{"id":"W4294238081","doi":"10.1145/3559768","title":"APTHunter: Detecting Advanced Persistent Threats in Early Stages","year":2022,"lang":"en","type":"article","venue":"Digital Threats Research and Practice","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":30,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Provenance; Adversarial system; Graph; Compromise; Computer security; Data mining; Theoretical computer science; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00164082,0.0001590703,0.0001746796,0.0004252889,0.000623928,0.0007882324,0.0006877665,0.00004010935,0.00001574997],"category_scores_gemma":[0.001284398,0.0001653701,0.00005637366,0.001058595,0.0001184871,0.003907306,0.001523985,0.0009344486,0.00001655019],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002667279,"about_ca_system_score_gemma":0.00008293491,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006181165,"about_ca_topic_score_gemma":0.00001529761,"domain_scores_codex":[0.9972023,0.000372625,0.0002435929,0.0006736576,0.000895006,0.0006128247],"domain_scores_gemma":[0.9967669,0.002183914,0.00009921419,0.0005423949,0.0002396796,0.0001678616],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0004938206,0.000293234,0.001226209,0.00002550501,0.00002824017,0.0003942851,0.002044177,0.000142286,0.0008538483,0.005710344,0.00005798003,0.9887301],"study_design_scores_gemma":[0.008509578,0.04100175,0.007508363,0.0004451831,0.00003746341,0.007767239,0.05358437,0.007967626,0.03592075,0.4765547,0.3562393,0.004463664],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5835117,0.01858983,0.1273163,0.01195004,0.0007247606,0.004136429,0.0001295723,0.002485958,0.2511554],"genre_scores_gemma":[0.9890488,0.0004460598,0.008246289,0.0001018724,0.00002233963,0.0002207587,0.000002874918,0.000020363,0.001890687],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9842664,"threshold_uncertainty_score":0.7600943,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.09393009053068718,"score_gpt":0.3949436509728956,"score_spread":0.3010135604422084,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}