{"id":"W4403561221","doi":"10.1016/j.cose.2024.104160","title":"NTLFlowLyzer: Towards generating an intrusion detection dataset and intruders behavior profiling through network and transport layers traffic analysis and pattern extraction","year":2024,"lang":"en","type":"article","venue":"Computers & Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":false,"ca_institutions":"York University","funders":"Natural Sciences and Engineering Research Council of Canada; Canada Research Chairs","keywords":"Computer science; Profiling (computer programming); Intrusion detection system; Intrusion; Traffic analysis; Offender profiling; Data mining; Computer network; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.000633913,0.0003222294,0.0003544551,0.000255214,0.0005784595,0.0007078276,0.0002355343,0.000202213,0.000008805248],"category_scores_gemma":[0.000006448536,0.0003239815,0.0000824595,0.001018111,0.0001204877,0.002093074,0.0002145458,0.0005104534,0.000001255658],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006268384,"about_ca_system_score_gemma":0.00003296092,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003498178,"about_ca_topic_score_gemma":0.001131732,"domain_scores_codex":[0.9975831,0.0002151469,0.0004339988,0.001084544,0.0002969237,0.0003862732],"domain_scores_gemma":[0.9991623,0.00008590646,0.0001110058,0.0003929844,0.00004907426,0.0001987321],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002786475,0.00008046631,0.001112572,0.0001592262,0.0001789755,0.00008335406,0.004501195,0.009186317,0.001229291,0.0002603556,0.0001825523,0.9829978],"study_design_scores_gemma":[0.0002534671,0.0002412853,0.004647772,0.00006342732,0.0002954655,0.0001624031,0.00008885322,0.9908255,0.0008100828,0.0004251644,0.001792207,0.0003943502],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5739506,0.0008463745,0.4238576,0.0001123426,0.0007345067,0.0002228313,0.00003458224,0.0002383738,0.00000277192],"genre_scores_gemma":[0.9843336,0.0006936695,0.01395464,0.0002209781,0.0005047236,0.00002781471,0.0002441458,0.00001925066,0.000001158706],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9826035,"threshold_uncertainty_score":0.9999212,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0151661829743278,"score_gpt":0.2689959710158228,"score_spread":0.253829788041495,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}