{"id":"W2128116119","doi":"10.1007/978-3-642-14215-4_9","title":"An Online Adaptive Approach to Alert Correlation","year":2010,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":58,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Computer science; Honeypot; Intrusion detection system; System administrator; Network administrator; Bayesian network; Data mining; Context (archaeology); Set (abstract data type); Correlation; Focus (optics); Machine learning; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001464332,0.001031948,0.001363816,0.001333515,0.0006790888,0.001529554,0.002727533,0.001115202,0.006529749],"category_scores_gemma":[0.00744209,0.0005322782,0.0005471527,0.001497014,0.0006289242,0.001852002,0.001863988,0.001842067,0.001664904],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007249308,"about_ca_system_score_gemma":0.001433614,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003393115,"about_ca_topic_score_gemma":0.004668955,"domain_scores_codex":[0.9982104,0.0003621134,0.00009027147,0.0004730643,0.0007057216,0.0001582979],"domain_scores_gemma":[0.9959726,0.00188436,0.0002308783,0.0007895289,0.0009494562,0.0001731118],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005203701,0.0006334584,0.00121108,0.00007433772,0.0001050958,0.0001495986,0.0001074296,0.09050573,0.0178186,0.01763864,0.009419763,0.8618158],"study_design_scores_gemma":[0.00002516715,0.00007546873,0.0003164911,0.000006095982,0.00002815159,0.0001131621,0.00001593504,0.9857917,0.003976764,0.007784102,0.001852249,0.00001473575],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.004809158,0.000151601,0.9911171,0.0001224814,0.0001513901,0.00007042591,0.00004472131,0.001566486,0.00196658],"genre_scores_gemma":[0.3468075,0.0002991673,0.6364353,0.0004933522,0.0004759382,0.000230092,0.0002327517,0.0002904531,0.01473546],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.006529749,"threshold_uncertainty_score":0.02184421,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0246716460367167,"score_gpt":0.2395507742266401,"score_spread":0.2148791281899234,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}