{"id":"W1484827535","doi":"10.1109/pacrim.2005.1517326","title":"An unsupervised approach for detecting DDOS attacks based on traffic-based metrics","year":2005,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria","funders":"","keywords":"Denial-of-service attack; Computer science; Application layer DDoS attack; Trinoo; Anomaly detection; Spoofing attack; Intrusion detection system; TRACE (psycholinguistics); Mixture model; Outlier; Computer security; Data mining; Artificial intelligence; The Internet","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0007207923,0.0001962201,0.0001825527,0.0003718128,0.0003513081,0.0002394662,0.0007018196,0.0001458887,0.00004597959],"category_scores_gemma":[0.0001020908,0.0001765141,0.0001401426,0.001104727,0.00002147733,0.0004517739,0.00002854196,0.0002043514,0.00001565766],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008832011,"about_ca_system_score_gemma":0.00006625613,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000008287343,"about_ca_topic_score_gemma":0.0000241771,"domain_scores_codex":[0.9982669,0.0001130689,0.0002792606,0.0005896469,0.0003645294,0.0003866291],"domain_scores_gemma":[0.9986266,0.0003192175,0.0001062539,0.0006644843,0.0001197344,0.0001637161],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005517127,0.0003679352,0.00001520325,0.00001778306,0.00000445558,5.14434e-7,0.00008915605,0.5289888,0.0004261271,0.0007706145,0.0003270047,0.4689372],"study_design_scores_gemma":[0.001031286,0.0006884946,0.00003325718,0.000007119877,0.000006285934,0.000001343393,0.00001881572,0.9688092,0.02476123,0.00002619504,0.00437472,0.0002419969],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03430602,0.0000175682,0.9625008,0.0004145118,0.0001984079,0.0004559554,0.000001922243,0.0005668496,0.001537991],"genre_scores_gemma":[0.6954105,7.66142e-7,0.3024611,0.001815175,0.0002123938,0.00004936238,0.000007103715,0.00001343251,0.00003015701],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.6611044,"threshold_uncertainty_score":0.7198036,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0296651516701782,"score_gpt":0.2641101213344465,"score_spread":0.2344449696642683,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}