{"id":"W4406832453","doi":"10.1186/s42400-024-00311-y","title":"Angus: efficient active learning strategies for provenance based intrusion detection","year":2025,"lang":"en","type":"article","venue":"Cybersecurity","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"National Natural Science Foundation of China; National Science Foundation","keywords":"Intrusion detection system; Computer science; Provenance; Intrusion; Data mining; Geology; Geochemistry","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.005196423,0.0009090451,0.001124438,0.001712818,0.000731166,0.001411963,0.003084221,0.001266175,0.001343713],"category_scores_gemma":[0.01302346,0.0004956099,0.0006548167,0.000959709,0.001172906,0.003221957,0.001986645,0.001823063,0.0002940906],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001193772,"about_ca_system_score_gemma":0.001428936,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003255648,"about_ca_topic_score_gemma":0.003082854,"domain_scores_codex":[0.9976693,0.0009076814,0.0001664994,0.0004251031,0.000675095,0.0001563921],"domain_scores_gemma":[0.9906776,0.006127333,0.0005058305,0.0008261686,0.001564777,0.0002983524],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008003112,0.0006553458,0.005202721,0.0001231533,0.0001079831,0.000139961,0.0003165085,0.5494323,0.01467854,0.02140545,0.003074879,0.4040629],"study_design_scores_gemma":[0.000009244483,0.00002608599,0.00006016397,0.000001695127,0.00000304721,0.00001048836,0.00000695209,0.9946799,0.001862416,0.003168844,0.0001679774,0.000003115305],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.01996522,0.0001961958,0.9777321,0.0001850744,0.00002592407,0.00009639331,0.00005635585,0.001339094,0.0004035559],"genre_scores_gemma":[0.6591855,0.0001165084,0.338598,0.0002136374,0.00005454124,0.0002160436,0.0002700864,0.0001237112,0.001221947],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.005196423,"threshold_uncertainty_score":0.02748162,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006004766645088873,"score_gpt":0.2631555092832132,"score_spread":0.2571507426381244,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}