paulkass's picture
initial commit
88ce038
---
license: apache-2.0
language:
- en
base_model: fdtn-ai/Foundation-Sec-8B
pipeline_tag: text-generation
library_name: transformers
tags:
- security
- llama
- gguf
- quantization
---
# Foundation-Sec-8B-Q8_0-GGUF Model Card
**This model was quantized from [fdtn-ai/Foundation-Sec-8B](https://huggingface.co/fdtn-ai/Foundation-Sec-8B) to an 8-bit (Q8_0) GGUF checkpoint using llama.cpp. It retains the cybersecurity specialization of the original 8-billion-parameter model while reducing the memory footprint from approximately 16GB (BF16) to around 8.54GB (Q8_0) for inference.**
## Model Description
`fdtn-ai/Foundation-Sec-8B-Q8_0-GGUF` is an 8-bit quantized variant of **Foundation-Sec-8B** — an 8B-parameter LLaMA 3.1–based model that was continued-pretrained on a curated corpus of cybersecurity-specific text (e.g., CVEs, threat intel reports, exploit write-ups, compliance guides). The base model was originally released on April 28, 2025 under Apache 2.0, and excels at tasks such as:
- **Threat intelligence summarization** (e.g., summarizing CVE details)
- **Vulnerability classification** (mapping CVEs/CWEs to MITRE ATT&CK)
- **Incident triage assistance** (extracting IoCs, summarizing log data)
- **Red-team simulation prompts** and **security-workflow generation**
Rather than re-uploading or replicating the entire training details, please refer to the original model card for foundational architecture, training data, evaluation results, and known limitations.
## Quantization Details
- **Quantization Scheme:** 8-bit, "Q8_0" (8-bit quantization with minimal precision loss)
- **Toolchain:** Converted via [llama.cpp's export utilities](https://github.com/ggml-org/llama.cpp) (commit `v0.1.81` or newer) to GGUF format.
- **Resulting File Size:** ~ 8.54 GB on disk (raw GGUF blob)
- **Runtime Footprint:**
- Memory: ≈ 8.54 GB of RAM when loaded on CPU with llama.cpp
- **Format:**
- File extension: `.gguf`
- Internally contains:
1. Metadata (architecture, tokenizer vocab, hyperparameters)
2. Vocabulary list (BPE tokens)
3. Weight tensors (for each layer and head) stored in 8-bit quantized form
- Compliant with LlamaCpp Python wrapper (`llama_cpp`) and C++ CLI (`llama.cpp`) inference engines
## How to Use
### Install llama.cpp on Mac
Use Homebrew:
```bash
brew install llama-cpp
```
or install from scratch:
```bash
# Install dependencies
brew install cmake
# Clone and build llama.cpp
git clone https://github.com/ggml-org/llama.cpp.git
cd llama.cpp
make
# Add to PATH (optional)
sudo cp llama-cli /usr/local/bin/
```
### Run the Model
```bash
llama-cli -m foundation-sec-8b-q8_0.gguf -p "CVE-2021-44228 is a remote code execution flaw in Apache Log4j2 via unsafe JNDI lookups (\"Log4Shell\"). The CWE is CWE-502.\n\nCVE-2017-0144 is a remote code execution vulnerability in Microsoft's SMBv1 server (\"EternalBlue\") due to a buffer overflow. The CWE is CWE-119.\n\nCVE-2014-0160 is an information-disclosure bug in OpenSSL's heartbeat extension (\"Heartbleed\") due to out-of-bounds reads. The CWE is CWE-125.\n\nCVE-2017-5638 is a remote code execution issue in Apache Struts 2's Jakarta Multipart parser stemming from improper input validation of the Content-Type header. The CWE is CWE-20.\n\nCVE-2019-0708 is a remote code execution vulnerability in Microsoft's Remote Desktop Services (\"BlueKeep\") triggered by a use-after-free. The CWE is CWE-416.\n\nCVE-2015-10011 is a vulnerability about OpenDNS OpenResolve improper log output neutralization. The CWE is" -n 128
```
## References
1. **Original Model Card:**
[fdtn-ai/Foundation-Sec-8B](https://huggingface.co/fdtn-ai/Foundation-Sec-8B) (April 28, 2025) – continued pretraining of LLaMA 3.1-8B on cybersecurity data.
2. **Llama-cpp GGUF Quantization:**
Ggerganov, J. (2022). _Llama.cpp: Llama inference in pure C/C++/Assembly/GGUF_. GitHub repository.
3. **ZeroQuant:**
Yao, Z. et al. (2022). "ZeroQuant: Efficient and Affordable Post-Training Quantization for Large-Scale Transformers." arXiv: 2206.01861.
4. **SmoothQuant:**
Xiao, G. et al. (2022). "SmoothQuant: Accurate and Efficient Post-Training Quantization for Large Language Models." arXiv: 2211.10438.
**License:** Apache 2.0 (same as base)
**Contact:** For questions about usage, quantization details, or license terms, please open an issue on the Hugging Face repo or contact `[email protected]`.