{"id":"W3014071235","doi":"10.1002/nem.2109","title":"Exploring anomalous behaviour detection and classification for insider threat identification","year":2020,"lang":"en","type":"article","venue":"International Journal of Network Management","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":55,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Insider threat; Computer science; Anomaly detection; Identification (biology); Insider; Context (archaeology); Machine learning; Artificial intelligence; Adaptation (eye); Granularity; Computer security; Data mining","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001724452,0.0006156294,0.0007206089,0.002854058,0.0005107649,0.001225732,0.0009765266,0.0007531712,0.000569692],"category_scores_gemma":[0.005761479,0.00025254,0.0005421054,0.001126147,0.0005779942,0.001541729,0.001157022,0.001012602,0.000453459],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000663024,"about_ca_system_score_gemma":0.0005231831,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002050226,"about_ca_topic_score_gemma":0.002167248,"domain_scores_codex":[0.9976769,0.0006258829,0.0001666873,0.0005137939,0.0008318069,0.000184897],"domain_scores_gemma":[0.9940491,0.002710955,0.0009829651,0.0007892842,0.001189103,0.0002785508],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007412113,0.0009933932,0.1846139,0.0002664384,0.0002944741,0.0008063816,0.001096411,0.08425493,0.09696745,0.003291454,0.004066958,0.6226071],"study_design_scores_gemma":[0.000006035167,0.0001318054,0.01663939,0.00001326978,0.00002772293,0.0002716781,0.000119289,0.9618072,0.01672936,0.003038129,0.001191569,0.00002454167],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6136299,0.000353996,0.3761635,0.0004120267,0.00008347251,0.0001282841,0.0003512462,0.006884758,0.001992825],"genre_scores_gemma":[0.9256258,0.00006236793,0.07347953,0.00003969507,0.00002526878,0.00003003906,0.0002948451,0.00005298562,0.0003895055],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002854058,"threshold_uncertainty_score":0.009119868,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.09171610357745036,"score_gpt":0.2734909576613411,"score_spread":0.1817748540838907,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}