{"id":"W1601009504","doi":"10.1007/978-3-540-74320-0_3","title":"Comparing Anomaly Detection Techniques for HTTP","year":2007,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":132,"is_retracted":false,"has_abstract":false,"ca_institutions":"Carleton University","funders":"Defense Advanced Research Projects Agency; Mitacs; National Science Foundation","keywords":"Computer science; Anomaly detection; Exploit; Anomaly (physics); Protocol (science); Data mining; Server; Web server; Hypertext Transfer Protocol; Computer security; The Internet; Computer network; World Wide Web","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.003832968,0.0009691179,0.001103886,0.003735633,0.0006266578,0.00125422,0.001965133,0.001516286,0.001463327],"category_scores_gemma":[0.01896863,0.0002855705,0.0009447933,0.002484603,0.0005109466,0.002916626,0.00108667,0.001289235,0.0006503568],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007235245,"about_ca_system_score_gemma":0.0006225891,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002431453,"about_ca_topic_score_gemma":0.002194961,"domain_scores_codex":[0.9957064,0.0009364063,0.0003378085,0.000495993,0.002151964,0.000371471],"domain_scores_gemma":[0.9737856,0.01819145,0.0008115939,0.002163925,0.004691451,0.0003560157],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.004048692,0.0007340423,0.037848,0.0003851532,0.0005437796,0.0002585831,0.0002383972,0.07405865,0.02849569,0.004052115,0.005533365,0.8438035],"study_design_scores_gemma":[0.00008587394,0.001004874,0.01489755,0.00002900392,0.0002902777,0.0008183931,0.0003083526,0.930651,0.04135909,0.00781792,0.00267643,0.00006119934],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.5814047,0.002863271,0.4029587,0.000418759,0.0005471049,0.0001365429,0.0005677319,0.007334827,0.003768414],"genre_scores_gemma":[0.8541939,0.0005999433,0.141344,0.00006140253,0.0001390044,0.0000491342,0.001221355,0.0003443187,0.002046936],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.003832968,"threshold_uncertainty_score":0.02027088,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02860621986741385,"score_gpt":0.2617861153762446,"score_spread":0.2331798955088308,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}