MITRE ATT&CK
Techniques
Every technique the similarity search can rank vulnerabilities for. Open one to list the vulnerabilities whose description is nearest to it.
The technique pages are a similarity search over the bi-encoder space, not a classification:
they rank the stored vulnerabilities by how close their description is to a technique in the vector space of the
CIRCL/vulnerability-attack-technique-biencoder
model, served locally by ML-Gateway.
The model was trained on a small vocabulary of techniques, marked trained vocabulary;
the others are scored from their official ATT&CK text and rank noticeably worse.
The method and its evaluation are described in the paper
Beyond the Description: Structured Metadata and Label Semantics for CVE-to-ATT&CK Mapping.
Loading…