{"id":"W4389543332","doi":"10.1109/csnet59123.2023.10339745","title":"Score-Based Unsupervised Anomaly Detection using Graph Clustering and the Activity and Event Network Model","year":2023,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria; Toronto Metropolitan University","funders":"","keywords":"Anomaly detection; Computer science; Cluster analysis; Data mining; Denial-of-service attack; Event (particle physics); False positive rate; Artificial intelligence; Unsupervised learning; Insider; Insider threat; Constant false alarm rate; Graph; Machine learning; Pattern recognition (psychology); Theoretical computer science","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001132232,0.000927951,0.001042251,0.003014068,0.0004900708,0.001106902,0.002052344,0.000904917,0.0004921725],"category_scores_gemma":[0.003981358,0.000254466,0.0009432529,0.002017156,0.0007333108,0.001695069,0.001109037,0.001040732,0.0003733369],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001316592,"about_ca_system_score_gemma":0.001045726,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.009634262,"about_ca_topic_score_gemma":0.01200818,"domain_scores_codex":[0.9985858,0.000365887,0.00007610305,0.0004459101,0.0004183096,0.0001080084],"domain_scores_gemma":[0.9978021,0.0007423178,0.000368075,0.0004225042,0.0005627651,0.0001022856],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003056949,0.0004411994,0.01742636,0.0001308663,0.0003618667,0.0001955784,0.0002021519,0.6149244,0.01091677,0.01894337,0.004622313,0.3315294],"study_design_scores_gemma":[0.000002779904,0.00001964079,0.0009921977,0.000002427636,0.000007975094,0.00003809905,0.00001268845,0.9933392,0.001082672,0.004160681,0.0003343609,0.00000722209],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04171902,0.0001447963,0.9550086,0.0001500718,0.00002826609,0.0001080989,0.0002860533,0.001596455,0.0009586278],"genre_scores_gemma":[0.6719148,0.0001829162,0.3235365,0.00009188803,0.00005694303,0.0001355892,0.001819511,0.0001482048,0.002113597],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.009634262,"threshold_uncertainty_score":0.01915634,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02736170008552255,"score_gpt":0.2366634979998821,"score_spread":0.2093017979143595,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}