{"id":"W1526821023","doi":"10.1007/978-3-642-04843-2_32","title":"Detecting Network Anomalies Using CUSUM and EM Clustering","year":2009,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":29,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Victoria; University of New Brunswick","funders":"","keywords":"CUSUM; Intrusion detection system; Computer science; Anomaly detection; Cluster analysis; Data mining; Constant false alarm rate; False alarm; Anomaly-based intrusion detection system; False positive paradox; Network security; Parametric statistics; Artificial intelligence; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002153819,0.001758221,0.001812177,0.00423764,0.0009945541,0.001240752,0.002168458,0.001394761,0.0009463915],"category_scores_gemma":[0.008830452,0.0007281056,0.001133994,0.003079962,0.0006964281,0.001817084,0.001132889,0.001515851,0.0006288133],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001114041,"about_ca_system_score_gemma":0.0008113096,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006525272,"about_ca_topic_score_gemma":0.006822634,"domain_scores_codex":[0.9987071,0.0003585088,0.00008302991,0.0003078235,0.0004078555,0.000135786],"domain_scores_gemma":[0.9964002,0.00194867,0.0002827691,0.0003797831,0.0008839637,0.0001045526],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0006395276,0.0001718919,0.01077559,0.0001773385,0.0002857561,0.0003795623,0.0002614427,0.4268985,0.01506631,0.0106329,0.007897421,0.5268137],"study_design_scores_gemma":[0.000004389912,0.0000214357,0.0006747628,0.000004787908,0.00001504881,0.00007269227,0.00002350682,0.9935649,0.002260577,0.002832456,0.0005150868,0.0000103604],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.0255324,0.0003234442,0.9719721,0.0001194452,0.00008535368,0.00004676706,0.00007320083,0.001287627,0.0005596727],"genre_scores_gemma":[0.3610704,0.0003129203,0.6355145,0.00008453069,0.0001333958,0.0001069779,0.0005649343,0.000357125,0.00185527],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.006525272,"threshold_uncertainty_score":0.01297462,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0183445220453343,"score_gpt":0.2345511145544842,"score_spread":0.2162065925091499,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}