{"id":"W4406832453","doi":"10.1186/s42400-024-00311-y","title":"Angus: efficient active learning strategies for provenance based intrusion detection","year":2025,"lang":"en","type":"article","venue":"Cybersecurity","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"National Natural Science Foundation of China; National Science Foundation","keywords":"Intrusion detection system; Computer science; Provenance; Intrusion; Data mining; Geology; Geochemistry","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002255151,0.000141544,0.0001414698,0.0001796303,0.0003273512,0.0001126562,0.0003206937,0.00009536317,0.000002812828],"category_scores_gemma":[0.0002172168,0.0001449386,0.00006814457,0.0005334206,0.00005292223,0.0003944002,0.0001228792,0.0002464927,0.000002988844],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.000194268,"about_ca_system_score_gemma":0.0001414235,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002990716,"about_ca_topic_score_gemma":0.00003315364,"domain_scores_codex":[0.9989482,0.00006637191,0.0001728014,0.0004413348,0.0001349915,0.0002363543],"domain_scores_gemma":[0.999169,0.0001516242,0.000122825,0.0003201419,0.0001997386,0.00003668145],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0002520952,0.0002778279,0.00003818154,0.0002307464,0.00003060073,0.000006522519,0.002162177,0.017312,0.07442901,0.1814744,0.0002696809,0.7235167],"study_design_scores_gemma":[0.0005361277,0.000304743,0.0004560022,0.00008911081,0.000008603341,0.000001877057,0.0004122294,0.327643,0.614239,0.04296552,0.01308967,0.0002541675],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03160424,0.0000482575,0.964929,0.0001482315,0.0004002207,0.0006010098,0.000002853035,0.0009822402,0.001283923],"genre_scores_gemma":[0.9607717,0.00000315161,0.03877033,0.0001307782,0.00002752487,0.0002233954,0.000002003128,0.000007596735,0.00006345417],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9291675,"threshold_uncertainty_score":0.5910423,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006004766645088873,"score_gpt":0.2631555092832132,"score_spread":0.2571507426381244,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}