{"id":"W3153493802","doi":"10.1109/tnsm.2021.3071928","title":"Anomaly Detection for Insider Threats Using Unsupervised Ensembles","year":2021,"lang":"en","type":"article","venue":"IEEE Transactions on Network and Service Management","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":129,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"Natural Sciences and Engineering Research Council of Canada; Killam Trusts","keywords":"Insider threat; Anomaly detection; Computer science; Robustness (evolution); Insider; Unsupervised learning; Machine learning; Artificial intelligence; Data mining","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0001855405,0.0001891181,0.00017718,0.0001052327,0.0006996929,0.0002083051,0.0001769616,0.00009350334,0.00002146588],"category_scores_gemma":[5.264027e-7,0.000200208,0.0000931548,0.0008093281,0.00001402762,0.0003399629,0.00001272894,0.0001361765,0.000007867893],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005149417,"about_ca_system_score_gemma":0.0000216321,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00004146078,"about_ca_topic_score_gemma":0.0009688612,"domain_scores_codex":[0.9986551,0.00008047791,0.0002399605,0.0005130532,0.0001845712,0.0003268255],"domain_scores_gemma":[0.9992458,0.00007745182,0.00005575763,0.0004059974,0.0001272917,0.00008772164],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001154276,0.0001934652,0.000005887528,0.0002152963,0.0002134009,0.0000283836,0.0004635926,0.2749376,0.001257423,0.002926717,0.0001070835,0.7195358],"study_design_scores_gemma":[0.001124425,0.0001809682,0.000202122,0.0001228118,0.0001349716,0.00005122835,0.0001727556,0.968649,0.01190087,0.005691515,0.01137523,0.0003941279],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.040195,0.0002625022,0.95648,0.000690206,0.001245635,0.0003663578,0.000002226401,0.0001585923,0.0005995396],"genre_scores_gemma":[0.9628031,0.001250011,0.03236103,0.003018101,0.0002143576,0.00008969993,0.000002466078,0.00002249681,0.0002387805],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9241189,"threshold_uncertainty_score":0.8164247,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03015125374528249,"score_gpt":0.244499425418582,"score_spread":0.2143481716732995,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}