mlsanityData to 14 Oct 2026

Security Document Classification with a Fine-Tuned Local Large Language Model: Benchmark Data and an Open-Source System

arXiv 2605.20368 ↗First posted 19 May 2026cs.CR cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

Organizations that scan documents for sensitive information face a practical problem. Cloud services require data to be sent to external infrastructure, while rule-based tools often miss threats that depend on context. This study presents TorchSight, an open-source local system for security document classification built around a fine-tuned Qwen 3.5 27B model. The model was trained on 78,358 samples from 13 permissively licensed sources and GPT-4 synthetic data covering seven security categories and 51 subcategories. In the main evaluation on 1,000 documents, the model reached 95.0% category-level accuracy (95% confidence interval: 93.5-96.2). The tested commercial models scored 75.4-79.9% under the same prompting protocol. On a separate external set of 500 held-out samples, the model reached 93.8% accuracy, which suggests that performance extends beyond the main benchmark, although the margin depends on dataset composition and difficult boundary cases. The results show that a fine-tuned local model can support accurate security document classification while keeping document processing under local control.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 10 of its 32 references that are in the map. First posted on arXiv 19 May 2026.

Builds on

10 of 32 references.

References · 10

  1. 2023GPT-4 Technical Reportcited by 18,396
  2. 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,380
  3. 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
  4. 2023Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injectioncited by 1,443
  5. 2020Dos and Don'ts of Machine Learning in Computer Securitycited by 102
  6. 2020Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attackscited by 61
  7. 2022SecureBERT: A Domain-Specific Language Model for Cybersecuritycited by 60
  8. 2024LLM4Vuln: A Unified Evaluation Framework for Decoupling and Enhancing LLMs' Vulnerability Reasoningcited by 59
  9. 2025Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineeringcited by 15
  10. 2025Fine-tuning of Large Language Models for Domain-Specific Cybersecurity Knowledgecited by 1

Built on by

Not cited yet.