{"id":"W1976146154","doi":"10.1145/1134760.1134765","title":"Using VMM-based sensors to monitor honeypots","year":2006,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Honeypot; Computer science; Operating system; Hypervisor; Virtualization; Intrusion detection system; Overhead (engineering); Virtual machine; System monitoring; Exploit; Embedded system; Trusted computing base; Real-time computing; Cloud computing; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00009965294,0.00007998355,0.00007452541,0.0001036273,0.0001351593,0.0001186025,0.000231976,0.00004484507,0.00004603776],"category_scores_gemma":[0.000007168162,0.00007390014,0.00003934835,0.0004670293,0.00001087431,0.0002006708,0.0000696676,0.00006166882,0.0001503285],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00003837447,"about_ca_system_score_gemma":0.0000160223,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004297371,"about_ca_topic_score_gemma":0.00004041933,"domain_scores_codex":[0.9992311,0.00003435529,0.0001286185,0.0002275532,0.0001823666,0.0001959797],"domain_scores_gemma":[0.9995543,0.00002919418,0.00002803194,0.0002707873,0.00004995901,0.0000676874],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000731603,0.0004740679,0.001207872,0.00003355636,0.00002000689,0.00009578272,0.0003877284,0.5771161,0.1604915,0.07396317,0.05817233,0.1279647],"study_design_scores_gemma":[0.0001686159,0.00006402727,0.001219616,0.00001298419,0.000002085597,0.000007908188,0.000004796816,0.8708218,0.1143812,0.001399052,0.01173023,0.0001877416],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.404492,0.00001025472,0.5917767,0.0005589426,0.0005099651,0.00007901712,2.989102e-7,0.000196742,0.002376037],"genre_scores_gemma":[0.8832967,3.813878e-7,0.1154442,0.0005627999,0.0002785781,0.000002372489,3.311629e-7,0.000004853311,0.0004098151],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.4788047,"threshold_uncertainty_score":0.301356,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02076178069222624,"score_gpt":0.2503304631067169,"score_spread":0.2295686824144906,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}