{"id":"W2806042222","doi":"10.1109/icdis.2018.00039","title":"Combating Insider Threats by User Profiling from Activity Logging Data","year":2018,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"ca_institutions":"Computer Research Institute of Montréal","funders":"","keywords":"Insider threat; Computer science; Insider; Hidden Markov model; Profiling (computer programming); Cluster analysis; Markov chain; Computer security; Markov process; Data mining; Artificial intelligence; Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000312511,0.0001029862,0.0001101223,0.00003194805,0.0002849221,0.0002269706,0.0008798368,0.00006618381,0.0001135985],"category_scores_gemma":[0.00004147858,0.00008979003,0.00001747683,0.0002004553,0.00003778136,0.001619958,0.001144835,0.0001662029,0.0001018786],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002033546,"about_ca_system_score_gemma":0.00002387327,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0004602541,"about_ca_topic_score_gemma":0.0001844472,"domain_scores_codex":[0.9988576,0.00007643176,0.0001354478,0.0005142565,0.0001995014,0.0002168009],"domain_scores_gemma":[0.9986866,0.0001311074,0.00007426675,0.001000372,0.00004961638,0.00005807629],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00004704219,0.0002963709,0.007304748,0.00002004688,0.0000998054,0.00001062214,0.001284115,0.00002619237,0.1444216,0.03434177,0.07013503,0.7420127],"study_design_scores_gemma":[0.0002319458,0.00007289703,0.0005337345,0.00002612613,0.000005110453,0.000003591714,0.00002447527,0.7805865,0.1957352,0.0106958,0.01185538,0.0002291483],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2926502,0.00006608992,0.7012569,0.0005640633,0.0005867782,0.00009650194,0.000005962284,0.0002839794,0.004489529],"genre_scores_gemma":[0.9366065,0.00001246504,0.06217211,0.000726058,0.0003316699,0.00000228897,0.00001283952,0.000006721091,0.0001293814],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.7805604,"threshold_uncertainty_score":0.3661531,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05764090720386925,"score_gpt":0.2953235774715918,"score_spread":0.2376826702677226,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}