{"id":"W4391877129","doi":"10.1109/icaic60265.2024.10433846","title":"Link-based Anomaly Detection with Sysmon and Graph Neural Networks","year":2024,"lang":"en","type":"article","venue":"","topic":"Anomaly Detection Techniques and Applications","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Systems, Applications & Products in Data Processing (Canada); Royal Military College of Canada; Department of National Defence","funders":"","keywords":"Computer science; Anomaly detection; Graph; Link (geometry); Artificial intelligence; Theoretical computer science; Computer network","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001945315,0.0009064807,0.0008209243,0.00230804,0.0004600477,0.001401017,0.001828414,0.0009886982,0.001812859],"category_scores_gemma":[0.007758539,0.0005632441,0.0008716522,0.001372091,0.0006308793,0.002503077,0.001082599,0.001571178,0.0004648365],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001583877,"about_ca_system_score_gemma":0.001120018,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.01392065,"about_ca_topic_score_gemma":0.02162322,"domain_scores_codex":[0.9990503,0.0003159546,0.00006725195,0.0002484058,0.0002289806,0.00008905451],"domain_scores_gemma":[0.9960788,0.001971767,0.0005533018,0.000544745,0.000717035,0.0001343106],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000231399,0.0001939106,0.009846706,0.0001131072,0.0002170648,0.0001421523,0.00009427422,0.8073414,0.003139958,0.008665788,0.002685159,0.1673291],"study_design_scores_gemma":[0.000001940705,0.000007503505,0.0002071493,0.00000192035,0.000003431357,0.00000988416,0.000004337915,0.997245,0.0003967801,0.001971605,0.0001474975,0.000002930811],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04038145,0.0001897464,0.9519983,0.0004133623,0.00006926607,0.0001084677,0.0003447059,0.005501423,0.0009934362],"genre_scores_gemma":[0.5817319,0.0001887556,0.4142497,0.000195369,0.00007180277,0.0001425666,0.0008644304,0.000293779,0.002261774],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.01392065,"threshold_uncertainty_score":0.0276792,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006176243872212436,"score_gpt":0.2109788694872233,"score_spread":0.2048026256150109,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}