{"id":"W2128116119","doi":"10.1007/978-3-642-14215-4_9","title":"An Online Adaptive Approach to Alert Correlation","year":2010,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":58,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Computer science; Honeypot; Intrusion detection system; System administrator; Network administrator; Bayesian network; Data mining; Context (archaeology); Set (abstract data type); Correlation; Focus (optics); Machine learning; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.000703392,0.0004516187,0.0003993959,0.0008457589,0.0003637478,0.00046102,0.002934054,0.0005409988,0.0000198453],"category_scores_gemma":[0.0000464449,0.0004259932,0.00009505643,0.0008206669,0.0003555363,0.0009840771,0.0008112651,0.001530682,0.00005959874],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001916906,"about_ca_system_score_gemma":0.0002885868,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003874884,"about_ca_topic_score_gemma":0.0002342722,"domain_scores_codex":[0.9964128,0.00004551707,0.000436129,0.001660401,0.0009163601,0.0005288299],"domain_scores_gemma":[0.997529,0.0001659364,0.0002212598,0.001477726,0.0003000326,0.0003060342],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001375169,0.0001024508,0.000008209278,0.000007265881,0.000003945944,0.000009908255,0.001120093,0.1132799,0.0003524059,0.02441676,0.0000186406,0.8606667],"study_design_scores_gemma":[0.0001332619,0.0004291929,0.0001706694,0.0001020473,0.000004521594,0.00005876833,1.988398e-7,0.9333587,0.000604387,0.06099528,0.003602868,0.0005401449],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.0002233843,0.00006905731,0.9919831,0.0002823144,0.003009652,0.0004901416,0.000006112245,0.000227018,0.00370918],"genre_scores_gemma":[0.1098136,0.00001518344,0.8865111,0.002191371,0.001214884,0.00001017202,0.0000187092,0.00003141223,0.0001935649],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.8601266,"threshold_uncertainty_score":0.9998192,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0246716460367167,"score_gpt":0.2395507742266401,"score_spread":0.2148791281899234,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}