{"id":"W3124203340","doi":"10.1109/tnsm.2021.3054356","title":"Uncovering Lateral Movement Using Authentication Logs","year":2021,"lang":"en","type":"article","venue":"IEEE Transactions on Network and Service Management","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":37,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"Canadian Network for Research and Innovation in Machining Technology, Natural Sciences and Engineering Research Council of Canada; Royal Bank of Canada","keywords":"Computer science; Leverage (statistics); Artificial intelligence; Machine learning; Network security; Overhead (engineering); Feature extraction; Data mining; Computer security","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0001596133,0.0001412716,0.0001185525,0.00007100058,0.0003962594,0.0001980651,0.0001836389,0.00005171698,0.00005162991],"category_scores_gemma":[2.009933e-7,0.0001513566,0.00005086679,0.0006415474,0.00001051551,0.0002962983,0.00001922344,0.0001348784,0.00002097097],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006376688,"about_ca_system_score_gemma":0.00001473462,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00004548196,"about_ca_topic_score_gemma":0.0001539442,"domain_scores_codex":[0.9988537,0.00006470893,0.0002116353,0.0003894137,0.0002150542,0.0002654427],"domain_scores_gemma":[0.9994125,0.00002207827,0.00005243467,0.0003803587,0.00005886101,0.00007370416],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000305893,0.0002063998,0.00001553616,0.0001302641,0.0001632106,0.00004331948,0.0007172073,0.8245247,0.000567696,0.009028738,0.0001572913,0.1644151],"study_design_scores_gemma":[0.0006182648,0.00007583055,0.000554549,0.000157591,0.00007954831,0.00001816537,0.00009679851,0.9768252,0.003013525,0.008668944,0.009551794,0.0003398211],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06306247,0.00007253379,0.9332034,0.00102443,0.00123328,0.0001667915,0.000001003753,0.0001200368,0.001116047],"genre_scores_gemma":[0.9732122,0.0007779083,0.01996206,0.005410253,0.0001418126,0.0000295634,0.000002610316,0.00001480679,0.0004487474],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9132413,"threshold_uncertainty_score":0.6172143,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01478014325989933,"score_gpt":0.2230510060428088,"score_spread":0.2082708627829095,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}