{"id":"W2887799638","doi":"10.1109/spw.2018.00043","title":"Evaluating Insider Threat Detection Workflow Using Supervised and Unsupervised Learning","year":2018,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":65,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Insider threat; Workflow; Anomaly detection; Computer science; Unsupervised learning; Insider; Artificial intelligence; Supervised learning; Machine learning; Hidden Markov model; Set (abstract data type); Database; Artificial neural network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005718425,0.0001403661,0.0001336043,0.0001290651,0.0007908321,0.0002711568,0.0001879708,0.00009936157,0.0001424257],"category_scores_gemma":[0.00008968875,0.0001289024,0.00003905966,0.0005607786,0.00007844201,0.0008357829,0.0002382948,0.0002093426,0.00003733347],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004434836,"about_ca_system_score_gemma":0.00002813435,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001593697,"about_ca_topic_score_gemma":0.0001253781,"domain_scores_codex":[0.9986488,0.0001876154,0.0002114781,0.0004199015,0.0002616763,0.0002705363],"domain_scores_gemma":[0.9993389,0.00008595664,0.00005619646,0.0002632994,0.0001680017,0.00008770761],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002687934,0.00001934007,0.0007851465,0.00001016152,0.00001497501,0.000002180682,0.001458965,0.0008570838,0.09394728,0.0008734117,0.0000133379,0.9019912],"study_design_scores_gemma":[0.0003762335,0.0003403342,0.0009605354,0.00003091912,0.000008110755,0.0000404636,0.00005589233,0.9648759,0.03011587,0.002703926,0.0003179671,0.0001738805],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6424489,0.00008044484,0.356141,0.00006455519,0.0003419401,0.00009689987,3.675952e-8,0.0002176432,0.0006085869],"genre_scores_gemma":[0.9369667,0.0000219005,0.06233315,0.0002453349,0.0003322197,0.000004241835,3.32905e-7,0.00001078468,0.00008535124],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9640188,"threshold_uncertainty_score":0.6082521,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.06256651640064904,"score_gpt":0.3114651334682395,"score_spread":0.2488986170675904,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}