{"id":"W3009500417","doi":"10.23919/cnsm46954.2019.9012708","title":"Exploring Feature Normalization and Temporal Information for Machine Learning Based Insider Threat Detection","year":2019,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":68,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Insider threat; Normalization (sociology); Computer science; Leverage (statistics); Insider; Random forest; Artificial intelligence; Machine learning; Classifier (UML); Pattern recognition (psychology); Computer security; Data mining","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002040239,0.00008666918,0.00007963154,0.0001388201,0.0001891956,0.0001794125,0.00007950807,0.00005913429,0.00001491386],"category_scores_gemma":[0.00002892392,0.00007731394,0.00002896896,0.0002448815,0.000006334309,0.003864705,0.00004944293,0.0001201297,0.00001662534],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002681071,"about_ca_system_score_gemma":0.0000115201,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006684759,"about_ca_topic_score_gemma":0.00007469281,"domain_scores_codex":[0.9994492,0.00002981315,0.0001293145,0.0001430548,0.0001260425,0.0001226054],"domain_scores_gemma":[0.9996402,0.00003806804,0.00007781837,0.0001235301,0.00008478625,0.00003557757],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0002969257,0.00005482027,0.02600446,0.0003742377,0.00003343865,8.095491e-7,0.003301982,0.04730869,0.005627158,0.01900997,0.000342651,0.8976449],"study_design_scores_gemma":[0.0004813308,0.0001938691,0.002180516,0.0000147606,0.000002666902,0.000005217147,0.00003165532,0.9637074,0.01054963,0.0002554743,0.02246469,0.0001127492],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1509533,0.00002544507,0.8475696,0.0002653441,0.0004052776,0.0002798701,4.95955e-7,0.0002025179,0.0002981663],"genre_scores_gemma":[0.9909077,0.00002653685,0.008578716,0.000274492,0.00004703433,0.00003283672,0.00001962269,0.000004667541,0.0001083955],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9163988,"threshold_uncertainty_score":0.3152771,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02602555497228171,"score_gpt":0.2100839888612904,"score_spread":0.1840584338890087,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}