{"id":"W1976146154","doi":"10.1145/1134760.1134765","title":"Using VMM-based sensors to monitor honeypots","year":2006,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":57,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Honeypot; Computer science; Operating system; Hypervisor; Virtualization; Intrusion detection system; Overhead (engineering); Virtual machine; System monitoring; Exploit; Embedded system; Trusted computing base; Real-time computing; Cloud computing; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001114552,0.0005737634,0.0005632299,0.0008763691,0.000302728,0.0008811061,0.0008787576,0.0005235249,0.0005988714],"category_scores_gemma":[0.005653571,0.000449282,0.0002236649,0.0004641823,0.0003638739,0.001567745,0.0006696268,0.0005932788,0.0002055001],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003919536,"about_ca_system_score_gemma":0.000257647,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002994539,"about_ca_topic_score_gemma":0.0003732019,"domain_scores_codex":[0.9981202,0.0005790843,0.0001498601,0.0003143504,0.0006791354,0.0001573312],"domain_scores_gemma":[0.9946062,0.001921916,0.0009855506,0.001339076,0.0008920201,0.0002552758],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001774074,0.0004794448,0.07229614,0.000616587,0.0004597699,0.000647843,0.0009783873,0.04789063,0.4405245,0.008007228,0.0058151,0.4205105],"study_design_scores_gemma":[0.0001386836,0.001293523,0.03426957,0.0001111234,0.0002394309,0.001282176,0.0001551527,0.4959538,0.4443623,0.004376724,0.01766036,0.0001572579],"study_design_candidate":"bench_or_experimental","study_design_consensus":"bench_or_experimental","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6624799,0.0009163044,0.3213176,0.0002717543,0.0002056749,0.0002262671,0.0002294006,0.01090724,0.003445794],"genre_scores_gemma":[0.9429745,0.000105163,0.05615383,0.00006724816,0.0000220726,0.00007329897,0.00009984958,0.00009541772,0.00040864],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.001114552,"threshold_uncertainty_score":0.005894363,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02076178069222624,"score_gpt":0.2503304631067169,"score_spread":0.2295686824144906,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}