{"id":"https://openalex.org/W7160956332","doi":"https://doi.org/10.48550/arxiv.2605.10808","title":"Threat Modelling using Domain-Adapted Language Models: Empirical Evaluation and Insights","display_name":"Threat Modelling using Domain-Adapted Language Models: Empirical Evaluation and Insights","publication_year":2026,"publication_date":"2026-05-11","ids":{"openalex":"https://openalex.org/W7160956332","doi":"https://doi.org/10.48550/arxiv.2605.10808"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.10808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.10808","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135980159","display_name":"Saba Pourhanifeh","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Pourhanifeh, Saba","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5013046960","display_name":"AbdulAziz AbdulGhaffar","orcid":"https://orcid.org/0000-0002-3888-3975"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"AbdulGhaffar, AbdulAziz","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5103160400","display_name":"Ashraf Matrawy","orcid":"https://orcid.org/0000-0001-9220-4630"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Matrawy, Ashraf","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3179999887943268,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.3179999887943268,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08229999989271164,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.07410000264644623,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/stride","display_name":"STRIDE","score":0.7813000082969666},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.6032999753952026},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5889999866485596},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.5321000218391418},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4941999912261963},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.41830000281333923},{"id":"https://openalex.org/keywords/decoding-methods","display_name":"Decoding methods","score":0.3955000042915344},{"id":"https://openalex.org/keywords/empirical-evidence","display_name":"Empirical evidence","score":0.3653999865055084}],"concepts":[{"id":"https://openalex.org/C18007350","wikidata":"https://www.wikidata.org/wiki/Q7394815","display_name":"STRIDE","level":2,"score":0.7813000082969666},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7089999914169312},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.6032999753952026},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5889999866485596},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.5321000218391418},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4941999912261963},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4433000087738037},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.4291999936103821},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.41830000281333923},{"id":"https://openalex.org/C57273362","wikidata":"https://www.wikidata.org/wiki/Q576722","display_name":"Decoding methods","level":2,"score":0.3955000042915344},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.38530001044273376},{"id":"https://openalex.org/C166052673","wikidata":"https://www.wikidata.org/wiki/Q83021","display_name":"Empirical evidence","level":2,"score":0.3653999865055084},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.3361999988555908},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31709998846054077},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31060001254081726},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.29660001397132874},{"id":"https://openalex.org/C2776230583","wikidata":"https://www.wikidata.org/wiki/Q1322198","display_name":"Spoken language","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.2939000129699707},{"id":"https://openalex.org/C2776035688","wikidata":"https://www.wikidata.org/wiki/Q1606558","display_name":"Affect (linguistics)","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C3017944768","wikidata":"https://www.wikidata.org/wiki/Q1450463","display_name":"Poison control","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C154775046","wikidata":"https://www.wikidata.org/wiki/Q188","display_name":"German","level":2,"score":0.2703999876976013},{"id":"https://openalex.org/C2779439875","wikidata":"https://www.wikidata.org/wiki/Q1078276","display_name":"Natural language understanding","level":3,"score":0.26080000400543213},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.26010000705718994},{"id":"https://openalex.org/C92548554","wikidata":"https://www.wikidata.org/wiki/Q2262868","display_name":"Domain model","level":3,"score":0.25870001316070557},{"id":"https://openalex.org/C83195618","wikidata":"https://www.wikidata.org/wiki/Q590951","display_name":"Cued speech","level":2,"score":0.2565999925136566}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.10808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.10808","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.10808","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.48927202820777893,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Large":[0,28],"Language":[1,29,66],"Models(LLMs)":[2],"are":[3,172],"increasingly":[4],"explored":[5],"for":[6,177,189,210,231,235],"cybersecurity":[7],"applications":[8],"such":[9],"as":[10],"vulnerability":[11],"detection.":[12],"In":[13,35],"the":[14,40,77,83,89,112,208],"domain":[15,70,116],"of":[16,26,43,53,114,186],"threat":[17,45,79,134,179,191,237],"modelling,":[18,80],"prior":[19],"work":[20],"has":[21],"primarily":[22],"evaluated":[23],"a":[24,97],"number":[25],"general-purpose":[27,147],"Models":[30],"under":[31],"limited":[32],"prompting":[33,130,232],"settings.":[34],"this":[36],"study,":[37],"we":[38,81],"extend":[39],"research":[41],"area":[42,91],"structured":[44,78,190],"modelling":[46,192],"by":[47],"systematically":[48],"evaluating":[49],"domain-adapted":[50,140],"language":[51,108],"models":[52,141,165],"different":[54,103,107],"sizes":[55],"to":[56,72,110],"their":[57,146],"general":[58],"counterparts.":[59],"We":[60,95,221],"use":[61],"both":[62],"LLMs":[63,188],"and":[64,74,88,128,149,156,194,215,228],"Small":[65],"Models(SLMs)":[67],"that":[68,139,162,196],"were":[69],"adapted":[71],"telecommunications":[73],"cybersecuirty.":[75],"For":[76],"selected":[82],"widely":[84],"used":[85],"STRIDE":[86,133,236],"approach":[87],"application":[90],"is":[92],"5G":[93],"security.":[94],"present":[96,222,229],"comprehensive":[98],"empirical":[99],"evaluation":[100],"using":[101],"52":[102],"configurations":[104],"(on":[105],"8":[106],"models)":[109],"analyze":[111],"impact":[113],"1)":[115],"adaptation,":[117],"2)":[118],"model":[119,154,205],"scale,":[120],"3)":[121],"decoding":[122,150],"strategies":[123,151],"(greedy":[124],"vs.":[125],"stochastic":[126],"sampling),":[127],"4)":[129],"technique":[131],"on":[132,224],"classification.":[135],"Our":[136],"results":[137],"show":[138,161],"do":[142],"not":[143],"consistently":[144],"outperform":[145],"counterparts,":[148],"significantly":[152],"affect":[153],"behavior":[155],"output":[157],"validity.":[158],"They":[159],"also":[160],"while":[163],"larger":[164],"generally":[166],"achieve":[167],"higher":[168],"performance,":[169],"these":[170],"gains":[171],"neither":[173],"consistent":[174],"nor":[175],"sufficient":[176],"reliable":[178],"modelling.":[180,238],"These":[181],"findings":[182],"highlight":[183],"fundamental":[184],"limitations":[185],"current":[187],"tasks":[193],"suggest":[195],"improvements":[197],"require":[198],"more":[199,212],"than":[200],"additional":[201],"training":[202],"data":[203],"or":[204],"scaling,":[206],"motivating":[207],"need":[209],"incorporating":[211],"task-specific":[213],"reasoning":[214],"stronger":[216],"grounding":[217],"in":[218],"security":[219],"concepts.":[220],"insights":[223],"invalid":[225],"outputs":[226],"encountered":[227],"suggestions":[230],"tailored":[233],"specifically":[234]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-13T00:00:00"}
