Automated Compliance Mapping in Cloud Security with Domain-Adapted Sentence Transformers
Mapping cloud security controls to technical metrics is currently a manual process. This paper proposes domain adaptation of Sentence Transformer models to automate it. We build a training corpus of 3,499 semantic pairs from five European security standards and a set of technical metrics, then expand it via back-translation and LLM-based paraphrasing to up to 13,996 samples across four scenarios. We fine-tune five architectures and evaluate their performance on two independent tasks: control-to-metric and cross-standard controls association. All fine-tuned models outperform their zero-shot bas
Lineage graph
Paper → model → repo connections mined from source citations (Tier-1 exact match).
Why these links exist
Every edge carries a method, confidence, and the source snippet that justified it — so bad links are debuggable.
- PossiblePossibly related (embedding) · 52%huhusmang/Awesome-LLMs-for-Vulnerability-Detection →
- PossiblePossibly related (embedding) · 46%IEEE Rolls Out Large Language Models Virtual Training Course →
- PossiblePossibly related (embedding) · 46%Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers →
- PossiblePossibly related (embedding) · 45%FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 2 of 2) - Security Boulevard →
- LinkedLinked via arxiv author · 85%John Bianchi →
“Automated Compliance Mapping in Cloud Security with Domain-Adapted Sentence Transformers”
- LinkedLinked via arxiv author · 85%Luca Petrillo →
“Automated Compliance Mapping in Cloud Security with Domain-Adapted Sentence Transformers”
- LinkedLinked via arxiv author · 85%Fabio Martinelli →
“Automated Compliance Mapping in Cloud Security with Domain-Adapted Sentence Transformers”
- LinkedLinked via arxiv author · 85%Marinella Petrocchi →
“Automated Compliance Mapping in Cloud Security with Domain-Adapted Sentence Transformers”