SIEM Rule Conversion on Splunk to RSA NetWitness
62.8CodeBLEUARuleCon
Evaluation results
| Method | Links | |||
|---|---|---|---|---|
| ARuleConLarge Language Model=GPT-52026.04 | 62.8 | 73.2 | 68.4 | |
| ARuleConLarge Language Model=DeepSeek-V32026.04 | 60 | 70.4 | 65.7 | |
| ARuleConLarge Language Model=LLaMa-32026.04 | 58.2 | 67.1 | 62.6 | |
| BaselineLarge Language Model=GPT-52026.04 | 57.6 | 67.9 | 63.1 | |
| BaselineLarge Language Model=DeepSeek-V32026.04 | 55.1 | 65.2 | 60.5 | |
| BaselineLarge Language Model=LLaMa-32026.04 | 53 | 61.9 | 57.2 |