{"id":"W2137057595","doi":"10.1109/csac.2005.20","title":"Detecting Intra-enterprise Scanning Worms based on Address Resolution","year":2006,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":28,"is_retracted":false,"has_abstract":true,"ca_institutions":"Carleton University","funders":"Natural Sciences and Engineering Research Council of Canada; Mitacs; Canada Research Chairs","keywords":"Computer science; Signature (topology); The Internet; Software; Anomaly detection; Protocol (science); Computer network; Resolution (logic); Anomaly (physics); Computer security; Data mining; Distributed computing; Artificial intelligence; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003603415,0.0001241671,0.0001001792,0.0001804711,0.0003158321,0.0002070161,0.0003513583,0.0000774545,0.00006377378],"category_scores_gemma":[0.00003308462,0.0001096112,0.00006347144,0.0005127032,0.00002392881,0.0004180814,0.00009042079,0.0002170944,0.00006141674],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008504194,"about_ca_system_score_gemma":0.00002249943,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002465571,"about_ca_topic_score_gemma":0.0001239379,"domain_scores_codex":[0.9987592,0.000075032,0.0002255807,0.0003517667,0.0002901208,0.000298374],"domain_scores_gemma":[0.999347,0.00009079511,0.0000818308,0.000372797,0.00005137339,0.00005616882],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003245158,0.0006299685,0.002273489,0.00005864432,0.00002134851,0.00008076707,0.0006130106,0.3022497,0.01230869,0.06760179,0.02525736,0.5885807],"study_design_scores_gemma":[0.0002989205,0.0001408594,0.001418614,0.00007237637,0.00000200647,0.00000602122,0.000008784978,0.9764793,0.01619821,0.001607164,0.003600503,0.0001672165],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.05631973,0.00003589063,0.914178,0.0004631677,0.0006644962,0.0001287323,3.68715e-7,0.0005034757,0.02770616],"genre_scores_gemma":[0.9863585,0.000001756456,0.01256764,0.000597325,0.0002177656,0.00001159771,0.000001600342,0.000007840341,0.000236016],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9300388,"threshold_uncertainty_score":0.4469815,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01126813955587274,"score_gpt":0.2233931682956289,"score_spread":0.2121250287397561,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}