{"id":"W2137057595","doi":"10.1109/csac.2005.20","title":"Detecting Intra-enterprise Scanning Worms based on Address Resolution","year":2006,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":28,"is_retracted":false,"has_abstract":true,"ca_institutions":"Carleton University","funders":"Natural Sciences and Engineering Research Council of Canada; Mitacs; Canada Research Chairs","keywords":"Computer science; Signature (topology); The Internet; Software; Anomaly detection; Protocol (science); Computer network; Resolution (logic); Anomaly (physics); Computer security; Data mining; Distributed computing; Artificial intelligence; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006591873,0.0003285915,0.0004382665,0.001914554,0.0003268584,0.0005307156,0.0006258377,0.0005647982,0.0004911218],"category_scores_gemma":[0.003435835,0.0001508974,0.0001560615,0.0008312553,0.0004897469,0.001142467,0.000742134,0.0005281724,0.0003041942],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002134564,"about_ca_system_score_gemma":0.0002858767,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004333418,"about_ca_topic_score_gemma":0.0007954858,"domain_scores_codex":[0.9990784,0.0001932738,0.00004539002,0.0001065715,0.0004945379,0.00008181876],"domain_scores_gemma":[0.995838,0.001175176,0.0008778995,0.0008690364,0.001038797,0.0002011832],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005484066,0.0003293604,0.108671,0.0001084757,0.00009889089,0.0003630925,0.0003670078,0.0159477,0.3007709,0.004771716,0.00108989,0.5669336],"study_design_scores_gemma":[0.00002792231,0.000803441,0.05753748,0.00002058054,0.00009253354,0.003043659,0.0001593787,0.6484548,0.2822576,0.00395865,0.003545044,0.00009879741],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6518961,0.000183511,0.3412789,0.0001201259,0.00003566523,0.00009481412,0.00007451257,0.003473002,0.002843345],"genre_scores_gemma":[0.9088461,0.00007090044,0.0903174,0.00002392827,0.00001602603,0.00002273628,0.00007017353,0.00003208538,0.0006006807],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.001914554,"threshold_uncertainty_score":0.003486156,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01126813955587274,"score_gpt":0.2233931682956289,"score_spread":0.2121250287397561,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}