{"id":"W3010456454","doi":"10.23919/cnsm46954.2019.9012700","title":"Host in Danger? Detecting Network Intrusions from Authentication Logs","year":2019,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Computer science; Leverage (statistics); Host (biology); Network security; Feature engineering; Machine learning; Authentication (law); Data mining; Feature extraction; Computer security; Artificial intelligence; Computer network; Deep learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003099029,0.0001001897,0.000127383,0.00009066584,0.0001073869,0.0001153451,0.0004496899,0.00009551062,0.0003862451],"category_scores_gemma":[0.00003041771,0.0000944304,0.00004111778,0.000667309,0.00001391946,0.0004740555,0.0002971945,0.0002224205,0.0006253611],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005193177,"about_ca_system_score_gemma":0.00002147082,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003580959,"about_ca_topic_score_gemma":0.0008491906,"domain_scores_codex":[0.9988649,0.0000865933,0.0002410727,0.0003694285,0.0001685029,0.0002695052],"domain_scores_gemma":[0.999151,0.0001812952,0.00007903561,0.0004993806,0.00003317236,0.00005612055],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00008858353,0.0003980522,0.06145606,0.00003414782,0.00006809372,0.00002490898,0.009776,0.007868189,0.04336262,0.262748,0.005415665,0.6087596],"study_design_scores_gemma":[0.0005282163,0.0001106714,0.06007708,0.00009599771,0.00000510383,0.000005921252,0.00009338809,0.8940349,0.004257962,0.0288189,0.01161277,0.0003591453],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8192223,0.00009479548,0.172812,0.0005621226,0.001455351,0.0002240665,5.01649e-7,0.0002192258,0.005409695],"genre_scores_gemma":[0.9857329,0.00001705064,0.01329296,0.0004237609,0.0002132032,0.000009981998,0.000002729706,0.000006581649,0.0003008512],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.8861666,"threshold_uncertainty_score":0.8037961,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.009620455675482975,"score_gpt":0.2196589154779385,"score_spread":0.2100384598024555,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}