{"id":"W4403577760","doi":"10.1145/3627673.3680057","title":"GraphWeaver: Billion-Scale Cybersecurity Incident Correlation","year":2024,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":6,"is_retracted":false,"has_abstract":true,"ca_institutions":"Microsoft (Canada)","funders":"","keywords":"Computer security; Computer science; Scale (ratio); Incident response; Physics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002653846,0.00009406837,0.00007736665,0.0001860923,0.0001347509,0.0003062166,0.0002746567,0.00007908435,0.000212113],"category_scores_gemma":[0.000007815891,0.00007870601,0.00008681561,0.0008501566,0.00002702251,0.0009095444,0.0001480481,0.0001904862,0.0006171255],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00004823598,"about_ca_system_score_gemma":0.00002986683,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001288357,"about_ca_topic_score_gemma":0.0001287395,"domain_scores_codex":[0.99902,0.00004609572,0.0001783318,0.0003323404,0.0002570415,0.0001661244],"domain_scores_gemma":[0.9995103,0.00006362652,0.00002455523,0.0002875553,0.00004160016,0.00007239549],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000007250508,0.00007491394,0.000616429,0.00003268658,0.00002491187,0.00003626516,0.002753074,0.0004706702,0.0005284746,0.7237905,0.04909965,0.2225652],"study_design_scores_gemma":[0.00009762932,0.0000884485,0.002147318,0.00004858928,0.000006955664,0.00005647689,0.00003051955,0.8275613,0.002255389,0.05198002,0.1155109,0.0002164852],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04272101,0.000579747,0.9322685,0.001076216,0.003549352,0.0001378495,9.214465e-7,0.001042299,0.01862411],"genre_scores_gemma":[0.9948052,0.0001601214,0.003758672,0.000286159,0.000172948,0.000008925722,0.000002267425,0.00000597128,0.000799738],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9520842,"threshold_uncertainty_score":0.7932105,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.007542673558673897,"score_gpt":0.2212400977804042,"score_spread":0.2136974242217303,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}