Ignore Me But Don't Replace Me: Utilizing Non-Linguistic Elements for Pretraining on the Cybersecurity Domain

Fuente: arXiv
Salvato in:
Dettagli Bibliografici
Autori principali: Jang, Eugene, Cui, Jian, Yim, Dayeon, Jin, Youngjin, Chung, Jin-Woo, Shin, Seungwon, Lee, Yongjae
Natura: Preprint
Pubblicazione: 2024
Soggetti:
Accesso online:
Tags: Aggiungi Tag
Nessun Tag, puoi essere il primo ad aggiungerne!!
_version_ 1866914738350325760
author Jang, Eugene
Cui, Jian
Yim, Dayeon
Jin, Youngjin
Chung, Jin-Woo
Shin, Seungwon
Lee, Yongjae
author_facet Jang, Eugene
Cui, Jian
Yim, Dayeon
Jin, Youngjin
Chung, Jin-Woo
Shin, Seungwon
Lee, Yongjae
contents Cybersecurity information is often technically complex and relayed through unstructured text, making automation of cyber threat intelligence highly challenging. For such text domains that involve high levels of expertise, pretraining on in-domain corpora has been a popular method for language models to obtain domain expertise. However, cybersecurity texts often contain non-linguistic elements (such as URLs and hash values) that could be unsuitable with the established pretraining methodologies. Previous work in other domains have removed or filtered such text as noise, but the effectiveness of these methods have not been investigated, especially in the cybersecurity domain. We propose different pretraining methodologies and evaluate their effectiveness through downstream tasks and probing tasks. Our proposed strategy (selective MLM and jointly training NLE token classification) outperforms the commonly taken approach of replacing non-linguistic elements (NLEs). We use our domain-customized methodology to train CyBERTuned, a cybersecurity domain language model that outperforms other cybersecurity PLMs on most tasks.
format Preprint
id arxiv_https___arxiv_org_abs_2403_10576
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle Ignore Me But Don't Replace Me: Utilizing Non-Linguistic Elements for Pretraining on the Cybersecurity Domain
Jang, Eugene
Cui, Jian
Yim, Dayeon
Jin, Youngjin
Chung, Jin-Woo
Shin, Seungwon
Lee, Yongjae
Cryptography and Security
Computation and Language
Machine Learning
I.2.7
Cybersecurity information is often technically complex and relayed through unstructured text, making automation of cyber threat intelligence highly challenging. For such text domains that involve high levels of expertise, pretraining on in-domain corpora has been a popular method for language models to obtain domain expertise. However, cybersecurity texts often contain non-linguistic elements (such as URLs and hash values) that could be unsuitable with the established pretraining methodologies. Previous work in other domains have removed or filtered such text as noise, but the effectiveness of these methods have not been investigated, especially in the cybersecurity domain. We propose different pretraining methodologies and evaluate their effectiveness through downstream tasks and probing tasks. Our proposed strategy (selective MLM and jointly training NLE token classification) outperforms the commonly taken approach of replacing non-linguistic elements (NLEs). We use our domain-customized methodology to train CyBERTuned, a cybersecurity domain language model that outperforms other cybersecurity PLMs on most tasks.
title Ignore Me But Don't Replace Me: Utilizing Non-Linguistic Elements for Pretraining on the Cybersecurity Domain
topic Cryptography and Security
Computation and Language
Machine Learning
I.2.7
url https://arxiv.org/abs/2403.10576