{"id":"W2103886421","doi":"10.1109/cnsr.2008.62","title":"Critical Episode Mining in Intrusion Detection Alerts","year":2008,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":10,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Intrusion detection system; Computer science; Denial-of-service attack; Data mining; Set (abstract data type); Computer security; The Internet; World Wide Web","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0001990586,0.00008702931,0.000102688,0.000167534,0.0002056205,0.00004337485,0.0002298749,0.00008892031,0.0000858595],"category_scores_gemma":[0.0001317468,0.00008295761,0.0000358842,0.0005099217,0.00004922477,0.0007286125,0.0001504155,0.0001558077,0.00006967896],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004645673,"about_ca_system_score_gemma":0.00001524653,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001409326,"about_ca_topic_score_gemma":0.0004342627,"domain_scores_codex":[0.9989954,0.00007684242,0.0002074804,0.0002907225,0.0001935171,0.0002360076],"domain_scores_gemma":[0.9994946,0.0001317095,0.0000234791,0.0002336209,0.00004635356,0.00007021683],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00005445577,0.0002828728,0.004498606,0.00002113432,0.00000589607,0.0002435627,0.002812882,0.0004630413,0.009262324,0.03283648,0.002373594,0.9471452],"study_design_scores_gemma":[0.0006149119,0.0003575214,0.03374557,0.00006094138,0.00000240297,0.0006789604,0.00005492071,0.8720059,0.07329749,0.008935774,0.009784792,0.0004607912],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4664503,0.00004490065,0.527797,0.0005606,0.0007279581,0.00006347999,6.610332e-8,0.0001922823,0.004163431],"genre_scores_gemma":[0.9868354,0.00004635231,0.01248853,0.0003939586,0.000109195,0.000008624892,2.273478e-7,0.000004447457,0.0001132521],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9466844,"threshold_uncertainty_score":0.3382913,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01908119668640606,"score_gpt":0.2464139435274087,"score_spread":0.2273327468410026,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}