{"id":"W4292826129","doi":"10.1007/978-3-031-15777-6_30","title":"TapTree: Process-Tree Based Host Behavior Modeling and Threat Detection Framework via Sequential Pattern Mining","year":2022,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Software System Performance and Reliability","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":false,"ca_institutions":"National Research Council Canada; Research and Productivity Council","funders":"University of Windsor","keywords":"Computer science; Semantics (computer science); Benchmark (surveying); Data mining; Process (computing); Behavioral pattern; Abstraction; Pattern matching; Tree (set theory); Host (biology); Event (particle physics); Audit; Artificial intelligence; Software engineering; Programming language","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0009894588,0.0005728991,0.000534045,0.0006520778,0.0008251178,0.000481677,0.001893515,0.0004341537,0.00003818857],"category_scores_gemma":[0.00006282678,0.0005253576,0.0001370862,0.0006258967,0.0003769021,0.0008429351,0.001040501,0.001148415,0.000007039031],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003738088,"about_ca_system_score_gemma":0.0004278064,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001041956,"about_ca_topic_score_gemma":0.0001243898,"domain_scores_codex":[0.9956012,0.00005495431,0.0006035343,0.001845668,0.001225922,0.0006687319],"domain_scores_gemma":[0.9977479,0.0003102042,0.0002967053,0.001245871,0.0002272523,0.00017209],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000009617484,0.00003828155,0.003360671,0.0001455874,0.000008938898,0.00007145314,0.001233841,0.07862642,0.0001421014,0.00005971584,3.294379e-7,0.916303],"study_design_scores_gemma":[0.0002297365,0.000215315,0.0005572156,0.0003796245,0.0000222367,0.00008767743,8.595429e-7,0.989905,0.0008911212,0.007040846,0.00002812557,0.0006422662],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01911412,0.000288204,0.9770972,0.0001680376,0.002363653,0.0006061117,0.000006032776,0.0002746184,0.00008208415],"genre_scores_gemma":[0.9045501,0.000015696,0.09451957,0.0004406409,0.0003460001,0.00007253767,0.000005134036,0.00003837409,0.00001190812],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9156608,"threshold_uncertainty_score":0.9997198,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01755324058302649,"score_gpt":0.2561067289819465,"score_spread":0.23855348839892,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}