{"id":"W1685415006","doi":"10.1007/978-3-540-30582-8_7","title":"Experience with Engineering a Network Forensics System","year":2005,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Victoria","funders":"","keywords":"Network forensics; Computer science; Network security; Field (mathematics); Digital forensics; Computer forensics; Computer security; Network packet; State (computer science); Network monitoring; Criminal investigation; Data science; Computer network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005448983,0.0009538297,0.0003919266,0.0008185129,0.002256888,0.002967753,0.001581517,0.001655169,0.006489641],"category_scores_gemma":[0.009909248,0.0004155205,0.0003429763,0.0006542899,0.001521674,0.004280919,0.002043833,0.002286875,0.00221778],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001187148,"about_ca_system_score_gemma":0.001855588,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001781814,"about_ca_topic_score_gemma":0.003445352,"domain_scores_codex":[0.9972447,0.0010453,0.0001308602,0.0002719036,0.001003742,0.0003034854],"domain_scores_gemma":[0.9937882,0.002346248,0.0002086203,0.0009240853,0.001529836,0.001203077],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.000267694,0.002732982,0.007992342,0.000427937,0.00004700548,0.001712628,0.01717566,0.00845868,0.03020539,0.01400463,0.01660805,0.900367],"study_design_scores_gemma":[0.0001653656,0.009763113,0.01276233,0.0008627819,0.0002415106,0.01512725,0.02279462,0.03473665,0.1451225,0.02999528,0.7281699,0.0002586411],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.5559164,0.006395111,0.2773779,0.006294481,0.0007100771,0.0006447931,0.0002035404,0.002624096,0.1498335],"genre_scores_gemma":[0.7380788,0.006656136,0.1728895,0.00114038,0.0002388378,0.000112231,0.0004295809,0.0007408434,0.07971358],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.006489641,"threshold_uncertainty_score":0.0288173,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.00785900703950436,"score_gpt":0.2118870169348828,"score_spread":0.2040280098953784,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}