{"id":"W3016717485","doi":"10.1007/s10664-020-09814-x","title":"Using machine learning to assist with the selection of security controls during security assessment","year":2020,"lang":"en","type":"article","venue":"Empirical Software Engineering","topic":"Information and Cyber Security","field":"Computer Science","cited_by":13,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa","funders":"","keywords":"Operationalization; Computer science; Security information and event management; Security controls; Computer security model; Computer security; Context (archaeology); Security service; Security testing; Cloud computing security; Security engineering; Security through obscurity; Security domain; Standard of Good Practice; Security convergence; Information security; Risk analysis (engineering); Software security assurance; Control (management); Artificial intelligence; Business; Cloud computing; Network security policy","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002343392,0.0001728241,0.0002288544,0.00005955998,0.0001944671,0.0001165882,0.0003741349,0.00005409382,0.00001719584],"category_scores_gemma":[0.000173284,0.0001296432,0.00008360157,0.0007287817,0.0000150044,0.0003861155,0.0002047269,0.0004830857,0.000004705847],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001072396,"about_ca_system_score_gemma":0.00005976631,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003232461,"about_ca_topic_score_gemma":0.000009071061,"domain_scores_codex":[0.9987693,0.00006086892,0.0002635363,0.0002361382,0.0003928238,0.0002773253],"domain_scores_gemma":[0.9993198,0.000121954,0.0001018745,0.0001659083,0.0001090711,0.0001813866],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00009397556,0.0001343649,0.2797683,0.0004293358,0.0002216106,0.0000234848,0.02790789,0.6855952,0.002757788,0.002029022,0.0001559621,0.0008831059],"study_design_scores_gemma":[0.0004591221,0.0001382849,0.03861531,0.00003218347,0.00001448539,0.00001922441,0.00006344273,0.9551188,0.002672199,0.00001444398,0.002610171,0.0002423651],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.438823,0.00002009427,0.5596157,0.001032074,0.00004738045,0.0001482185,0.000002453172,0.0002680629,0.00004302372],"genre_scores_gemma":[0.9767455,8.01728e-7,0.02265425,0.0004984791,0.00007302161,0.00001122168,0.000002215663,0.00001215695,0.000002312078],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.5379226,"threshold_uncertainty_score":0.5286697,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01568697951433107,"score_gpt":0.2603828896955933,"score_spread":0.2446959101812622,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}