Primus: A Pioneering Collection of Open-Source Datasets for Cybersecurity LLM Training
On the map: Knowledge distillation → Knowledge distillation for LLMs
Abstract (arXiv)
Large Language Models (LLMs) have shown remarkable advancements in specialized fields such as finance, law, and medicine. However, in cybersecurity, we have noticed a lack of open-source datasets, with a particular lack of high-quality cybersecurity pretraining corpora, even though much research indicates that LLMs acquire their knowledge during pretraining. To address this, we present a comprehensive suite of datasets covering all major training stages, including pretraining, instruction fine-tuning, and reasoning distillation with cybersecurity-specific self-reflection data. Extensive ablation studies demonstrate their effectiveness on public cybersecurity benchmarks. In particular, continual pre-training on our dataset yields a 15.9% improvement in the aggregate score, while reasoning distillation leads to a 15.8% gain in security certification (CISSP). We will release all datasets and trained cybersecurity LLMs under the ODC-BY and MIT licenses to encourage further research in the community. For access to all datasets and model weights, please refer to https://huggingface.co/collections/trendmicro-ailab/primus-67b1fd27052b802b4af9d243.
Key facts. Cited by 23 papers in the map (data through 14 Oct 2026). Placed in Knowledge distillation for LLMs, one of 12 directions in Knowledge distillation. Builds on 35 of its 58 references that are in the map. First posted on arXiv 16 Feb 2025.
Builds on
35 of 58 references.
Closest ancestors · 1
Same direction, newest first
Other references · 34
- 2018BERT: Pre-training of Deep Bidirectional Transformers for Language Understandingcited by 40,399
- 2020Language Models are Few-Shot Learnerscited by 32,419
- 2022Training language models to follow instructions with human feedbackcited by 15,971
- 2024The Llama 3 Herd of Modelscited by 14,715
- 2019Exploring the Limits of Transfer Learning with a Unified Text-to-Text Transformercited by 14,599
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 14,132
- 2023Judging LLM-as-a-Judge with MT-Bench and Chatbot Arenacited by 8,626
- 2020Measuring Massive Multitask Language Understandingcited by 7,963
- 2017On Calibration of Modern Neural Networkscited by 4,960
- 2020Don't Stop Pretraining: Adapt Language Models to Domains and Taskscited by 1,565
- 2024LlamaFactory: Unified Efficient Fine-Tuning of 100+ Language Modelscited by 1,464
- 2025s1: Simple test-time scalingcited by 1,341
22 more
- 2019TinyBERT: Distilling BERT for Natural Language Understandingcited by 1,167
- 2024The FineWeb Datasets: Decanting the Web for the Finest Text Data at Scalecited by 1,160
- 2023TIES-Merging: Resolving Interference When Merging Modelscited by 818
- 2021Deduplicating Training Data Makes Language Models Bettercited by 714
- 2023Language Models are Super Mario: Absorbing Abilities from Homologous Models as a Free Lunchcited by 694
- 2023Instruction Tuning for Large Language Models: A Surveycited by 623
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 565
- 2019CCNet: Extracting High Quality Monolingual Datasets from Web Crawl Datacited by 548
- 2024BioMistral: A Collection of Open-Source Pretrained Large Language Models for Medical Domainscited by 301
- 2024Does Fine-Tuning LLMs on New Knowledge Encourage Hallucinations?cited by 232
- 2023OpenAGI: When LLM Meets Domain Expertscited by 197
- 2019LAMOL: LAnguage MOdeling for Lifelong Language Learningcited by 160
- 2024Nemotron-CC: Transforming Common Crawl into a Refined Long-Horizon Pretraining Datasetcited by 160
- 2024Continual Learning for Large Language Models: A Surveycited by 147
- 2024SaulLM-7B: A pioneering Large Language Model for Lawcited by 142
- 2023Large Language Models in Law: A Surveycited by 128
- 2023A Survey of Large Language Models in Medicine: Progress, Application, and Challengecited by 124
- 2024SaySelf: Teaching LLMs to Express Confidence with Self-Reflective Rationalescited by 105
- 2024Reinforcement Learning Enhanced LLMs: A Surveycited by 71
- 2022SecureBERT: A Domain-Specific Language Model for Cybersecuritycited by 60
- 2024CLAP: Learning Transferable Binary Code Representations with Natural Language Supervisioncited by 17
- 2022DexBERT: Effective, Task-Agnostic and Fine-grained Representation Learning of Android Bytecodecited by 6
Built on by
Citing papers per year: 2025: 10; 2026: 13.
