Linking Common Vulnerabilities and Exposures to the MITRE ATT&CK Framework: A Self-Distillation Approach

This paper bridges two separate cybersecurity resources: the CVE list of known software vulnerabilities and the MITRE ATT&CK framework of attacker tactics and defenses. The authors build a language model called CVET that automatically tags each vulnerability with one of ten ATT&CK tactics, using a self-distillation technique on top of RoBERTa. This lets security teams quickly attach likely mitigation context to the vulnerabilities they track.