POST: Good ole machine learning can get you far

Our buddies at CIRCL came out with an interesting approach to help classify the severity of a vulnerability.
Did they use AI? well yes and no: they used "machine learning" which used to be the name of practical AI in the old days pre-GenAI times.

The approach is to take a two year old base model, started 6 years ago by Facebook research and refine with vulnerabilities scoring data. The results are surprisingly decent. Given that the NVD has been trailing behind reviewing CVEs.

The model itself is only 500MB and only 125M parameters and its something that should fit in most basic computers.

Hear, hear! This usage of ML is efficient, practical, cheap, and open! ... and useful.

https://huggingface.co/CIRCL/vulnerability-severity-classification-roberta-base/