{"id":"W4403561221","doi":"10.1016/j.cose.2024.104160","title":"NTLFlowLyzer: Towards generating an intrusion detection dataset and intruders behavior profiling through network and transport layers traffic analysis and pattern extraction","year":2024,"lang":"en","type":"article","venue":"Computers & Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":false,"ca_institutions":"York University","funders":"Natural Sciences and Engineering Research Council of Canada; Canada Research Chairs","keywords":"Computer science; Profiling (computer programming); Intrusion detection system; Intrusion; Traffic analysis; Offender profiling; Data mining; Computer network; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006689519,0.001840684,0.0007091343,0.003240843,0.0005283434,0.00113561,0.001719414,0.0009411752,0.002320951],"category_scores_gemma":[0.003136332,0.0005866714,0.001362358,0.001525005,0.000315498,0.001530748,0.001423606,0.001256348,0.003366395],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006948642,"about_ca_system_score_gemma":0.001224927,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006930846,"about_ca_topic_score_gemma":0.01353566,"domain_scores_codex":[0.9994252,0.00006549403,0.00004367697,0.0002290881,0.0001710438,0.00006543627],"domain_scores_gemma":[0.9989849,0.0002689194,0.0001160457,0.0003012145,0.0002574275,0.00007154934],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0009572741,0.00196062,0.05581721,0.001657957,0.0009611013,0.001104783,0.0006874723,0.06993135,0.09291813,0.00616236,0.335263,0.4325788],"study_design_scores_gemma":[0.0002007973,0.0004598436,0.03014708,0.0001368695,0.0002400469,0.0006480711,0.0002899746,0.8010342,0.06472775,0.009078891,0.09291337,0.0001232771],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.1086389,0.0005035466,0.4777144,0.0006471983,0.0002852372,0.001112997,0.1924176,0.2146456,0.004034508],"genre_scores_gemma":[0.1437212,0.0003465452,0.3885084,0.0003244563,0.00008554316,0.001213092,0.4583104,0.002447604,0.005042751],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.006930846,"threshold_uncertainty_score":0.01378101,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0151661829743278,"score_gpt":0.2689959710158228,"score_spread":0.253829788041495,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}