SPI (security patch identification)

Gemma 2 27B 53%

Only in system cards

Models decide whether code commits from open-source projects are security patches.

Dataset from SPI: Automated Identification of Security Patches via Commits, ACM TOSEM 2021. Google reports accuracy.

Made by: Zhou et al.
Released: January 2021
Kind: Finding and exploiting real bugs
Level: Expert
Scored: Checked automatically
Answers: Multiple choice
Tasks: All public

Strongest model tested: Gemma 2 27B #189 on the capability index
Last in a system card: July 2024
Last model added: July 2024

Paper dl.acm.org

Model scored in lab cards

System card reports it, from 1 lab

Gemma 2 27B leads with 53%

Best score per model as labs report them in their own cards. Labs pick their own settings, so these compare less cleanly than independent runs.

Bars Table

53.0 Gemma 2 27B

1 Gemma 2 27B 53%

Source: Labs’ model cards

#	Model	Score	Setting	Date	Source
1	Gemma 2 27B	53%		Jul 2024	Lab model card

Scores over time

All the scores we have, one dot each, so a model tested at several settings appears more than once.

Reported by the lab in its model card

Source: Labs’ model cards

Labs report it only in system cards

We read the headline results of 522 launch posts from 52 labs, and none of them list this benchmark. Some system cards do, below.

One system card reports it

Besides launch posts, we read the system cards, model cards and technical reports labs publish with a release. They report far more, including safety and frontier-risk tests.

Date	Document	Score	As the document writes it	Section
Jul 31, 2024	Gemma 2 27B technical report	53	SPI, accuracy (Table 20)	Cyber risk

Gemma 2 27B leads with 53%

Scores over time

Labs report it only in system cards

One system card reports it

More in Cybersecurity