{"id":"W1601009504","doi":"10.1007/978-3-540-74320-0_3","title":"Comparing Anomaly Detection Techniques for HTTP","year":2007,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":132,"is_retracted":false,"has_abstract":false,"ca_institutions":"Carleton University","funders":"Defense Advanced Research Projects Agency; Mitacs; National Science Foundation","keywords":"Computer science; Anomaly detection; Exploit; Anomaly (physics); Protocol (science); Data mining; Server; Web server; Hypertext Transfer Protocol; Computer security; The Internet; Computer network; World Wide Web","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001460405,0.0004550068,0.0004845059,0.001138737,0.0004719863,0.0005167446,0.002041968,0.0004742179,0.000007883145],"category_scores_gemma":[0.00006358649,0.00045235,0.0001804534,0.0006741917,0.0003776534,0.0007380949,0.0007878161,0.0008023888,0.00001717749],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004041016,"about_ca_system_score_gemma":0.0001731799,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003945994,"about_ca_topic_score_gemma":0.0005142382,"domain_scores_codex":[0.9967077,0.00002234389,0.0005641661,0.001353711,0.0006800626,0.0006719831],"domain_scores_gemma":[0.9978691,0.0003793902,0.0003243563,0.0009714407,0.0003128277,0.0001428548],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001542508,0.00001576812,0.00001339884,0.00003124413,0.000005924471,0.00001075904,0.0001546773,0.001820706,0.0004362444,0.01166512,0.00001065504,0.9858201],"study_design_scores_gemma":[0.000227828,0.0004869183,0.00006447978,0.0003318016,0.000009188695,0.00009776616,8.625469e-8,0.7996078,0.04122022,0.135348,0.02186144,0.0007444097],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.0001518952,0.0002486515,0.9918898,0.0001379432,0.002387828,0.000681135,0.000001430863,0.0004668168,0.004034529],"genre_scores_gemma":[0.3289413,0.00005714382,0.6680518,0.001087275,0.001559631,0.00003296688,0.000003845995,0.00004558646,0.0002204868],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.9850757,"threshold_uncertainty_score":0.9997928,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02860621986741385,"score_gpt":0.2617861153762446,"score_spread":0.2331798955088308,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}