This research presents a novel approach to enhancing cybersecurity automation through instruction-level fine-tuning of the Gemma-2B language model, tailored specifically for cybersecurity operations and adversarial log generation. By aligning model behavior with the MITRE ATT&CK framework, the fine-tuned model learns to simulate and respond to a wide range of adversarial tactics, techniques, and procedures (TTPs). Our methodology involves curating a domain-specific instruction set focused on threat detection, log synthesis, and adversarial behavior emulation. The goal is to enable realistic, context-aware log generation and proactive threat simulation that improves security system robustness and analyst preparedness. Evaluation metrics include accuracy in tactic alignment, log realism, and detection efficacy in red team-blue team simulations. The results demonstrate that fine-tuned Gemma-2B significantly augments the fidelity of synthetic cybersecurity logs and enhances the automation of threat-informed defense strategies.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Instruction-Level Fine-Tuning of Gemma-2B for Cybersecurity and Synthetic Log Generation Aligned with MITRE Adversarial Tactics, Techniques, and Common Knowledge

  • Vasanth Iyer,
  • Vamshikrishna Challa,
  • Pronab Mohanty,
  • Yashas Hariprasad,
  • S. S. Iyengar

摘要

This research presents a novel approach to enhancing cybersecurity automation through instruction-level fine-tuning of the Gemma-2B language model, tailored specifically for cybersecurity operations and adversarial log generation. By aligning model behavior with the MITRE ATT&CK framework, the fine-tuned model learns to simulate and respond to a wide range of adversarial tactics, techniques, and procedures (TTPs). Our methodology involves curating a domain-specific instruction set focused on threat detection, log synthesis, and adversarial behavior emulation. The goal is to enable realistic, context-aware log generation and proactive threat simulation that improves security system robustness and analyst preparedness. Evaluation metrics include accuracy in tactic alignment, log realism, and detection efficacy in red team-blue team simulations. The results demonstrate that fine-tuned Gemma-2B significantly augments the fidelity of synthetic cybersecurity logs and enhances the automation of threat-informed defense strategies.