{"id":"W2806042222","doi":"10.1109/icdis.2018.00039","title":"Combating Insider Threats by User Profiling from Activity Logging Data","year":2018,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"ca_institutions":"Computer Research Institute of Montréal","funders":"","keywords":"Insider threat; Computer science; Insider; Hidden Markov model; Profiling (computer programming); Cluster analysis; Markov chain; Computer security; Markov process; Data mining; Artificial intelligence; Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001925964,0.0009375187,0.0007050349,0.002289043,0.000396513,0.00125407,0.0006547212,0.0007115426,0.0004881302],"category_scores_gemma":[0.009933276,0.0003385004,0.0004967686,0.001187512,0.0003288064,0.002003286,0.000857198,0.0009619916,0.0006110971],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004937754,"about_ca_system_score_gemma":0.0009132618,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005092768,"about_ca_topic_score_gemma":0.007376805,"domain_scores_codex":[0.998028,0.0006494239,0.0001782681,0.0003461018,0.0006222975,0.0001758897],"domain_scores_gemma":[0.9930156,0.003114318,0.00116474,0.001256535,0.00105468,0.0003940228],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008337584,0.001094462,0.4512232,0.0002677085,0.0002635479,0.0007847542,0.001281614,0.1982592,0.02482228,0.007937787,0.005310627,0.3079211],"study_design_scores_gemma":[0.00000469972,0.0001357994,0.02579205,0.00002728388,0.00002516314,0.0002175956,0.0002413457,0.9636679,0.0051708,0.003573199,0.001114524,0.00002956128],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6734366,0.0003639518,0.3157309,0.0006242839,0.00007205349,0.000453656,0.001694992,0.003275377,0.00434818],"genre_scores_gemma":[0.9665846,0.0001401382,0.03161342,0.00004936491,0.000022102,0.00006438385,0.000996138,0.00003732213,0.0004924574],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.005092768,"threshold_uncertainty_score":0.0101856,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05764090720386925,"score_gpt":0.2953235774715918,"score_spread":0.2376826702677226,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}