Originally published at norvik.tech

Introduction

Explore the benefits of using smaller models for vulnerability research, focusing on cost efficiency and effectiveness in identifying zero-day vulnerabili…

Understanding the Cost-to-Recall Concept in Vulnerability Research

The concept of cost-to-recall is pivotal in vulnerability research, especially when comparing different model sizes. It examines the balance between the probability of detecting vulnerabilities and the associated costs of running those models. A recent study indicated that a smaller model, with a lower probability of detection (50%), can outperform a larger model (90% probability) when it costs significantly less—about ten times less.…