{"id":"W4391877129","doi":"10.1109/icaic60265.2024.10433846","title":"Link-based Anomaly Detection with Sysmon and Graph Neural Networks","year":2024,"lang":"en","type":"article","venue":"","topic":"Anomaly Detection Techniques and Applications","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Systems, Applications & Products in Data Processing (Canada); Royal Military College of Canada; Department of National Defence","funders":"","keywords":"Computer science; Anomaly detection; Graph; Link (geometry); Artificial intelligence; Theoretical computer science; Computer network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00007209709,0.00008758002,0.00006183018,0.0001080281,0.0001215007,0.000270633,0.0001385682,0.00005002582,0.000005880752],"category_scores_gemma":[9.786171e-7,0.00006499593,0.00003045721,0.0005752903,0.00003556982,0.0002245708,0.00003560181,0.0001197828,0.00000375187],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00001296598,"about_ca_system_score_gemma":0.00001196079,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000546116,"about_ca_topic_score_gemma":0.00003920976,"domain_scores_codex":[0.999397,0.00001378382,0.00009350156,0.0002962148,0.00007712019,0.0001223661],"domain_scores_gemma":[0.999641,0.00003303593,0.00001858963,0.0002275818,0.00002656881,0.00005323315],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001217211,0.00002599059,0.0005909993,0.00003848997,0.00002147033,0.00001967003,0.00004106074,0.004037532,0.001676806,0.04895238,0.0002754439,0.944308],"study_design_scores_gemma":[0.00005103784,0.0001754968,0.001306843,0.00001048836,0.000006109633,0.00003603166,0.000002990876,0.9905229,0.005082559,0.0007827094,0.001917883,0.000104992],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01429597,0.000191306,0.9826826,0.0007308444,0.00007044864,0.0001417523,3.236977e-7,0.001215379,0.0006713601],"genre_scores_gemma":[0.9813846,0.0000112477,0.01809922,0.0002265595,0.00005373,0.00006070988,6.655531e-7,0.000007870917,0.0001553699],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9864853,"threshold_uncertainty_score":0.2650457,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006176243872212436,"score_gpt":0.2109788694872233,"score_spread":0.2048026256150109,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}