{"id":"https://openalex.org/W7167796916","doi":"https://doi.org/10.48550/arxiv.2607.07573","title":"Multi-Class vs. Multi-Label BERT for CVE-to-CWE Mapping: How Taxonomy Structure Shapes the Errors","display_name":"Multi-Class vs. Multi-Label BERT for CVE-to-CWE Mapping: How Taxonomy Structure Shapes the Errors","publication_year":2026,"publication_date":"2026-07-08","ids":{"openalex":"https://openalex.org/W7167796916","doi":"https://doi.org/10.48550/arxiv.2607.07573"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2607.07573","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07573","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2607.07573","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5140350855","display_name":"Ana Schwengber Kelm","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kelm, Ana Schwengber","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053116245","display_name":"Christian Bockermann","orcid":"https://orcid.org/0000-0001-6570-0583"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bockermann, Christian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5140354920","display_name":"J\u00f6rg Frochte","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Frochte, J\u00f6rg","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15680000185966492,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.15680000185966492,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.13009999692440033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12262","display_name":"Hate Speech and Cyberbullying Detection","score":0.08649999648332596,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.6510000228881836},{"id":"https://openalex.org/keywords/confusion","display_name":"Confusion","score":0.5784000158309937},{"id":"https://openalex.org/keywords/encoder","display_name":"Encoder","score":0.51419997215271},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.4575999975204468},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4438000023365021},{"id":"https://openalex.org/keywords/hierarchy","display_name":"Hierarchy","score":0.3849000036716461},{"id":"https://openalex.org/keywords/taxonomy","display_name":"Taxonomy (biology)","score":0.3621000051498413}],"concepts":[{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.6510000228881836},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5916000008583069},{"id":"https://openalex.org/C2781140086","wikidata":"https://www.wikidata.org/wiki/Q557945","display_name":"Confusion","level":2,"score":0.5784000158309937},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5540000200271606},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.51419997215271},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.4575999975204468},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4438000023365021},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4198000133037567},{"id":"https://openalex.org/C31170391","wikidata":"https://www.wikidata.org/wiki/Q188619","display_name":"Hierarchy","level":2,"score":0.3849000036716461},{"id":"https://openalex.org/C58642233","wikidata":"https://www.wikidata.org/wiki/Q8269924","display_name":"Taxonomy (biology)","level":2,"score":0.3621000051498413},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3587000072002411},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.33959999680519104},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.3095000088214874},{"id":"https://openalex.org/C156340839","wikidata":"https://www.wikidata.org/wiki/Q2704791","display_name":"Enumeration","level":2,"score":0.28790000081062317},{"id":"https://openalex.org/C91998498","wikidata":"https://www.wikidata.org/wiki/Q1541178","display_name":"Contingency table","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.27570000290870667},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.273499995470047},{"id":"https://openalex.org/C188441871","wikidata":"https://www.wikidata.org/wiki/Q7554146","display_name":"Softmax function","level":3,"score":0.27070000767707825},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.2662999927997589},{"id":"https://openalex.org/C184898388","wikidata":"https://www.wikidata.org/wiki/Q1435712","display_name":"Pairwise comparison","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.2556000053882599},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.25369998812675476}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2607.07573","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07573","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2607.07573","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2607.07573","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.46803614497184753}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Assigning":[0],"Common":[1,7],"Weakness":[2],"Enumeration":[3],"(CWE)":[4],"categories":[5],"to":[6,86,91,164],"Vulnerabilities":[8],"and":[9,32,47,61,72,126],"Exposures":[10],"(CVE)":[11],"records":[12],"remains":[13],"an":[14],"important":[15],"but":[16],"largely":[17],"manual":[18],"step":[19],"in":[20,185],"vulnerability":[21],"analysis.":[22],"We":[23],"study":[24],"this":[25,108],"task":[26],"as":[27,95],"a":[28,37,42,48],"text":[29],"classification":[30],"problem":[31],"compare":[33],"two":[34],"modelling":[35],"choices:":[36],"\\emph{multi-class}":[38],"formulation":[39,50],"that":[40,51,117,139,156,167],"predicts":[41],"single":[43],"CWE":[44,124],"per":[45],"CVE":[46],"\\emph{multi-label}":[49],"allows":[52],"multiple":[53],"assignments.":[54],"Three":[55],"transformer":[56],"encoders":[57,132],"(BERT":[58],"Base,":[59],"SecureBERT,":[60],"CySecBERT)":[62],"are":[63,127],"evaluated":[64],"on":[65,103,110],"three":[66,131],"nested":[67],"label":[68,97],"spaces":[69],"(83,":[70],"47,":[71],"25":[73],"classes).":[74],"Multi-class":[75],"training":[76],"achieves":[77,175],"higher":[78],"macro-F1":[79,161],"across":[80,129],"all":[81,130],"settings,":[82],"although":[83],"the":[84,96,104,111,118,123,140,176,186],"gap":[85,109],"multi-label":[87,105,187],"narrows":[88],"from":[89,162],"21":[90],"2":[92],"percentage":[93],"points":[94],"space":[98],"shrinks.":[99],"Post-hoc":[100],"threshold":[101],"optimisation":[102],"side":[106],"closes":[107],"25-class":[112],"setting.":[113,188],"Confusion":[114],"analysis":[115],"shows":[116],"dominant":[119],"misclassification":[120],"patterns":[121],"follow":[122],"hierarchy":[125],"shared":[128],"(Pearson":[133],"$r":[134],">":[135],"0.92$),":[136],"which":[137],"suggests":[138],"error":[141],"structure":[142],"is":[143],"driven":[144],"more":[145],"by":[146,150],"taxonomy":[147],"design":[148],"than":[149],"encoder":[151],"choice.":[152],"A":[153],"hierarchy-relaxed":[154],"evaluation":[155],"forgives":[157],"within-family":[158],"confusions":[159],"raises":[160],"${\\sim}$81\\%":[163],"${\\sim}$90\\%,":[165],"indicating":[166],"strict":[168],"metrics":[169],"understate":[170],"branch-level":[171],"classifier":[172],"quality.":[173],"CySecBERT":[174],"strongest":[177],"results":[178],"overall,":[179],"with":[180],"statistically":[181],"significant":[182],"gains":[183],"concentrated":[184]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-07-10T00:00:00"}