{"id":"W2308766372","doi":"10.1145/2875475.2875484","title":"Detecting Advanced Persistent Threats using Fractal Dimension based Machine Learning Classification","year":2016,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":67,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Manitoba","funders":"","keywords":"Computer science; False positive paradox; False positives and false negatives; Anomaly detection; Network packet; The Internet; Artificial intelligence; Machine learning; False positive rate; Fractal; Deep packet inspection; Intrusion detection system; Data mining; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002814199,0.0001213194,0.0001063402,0.0001002025,0.0004050107,0.00007222673,0.0002072551,0.00006986861,0.0000774367],"category_scores_gemma":[0.00007110735,0.00008346965,0.00009574842,0.0002413723,0.0000238337,0.0005362366,0.000105541,0.0001414563,0.00004065079],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00012379,"about_ca_system_score_gemma":0.00002564733,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002471873,"about_ca_topic_score_gemma":0.0000207007,"domain_scores_codex":[0.9988474,0.000107087,0.0001941576,0.0003827826,0.0002379673,0.0002305871],"domain_scores_gemma":[0.9992827,0.0001433636,0.0001304528,0.0002832111,0.0000851247,0.00007512032],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003284045,0.00003674809,0.0008816011,0.000005300142,0.000007498917,0.000002625199,0.0001136985,0.003205373,0.3534928,0.001097861,0.000006894938,0.6411167],"study_design_scores_gemma":[0.0003972969,0.0001553902,0.0004534854,0.00006131358,0.000005583998,0.0000134694,0.00002657633,0.9485902,0.04905005,0.0002504539,0.0008435896,0.000152607],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4448866,0.00007698163,0.5533926,0.0004788482,0.0002647073,0.00008439427,1.765858e-7,0.0002471751,0.0005684985],"genre_scores_gemma":[0.9703243,0.00002098089,0.0292077,0.0001211059,0.00005551504,0.000004138229,7.900008e-7,0.000009223142,0.0002561964],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9453848,"threshold_uncertainty_score":0.3403793,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03468693595753106,"score_gpt":0.2578775778584103,"score_spread":0.2231906419008793,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}