23 papers.
Sort:
By area:
- 2025Llama-3.1-FoundationAI-SecurityLLM-Base-8B Technical Reportcited by 31
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Reportcited by 23
- 2025Rethinking Multilingual Continual Pretraining: Data Mixing for Adapting LLMs Across Languages and Resourcescited by 10
- 2026Golden Goose: A Simple Trick to Synthesize Unlimited RLVR Tasks from Unverifiable Internet Textcited by 10
- 2026Llama-3.1-FoundationAI-SecurityLLM-Reasoning-8B Technical Reportcited by 7
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understandingcited by 4
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokenscited by 4
- 2025Careful Queries, Credible Results: Teaching RAG Models Advanced Web Search Tools with Reinforcement Learningcited by 4
- 2025Toward Cybersecurity-Expert Small Language Modelscited by 4
- 2025ELTEX: A Framework for Domain-Driven Synthetic Data Generationcited by 2
- 2025Through the Judge's Eyes: Inferred Thinking Traces Improve Reliability of LLM Raterscited by 2
- 2026Antares: Foundation Models for Agentic Vulnerability Localizationcited by 2
11 more
- 2026RedSage: A Cybersecurity Generalist LLMcited by 1
- 2026To Defend Against Cyber Attacks, We Must Teach AI Agents to Hackcited by 1
- 2026GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Constructioncited by 1
- 2026Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)cited by 1
- 2026Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarkscited by 1
- 2025How Good LLM-Generated Password Policies Are?cited by 0
- 2026Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMscited by 0
- 2026XekRung Technical Reportcited by 0
- 2026Structured but Fragile: On the Limits of LLMs in Cybersecurity Decision-Makingcited by 0
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wildcited by 0
- 2026MiST: Mid-Training LLMs for Cybersecuritycited by 0
- 2026MiST: Mid-Training LLMs for Cybersecurity16 Sep 2026
- 2026Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarks8 Sep 2026
- 2026CyberFactory: Scaling Cyber Security Capabilities with Instances from the Wild24 Aug 2026
- 2026Structured but Fragile: On the Limits of LLMs in Cybersecurity Decision-Making21 Aug 2026
- 2026Trident : How to Break Deep Reinforcement Learning Cyber Defenses (Agentic)5 Aug 2026
- 2026Antares: Foundation Models for Agentic Vulnerability Localization3 Aug 2026
- 2026GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction15 May 2026
- 2026XekRung Technical Report30 Apr 2026
- 2026Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMs16 Mar 2026
- 2026To Defend Against Cyber Attacks, We Must Teach AI Agents to Hack1 Feb 2026
- 2026Golden Goose: A Simple Trick to Synthesize Unlimited RLVR Tasks from Unverifiable Internet Text30 Jan 2026
- 2026RedSage: A Cybersecurity Generalist LLM29 Jan 2026
11 more
- 2026Llama-3.1-FoundationAI-SecurityLLM-Reasoning-8B Technical Report28 Jan 2026
- 2025Through the Judge's Eyes: Inferred Thinking Traces Improve Reliability of LLM Raters29 Oct 2025
- 2025Toward Cybersecurity-Expert Small Language Models15 Oct 2025
- 2025Careful Queries, Credible Results: Teaching RAG Models Advanced Web Search Tools with Reinforcement Learning11 Aug 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Report1 Aug 2025
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokens30 Jun 2025
- 2025How Good LLM-Generated Password Policies Are?10 Jun 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-Base-8B Technical Report28 Apr 2025
- 2025Rethinking Multilingual Continual Pretraining: Data Mixing for Adapting LLMs Across Languages and Resources5 Apr 2025
- 2025ELTEX: A Framework for Domain-Driven Synthetic Data Generation19 Mar 2025
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understanding5 Mar 2025
