{"id":"W1484827535","doi":"10.1109/pacrim.2005.1517326","title":"An unsupervised approach for detecting DDOS attacks based on traffic-based metrics","year":2005,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria","funders":"","keywords":"Denial-of-service attack; Computer science; Application layer DDoS attack; Trinoo; Anomaly detection; Spoofing attack; Intrusion detection system; TRACE (psycholinguistics); Mixture model; Outlier; Computer security; Data mining; Artificial intelligence; The Internet","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001068333,0.0008890633,0.00102953,0.004546876,0.000460564,0.001075114,0.001283707,0.0008937236,0.0003140353],"category_scores_gemma":[0.004699757,0.0003236746,0.0005203992,0.002167366,0.0007148628,0.001486757,0.0007057764,0.0007434818,0.0002851482],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007061441,"about_ca_system_score_gemma":0.0008405829,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001702981,"about_ca_topic_score_gemma":0.001734858,"domain_scores_codex":[0.9986988,0.0002633284,0.0001171593,0.0003160356,0.0005344825,0.00007018672],"domain_scores_gemma":[0.9977117,0.0006470999,0.0003648245,0.0002745354,0.0008903274,0.000111621],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000242574,0.0005326899,0.03120457,0.000209799,0.0002161421,0.0002733319,0.0003668264,0.1187519,0.05920668,0.0166829,0.002652046,0.7696606],"study_design_scores_gemma":[0.00001125096,0.0001088824,0.006372799,0.00001087397,0.00002695653,0.0002951328,0.00005074901,0.9734825,0.01036763,0.007259491,0.001968165,0.00004554525],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.03517966,0.000118795,0.9624059,0.0000846938,0.00003027356,0.0001090668,0.0001070329,0.001296093,0.0006684872],"genre_scores_gemma":[0.4593081,0.0001750792,0.5386295,0.00005279555,0.00006648141,0.0002716453,0.0004883589,0.0001282409,0.0008797946],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.004546876,"threshold_uncertainty_score":0.005649984,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0296651516701782,"score_gpt":0.2641101213344465,"score_spread":0.2344449696642683,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}