{"id":"W4393034384","doi":"10.1109/tnsm.2024.3378972","title":"AUTOMA: Automated Generation of Attack Hypotheses and Their Variants for Threat Hunting Using Knowledge Discovery","year":2024,"lang":"en","type":"article","venue":"IEEE Transactions on Network and Service Management","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":11,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; Ericsson (Canada)","funders":"","keywords":"Computer science; Computer security; Data science","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002699548,0.0001640167,0.0001671295,0.0001378896,0.0003596811,0.0003208264,0.0001374557,0.00006474686,0.000003638097],"category_scores_gemma":[4.811538e-7,0.0001407286,0.00005667844,0.0005572088,0.00002180219,0.0005913483,0.00001437503,0.00008795102,0.000001838804],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002985787,"about_ca_system_score_gemma":0.00001720174,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003206311,"about_ca_topic_score_gemma":0.0001841054,"domain_scores_codex":[0.9990301,0.00005566759,0.0002366804,0.0003797482,0.00008748054,0.0002103314],"domain_scores_gemma":[0.9995358,0.0001203541,0.00004915601,0.0002097449,0.00004454958,0.00004038523],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000619878,0.000214099,0.000005868415,0.001312474,0.0004501357,0.000005945541,0.002532871,0.4666283,0.002329225,0.01061147,0.0007186905,0.515129],"study_design_scores_gemma":[0.0002203794,0.00008923338,0.0000859234,0.000261046,0.00006065241,0.000008219736,0.0000570292,0.9959194,0.001079235,0.0005361262,0.001537875,0.0001448839],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1069611,0.0006436431,0.8901274,0.0001972187,0.001113984,0.0003660916,0.000006959036,0.0003155685,0.0002680387],"genre_scores_gemma":[0.9903392,0.0006848911,0.008453729,0.0001738567,0.0001874596,0.00003795378,0.000002150337,0.00001632689,0.0001044034],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8833781,"threshold_uncertainty_score":0.5738745,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.05084952304846543,"score_gpt":0.2754338352616307,"score_spread":0.2245843122131653,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}