{"id":"W4403577760","doi":"10.1145/3627673.3680057","title":"GraphWeaver: Billion-Scale Cybersecurity Incident Correlation","year":2024,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":6,"is_retracted":false,"has_abstract":true,"ca_institutions":"Microsoft (Canada)","funders":"","keywords":"Computer security; Computer science; Scale (ratio); Incident response; Physics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002704827,0.001427142,0.0007238994,0.003078918,0.001145482,0.003308145,0.003011586,0.0007593673,0.004682702],"category_scores_gemma":[0.01282743,0.001033352,0.001003435,0.003384354,0.001399518,0.006447516,0.004077209,0.00234668,0.002057144],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001027468,"about_ca_system_score_gemma":0.002638288,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.007441561,"about_ca_topic_score_gemma":0.01325372,"domain_scores_codex":[0.9979377,0.0005002352,0.0001283601,0.0005371704,0.0007472329,0.0001492557],"domain_scores_gemma":[0.9931566,0.002028675,0.0005562394,0.002909809,0.0009551716,0.000393462],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0005729488,0.0005572718,0.01801045,0.000882068,0.0005415442,0.0007088548,0.001699991,0.1414523,0.01964336,0.1144333,0.1323277,0.5691702],"study_design_scores_gemma":[0.0001205105,0.0003615723,0.004889668,0.0001495191,0.0001481469,0.0007847391,0.000781789,0.6789954,0.03043823,0.1494377,0.1336746,0.000218209],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02421117,0.0006592827,0.871502,0.00157397,0.0003170697,0.0004693142,0.002827219,0.08991996,0.008519938],"genre_scores_gemma":[0.2845294,0.001003501,0.6908394,0.0007399007,0.0001272992,0.0003540963,0.01024561,0.005226075,0.006934834],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.007441561,"threshold_uncertainty_score":0.01566517,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.007542673558673897,"score_gpt":0.2212400977804042,"score_spread":0.2136974242217303,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}