- 2025Rethinking Multilingual Continual Pretraining: Data Mixing for Adapting LLMs Across Languages and Resourcescited by 10
- 2026Golden Goose: A Simple Trick to Synthesize Unlimited RLVR Tasks from Unverifiable Internet Textcited by 10
- 2026Llama-3.1-FoundationAI-SecurityLLM-Reasoning-8B Technical Reportcited by 7
- 2025Through the Judge's Eyes: Inferred Thinking Traces Improve Reliability of LLM Raterscited by 2
- 2026Golden Goose: A Simple Trick to Synthesize Unlimited RLVR Tasks from Unverifiable Internet Text30 Jan 2026
- 2026Llama-3.1-FoundationAI-SecurityLLM-Reasoning-8B Technical Report28 Jan 2026
- 2025Through the Judge's Eyes: Inferred Thinking Traces Improve Reliability of LLM Raters29 Oct 2025
- 2025Rethinking Multilingual Continual Pretraining: Data Mixing for Adapting LLMs Across Languages and Resources5 Apr 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-Base-8B Technical Reportcited by 31
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Reportcited by 23
- 2025AttackSeqBench: Benchmarking the Capabilities of LLMs for Attack Sequences Understandingcited by 4
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokenscited by 4
- 2025Toward Cybersecurity-Expert Small Language Modelscited by 4
- 2026RedSage: A Cybersecurity Generalist LLMcited by 1
- 2026GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Constructioncited by 1
- 2026Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarkscited by 1
- 2025How Good LLM-Generated Password Policies Are?cited by 0
- 2026Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMscited by 0
- 2026XekRung Technical Reportcited by 0
- 2026Structured but Fragile: On the Limits of LLMs in Cybersecurity Decision-Makingcited by 0
12 most cited of 13 All 13 (JSON)
- 2026MiST: Mid-Training LLMs for Cybersecurity16 Sep 2026
- 2026Benchmark Scores Are Pipeline-Dependent: A Reliability Audit of Cybersecurity LLM Benchmarks8 Sep 2026
- 2026Structured but Fragile: On the Limits of LLMs in Cybersecurity Decision-Making21 Aug 2026
- 2026GRID: Graph Representation of Intelligence Data for Security Text Knowledge Graph Construction15 May 2026
- 2026XekRung Technical Report30 Apr 2026
- 2026Fine-tuning RoBERTa for CVE-to-CWE Classification: A 125M Parameter Model Competitive with LLMs16 Mar 2026
- 2026RedSage: A Cybersecurity Generalist LLM29 Jan 2026
- 2025Toward Cybersecurity-Expert Small Language Models15 Oct 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-8B-Instruct Technical Report1 Aug 2025
- 2025Less Data, More Security: Advancing Cybersecurity LLMs Specialization via Resource-Efficient Domain-Adaptive Continuous Pre-training with Minimal Tokens30 Jun 2025
- 2025How Good LLM-Generated Password Policies Are?10 Jun 2025
- 2025Llama-3.1-FoundationAI-SecurityLLM-Base-8B Technical Report28 Apr 2025
12 newest of 13 All 13 (JSON)
Similar, not cited
Close in wording, no citation either way
- 2024CyberMetric: A Benchmark Dataset based on Retrieval-Augmented Generation for Evaluating LLMs in Cybersecurity Knowledge
- 2024SecBench: A Comprehensive Multi-Dimensional Benchmarking Dataset for LLMs in Cybersecurity
- 2026LLM Unlearning for Cyber Defense: A Survey on Methods, Challenges, and Emerging Threats
- 2025Large Language Models in Cybersecurity: Applications, Vulnerabilities, and Defense Techniques
- 2026CurricuLLM: Designing Personalized and Workforce-Aligned Cybersecurity Curricula Using Fine-Tuned LLMs
- 2024Ollabench: Evaluating LLMs' Reasoning for Human-centric Interdependent Cybersecurity
- 2026LLM4Trust: Exploring the Capabilities of Large Language Models for Trust Evaluation
- 2025AthenaBench: A Dynamic Benchmark for Evaluating LLMs in Cyber Threat Intelligence