{"id":"W1685415006","doi":"10.1007/978-3-540-30582-8_7","title":"Experience with Engineering a Network Forensics System","year":2005,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Victoria","funders":"","keywords":"Network forensics; Computer science; Network security; Field (mathematics); Digital forensics; Computer forensics; Computer security; Network packet; State (computer science); Network monitoring; Criminal investigation; Data science; Computer network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0004197224,0.0006301175,0.0005549331,0.0005502576,0.0002383155,0.0004056187,0.002770627,0.0002881091,0.000004285007],"category_scores_gemma":[0.00003613474,0.0005568553,0.00009250025,0.0009081257,0.0004113506,0.0009218766,0.001033834,0.0008298336,0.00001482617],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000698434,"about_ca_system_score_gemma":0.0002722401,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000007656257,"about_ca_topic_score_gemma":0.00003802622,"domain_scores_codex":[0.9961075,0.00001383956,0.000502498,0.001559336,0.0009644904,0.0008524054],"domain_scores_gemma":[0.9973097,0.0002495373,0.0003074624,0.001675181,0.0002646027,0.000193453],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000006223849,0.000005381296,0.00001163576,0.00004994006,0.00000906778,0.0001541123,0.0005040463,0.434123,0.00003730783,0.05222156,0.000009638171,0.5128681],"study_design_scores_gemma":[0.0002605256,0.0003811818,0.00003305786,0.001790169,0.00001081548,0.0008006891,4.983816e-7,0.9656,0.005096206,0.01586525,0.008682879,0.00147871],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.00002022597,0.0003374426,0.9954579,0.0001064421,0.001100012,0.0004587719,0.000001501838,0.001369602,0.001148062],"genre_scores_gemma":[0.09209777,0.0000156993,0.9065768,0.0003618948,0.0007390297,0.00004019756,0.000001040846,0.00005382007,0.0001137118],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.531477,"threshold_uncertainty_score":0.9996883,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.00785900703950436,"score_gpt":0.2118870169348828,"score_spread":0.2040280098953784,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}