{"id":"W2738336658","doi":"10.1016/j.infsof.2017.07.009","title":"An anomaly detection system based on variable N-gram features and one-class SVM","year":2017,"lang":"en","type":"article","venue":"Information and Software Technology","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":114,"is_retracted":false,"has_abstract":false,"ca_institutions":"École de Technologie Supérieure; Concordia University","funders":"Natural Sciences and Engineering Research Council of Canada; Defence Research and Development Canada","keywords":"Anomaly detection; Support vector machine; Computer science; Artificial intelligence; Pattern recognition (psychology); Constant false alarm rate; Feature vector; Feature (linguistics); Feature extraction; Context (archaeology); Weighting; One-class classification; Kernel (algebra); System call; Data mining; Mathematics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002379009,0.0001129804,0.0001324889,0.0003472378,0.0008537617,0.0005712091,0.000394251,0.0002946917,0.000003325876],"category_scores_gemma":[0.0001252559,0.0001081566,0.00001549993,0.000164584,0.0001014496,0.001970033,0.0001191551,0.000226391,0.00001406363],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00003966674,"about_ca_system_score_gemma":0.00003001828,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007108638,"about_ca_topic_score_gemma":0.00004955218,"domain_scores_codex":[0.9992974,0.00002546925,0.000192918,0.0001796332,0.0001367159,0.0001678093],"domain_scores_gemma":[0.9989625,0.00003137293,0.0002043841,0.0006434375,0.00009711771,0.00006114374],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00004150404,0.00003348765,0.001348943,0.00008944872,0.000009854823,0.000002121688,0.0001805821,0.0002579781,0.0001931739,0.115158,0.0001097468,0.8825751],"study_design_scores_gemma":[0.001713318,0.001716174,0.02719107,0.0002009194,0.00001977857,0.0002717945,0.0001851415,0.9195644,0.009729114,0.01278608,0.02604409,0.0005781457],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.08714354,0.00004042256,0.9079866,0.0008987284,0.000491428,0.0002549929,0.000004302177,0.001589308,0.001590673],"genre_scores_gemma":[0.9775034,0.00001485159,0.02209114,0.0003203917,0.00002712936,0.00002479293,0.000003706098,0.000003622151,0.00001092911],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9193064,"threshold_uncertainty_score":0.6566531,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.00603452932396554,"score_gpt":0.211091983720122,"score_spread":0.2050574543961565,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}