{"id":"W4381486732","doi":"10.1016/j.cose.2023.103350","title":"CPID: Insider threat detection using profiling and cyber-persona identification","year":2023,"lang":"en","type":"article","venue":"Computers & Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":24,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa; Concordia University","funders":"","keywords":"Persona; Computer science; Profiling (computer programming); Identification (biology); Computer security; Software deployment; Context (archaeology); Scalability; Insider; Workstation; Network security; Human–computer interaction; Software engineering; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005526571,0.0001844905,0.0001835239,0.0002675416,0.0005205161,0.0003696127,0.0003459063,0.0001260957,0.000003637122],"category_scores_gemma":[0.00003209807,0.0001968665,0.0000702618,0.00108668,0.00007014249,0.001004228,0.0004005799,0.0002578818,0.00005247093],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008595258,"about_ca_system_score_gemma":0.00002850158,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000122998,"about_ca_topic_score_gemma":0.00005665615,"domain_scores_codex":[0.998309,0.0001394006,0.0003051248,0.0006164715,0.0002958975,0.0003341631],"domain_scores_gemma":[0.9991083,0.0001028723,0.0001394091,0.0004315439,0.0001026632,0.0001152151],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001063664,0.000327511,0.005292259,0.0004900096,0.0002150029,0.0001521627,0.02280404,0.008677134,0.136272,0.04449293,0.003075582,0.7780951],"study_design_scores_gemma":[0.0002500253,0.00005287774,0.005215802,0.00003996558,0.00001053074,0.00006664256,0.00005967644,0.9605234,0.01665761,0.01595648,0.0009136866,0.0002533591],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.7428108,0.0001649958,0.2541696,0.0002823859,0.001675152,0.0002322065,0.000001518373,0.0006110391,0.0000522623],"genre_scores_gemma":[0.9951181,0.00007757745,0.004311678,0.0001670691,0.0002803255,0.0000111977,0.000006768099,0.0000135757,0.00001365342],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9518462,"threshold_uncertainty_score":0.8027982,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02549383295948198,"score_gpt":0.2580228893925076,"score_spread":0.2325290564330256,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}