{"id":"W4381486732","doi":"10.1016/j.cose.2023.103350","title":"CPID: Insider threat detection using profiling and cyber-persona identification","year":2023,"lang":"en","type":"article","venue":"Computers & Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":24,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa; Concordia University","funders":"","keywords":"Persona; Computer science; Profiling (computer programming); Identification (biology); Computer security; Software deployment; Context (archaeology); Scalability; Insider; Workstation; Network security; Human–computer interaction; Software engineering; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008981148,0.000833635,0.0007174644,0.00254733,0.0007298994,0.001459347,0.0008559394,0.0009675707,0.004821505],"category_scores_gemma":[0.002825578,0.0003268789,0.0004024639,0.0008840675,0.0002191261,0.001625611,0.002136677,0.0008473554,0.00565014],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004408481,"about_ca_system_score_gemma":0.000797906,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001756945,"about_ca_topic_score_gemma":0.00218203,"domain_scores_codex":[0.9985029,0.0002004014,0.00006904985,0.0002393297,0.0007980144,0.000190429],"domain_scores_gemma":[0.9989641,0.0001721245,0.0001346943,0.0002890366,0.0003004287,0.0001396391],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008625992,0.0006949474,0.04371891,0.0004277688,0.0001678695,0.0005386063,0.0002376299,0.007338807,0.03543434,0.009534232,0.1315673,0.7694771],"study_design_scores_gemma":[0.0001400306,0.0008818423,0.07805012,0.0001527515,0.0001599007,0.003100075,0.0004386046,0.6544278,0.1214068,0.01586712,0.1251504,0.0002246491],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1547748,0.001427237,0.6735876,0.001739815,0.002062325,0.001556058,0.01773713,0.09686477,0.05025031],"genre_scores_gemma":[0.588966,0.0004742646,0.3599626,0.0006451129,0.0003317375,0.0004726989,0.01639825,0.0007629471,0.03198654],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004821505,"threshold_uncertainty_score":0.01612955,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02549383295948198,"score_gpt":0.2580228893925076,"score_spread":0.2325290564330256,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}