging Face:
45
49
hf auth login
46
50
```
47
51
48
-
Then ensure that the kvrocks database of Vulnerability-Lookup is running.
52
+
Then ensure that the Valkey database of Vulnerability-Lookup is running.
The CNVD trainer uses a deduplicated train/test split to prevent data leakage and supports different loss strategies via `--class-weights` (`none`, `sqrt`, `balanced`, `focal`). Defaults to uniform loss. See the [improvements report](cnvd-severity-improvements.md) for details.
98
+
90
99
### Training for CWE classification
91
100
92
101
```bash
@@ -131,6 +140,18 @@ Using CUDA (Nvidia GPU).
131
140
132
141
## Validation
133
142
143
+
### Severity model comparison (CNVD)
144
+
145
+
Compare old and new CNVD severity models on a deduplicated test set:
0 commit comments