{"id":"W3164152617","doi":"10.24963/ijcai.2021/494","title":"A Rule Mining-based Advanced Persistent Threats Detection System","year":2021,"lang":"en","type":"preprint","venue":"","topic":"Anomaly Detection Techniques and Applications","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Université du Québec à Montréal","funders":"Advanced Research Projects Agency; Defense Advanced Research Projects Agency","keywords":"Exploit; Computer science; Leverage (statistics); Event (particle physics); Data mining; Causality (physics); Process (computing); TRACE (psycholinguistics); Computer security; Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0001494163,0.0002473545,0.0002750663,0.0001393144,0.0002153972,0.0003513203,0.0005947971,0.0002522472,0.00002377236],"category_scores_gemma":[0.000007234766,0.000245361,0.0003901939,0.0002839511,0.00002487744,0.00009491969,0.000652072,0.0002856508,0.00002236158],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003098838,"about_ca_system_score_gemma":0.0001728564,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006708778,"about_ca_topic_score_gemma":0.00004233506,"domain_scores_codex":[0.9982803,0.00005569778,0.0003183958,0.0008650717,0.0002576148,0.0002229221],"domain_scores_gemma":[0.9981263,0.00003396544,0.0002136559,0.001301535,0.0002207527,0.0001037578],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00004084989,0.0007217146,0.0001725031,0.001901282,0.0003641713,0.0001207221,0.001174376,0.04832661,0.02552004,0.01825967,0.0006799491,0.9027181],"study_design_scores_gemma":[0.0003429208,0.0001801252,0.0002479228,0.0004331446,0.00006624635,0.00008977651,0.0008656725,0.8119121,0.1826894,0.0003883322,0.001951083,0.0008332197],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01878307,0.0002734592,0.9704695,0.0002972138,0.0004355652,0.0004662924,0.000003737557,0.001925694,0.00734541],"genre_scores_gemma":[0.7936816,0.00001254422,0.2046799,0.0001046405,0.0000466452,0.0006041232,0.0000106302,0.00001521914,0.000844757],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9018849,"threshold_uncertainty_score":0.9999999,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01991790849108089,"score_gpt":0.2537039936605537,"score_spread":0.2337860851694728,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}