{"id":"W1526821023","doi":"10.1007/978-3-642-04843-2_32","title":"Detecting Network Anomalies Using CUSUM and EM Clustering","year":2009,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":29,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Victoria; University of New Brunswick","funders":"","keywords":"CUSUM; Intrusion detection system; Computer science; Anomaly detection; Cluster analysis; Data mining; Constant false alarm rate; False alarm; Anomaly-based intrusion detection system; False positive paradox; Network security; Parametric statistics; Artificial intelligence; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0009410271,0.0004836269,0.0004814212,0.0005208362,0.0007140176,0.0009968657,0.001396082,0.0003487293,0.000008519371],"category_scores_gemma":[0.00004081846,0.0004806712,0.00009249214,0.0006537738,0.0003174174,0.0008419293,0.001531745,0.0008826117,0.000005824003],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002143146,"about_ca_system_score_gemma":0.0001552016,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00001960863,"about_ca_topic_score_gemma":0.0004562237,"domain_scores_codex":[0.9967728,0.00004708906,0.0004959195,0.001327564,0.0006025492,0.0007541139],"domain_scores_gemma":[0.9983452,0.0002569587,0.0003089309,0.0008049011,0.0001251378,0.000158882],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000004636549,0.000004741643,0.00001976803,0.00001881973,0.000004722812,0.00003670799,0.0004987423,0.1372162,0.0000693313,0.001239537,0.000003365047,0.8608835],"study_design_scores_gemma":[0.0001349134,0.0001621628,0.00007745918,0.0005479795,0.000007220933,0.0002691543,2.50741e-7,0.9237021,0.0003303429,0.07306205,0.001161293,0.0005450609],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.001647033,0.00126393,0.9934978,0.0001342608,0.002032982,0.0002483355,5.6936e-7,0.0002008228,0.0009742327],"genre_scores_gemma":[0.233585,0.0001490504,0.7621008,0.001715723,0.002250941,0.000003108964,0.000001018927,0.00004357831,0.0001508569],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.8603384,"threshold_uncertainty_score":0.9997645,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0183445220453343,"score_gpt":0.2345511145544842,"score_spread":0.2162065925091499,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}