{"id":"W3164152617","doi":"10.24963/ijcai.2021/494","title":"A Rule Mining-based Advanced Persistent Threats Detection System","year":2021,"lang":"en","type":"preprint","venue":"","topic":"Anomaly Detection Techniques and Applications","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Université du Québec à Montréal","funders":"Advanced Research Projects Agency; Defense Advanced Research Projects Agency","keywords":"Exploit; Computer science; Leverage (statistics); Event (particle physics); Data mining; Causality (physics); Process (computing); TRACE (psycholinguistics); Computer security; Machine learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002222318,0.001142907,0.001250656,0.00423459,0.0007020035,0.00187146,0.002480696,0.00105316,0.002916277],"category_scores_gemma":[0.008499023,0.000529483,0.001263612,0.002445918,0.0003626357,0.001684793,0.001220728,0.001533069,0.002940272],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006733615,"about_ca_system_score_gemma":0.002442623,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006553161,"about_ca_topic_score_gemma":0.01040951,"domain_scores_codex":[0.9980533,0.0002261372,0.0002638996,0.000653779,0.0007233266,0.00007955815],"domain_scores_gemma":[0.9956891,0.001641026,0.0004580487,0.0007566668,0.001245957,0.0002092154],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005410549,0.001377236,0.02858507,0.0007212036,0.0005352474,0.001193303,0.0002790312,0.03782322,0.02706804,0.004770938,0.0403365,0.8567693],"study_design_scores_gemma":[0.0001210453,0.0002599269,0.0063036,0.00007931732,0.0001539311,0.0006405074,0.0001015032,0.9438391,0.01989544,0.007948846,0.02059893,0.00005778421],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04905485,0.0006614162,0.825215,0.0008527505,0.0002169433,0.001422639,0.01404566,0.1041191,0.004411654],"genre_scores_gemma":[0.1446892,0.0003394907,0.831199,0.0003660171,0.00007996451,0.0006154601,0.01808095,0.0006324329,0.003997589],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.006553161,"threshold_uncertainty_score":0.01303005,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01991790849108089,"score_gpt":0.2537039936605537,"score_spread":0.2337860851694728,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}