SIEM Rule Conversion on IBM QRadar to RSA NetWitness
68.9CodeBLEUARuleCon
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 68.9 | 81.9 | 56.6 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 65.7 | 79 | 54.3 | |
| BaselineLarge Language Model=GPT-52026.04 | 63.3 | 76.5 | 51.5 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 62.6 | 75.8 | 51.7 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 60.2 | 73.6 | 49.3 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 57.1 | 70.3 | 46.8 |