top of page
Data Science Blog
Search
CVE to CWE Mapping: How I Built a Retrieval-and-Rank Pipeline to Map Vulnerabilities to Weakness Categories
A methodology I once used to map audit findings to internal controls, rebuilt from scratch on public security data. Here's how retrieval, semantic reranking, and learning-to-rank work together to map CVEs to CWEs, with 87% top-1 accuracy and a reason attached to every prediction.
Hriday Saha
Jul 124 min read
bottom of page