{"id":"W4404848767","doi":"10.1109/dsc63325.2024.00013","title":"Chronohunt: Determining Optimal Pace for Automated Alert Analysis in Threat Hunting Using Reinforcement Learning","year":2024,"lang":"en","type":"article","venue":"","topic":"Gaussian Processes and Bayesian Inference","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University; Research Canada; Ericsson (Canada)","funders":"","keywords":"Pace; Reinforcement learning; Computer science; Reinforcement; Computer security; Artificial intelligence; Engineering; Geography","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001591933,0.0009257376,0.0008812174,0.0005719777,0.0004306137,0.001009164,0.001624148,0.000930235,0.002018303],"category_scores_gemma":[0.00520589,0.0004631787,0.000411908,0.0002862661,0.0007531023,0.0009638182,0.00111686,0.00103277,0.0003746208],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0008120288,"about_ca_system_score_gemma":0.002372646,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003715667,"about_ca_topic_score_gemma":0.004945714,"domain_scores_codex":[0.999482,0.0001153498,0.00002702463,0.0001605132,0.0001069385,0.000108178],"domain_scores_gemma":[0.998055,0.001078279,0.0002532486,0.0001557834,0.0002813555,0.0001763409],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003032646,0.0002878687,0.005597075,0.0001460066,0.00006828717,0.00009370548,0.0001532246,0.8450777,0.008097208,0.004546673,0.001788206,0.1338408],"study_design_scores_gemma":[0.00002764004,0.00006099077,0.0003063323,0.000007967394,0.000009739064,0.00001942305,0.0000134968,0.9965274,0.001226529,0.001422049,0.0003701224,0.000008457992],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.06263898,0.0002176353,0.9324421,0.0001742336,0.00006106839,0.0001501475,0.00006229756,0.001855087,0.002398515],"genre_scores_gemma":[0.8167524,0.00007877097,0.1815742,0.0001585615,0.0000247446,0.0002187035,0.00008614841,0.0001471282,0.0009593651],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003715667,"threshold_uncertainty_score":0.008419037,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0223451009336692,"score_gpt":0.3006405223523783,"score_spread":0.2782954214187091,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}