{"id":"W2913028175","doi":"10.1109/access.2019.2897122","title":"DReAM: Deep Recursive Attentive Model for Anomaly Detection in Kernel Events","year":2019,"lang":"en","type":"article","venue":"IEEE Access","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":27,"is_retracted":false,"has_abstract":true,"ca_institutions":"Ontario Tech University","funders":"","keywords":"Computer science; Anomaly detection; Robustness (evolution); TRACE (psycholinguistics); Data mining; Data stream; Intrusion detection system; Context (archaeology); System call; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00138625,0.001183256,0.00131804,0.0008610155,0.0003715751,0.001194187,0.002962357,0.00134504,0.002465805],"category_scores_gemma":[0.003627406,0.0008201919,0.001046582,0.0005979853,0.0007629839,0.001834404,0.001453544,0.003137166,0.0006979932],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001417829,"about_ca_system_score_gemma":0.001254532,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01351852,"about_ca_topic_score_gemma":0.01389272,"domain_scores_codex":[0.999523,0.0001350587,0.00002697573,0.0001776938,0.00006354565,0.00007375391],"domain_scores_gemma":[0.9988078,0.0007805846,0.00009513617,0.00008341284,0.0001772232,0.00005586306],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002737154,0.0001547384,0.003326928,0.00009585093,0.0001228598,0.0001071224,0.0001001868,0.8998483,0.001675497,0.01220065,0.003514209,0.07857994],"study_design_scores_gemma":[0.000002815488,0.000009235803,0.0000554843,0.000002179287,0.000004599409,0.000004626278,0.000001750555,0.9978009,0.00009902605,0.001900898,0.0001160664,0.000002359625],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.04146253,0.001057864,0.9503811,0.0006877655,0.0001292321,0.0000574608,0.0005132201,0.004036442,0.001674392],"genre_scores_gemma":[0.8640016,0.0006431371,0.1248233,0.0005542124,0.0001397561,0.000241639,0.001260637,0.0002870933,0.008048603],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01351852,"threshold_uncertainty_score":0.02687967,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0224668244661798,"score_gpt":0.2797609656111917,"score_spread":0.2572941411450119,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}