{"id":"W4416158366","doi":"","title":"ORTHRUS: Achieving High Quality of Attribution in Provenance-based Intrusion Detection Systems","year":2025,"lang":"en","type":"article","venue":"NPARC","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Okanagan University College; University of British Columbia, Okanagan Campus; University of British Columbia; National Research Council Canada","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Intrusion detection system; Quality (philosophy); Attribution; Intrusion; Identification (biology)","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":true,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01570606,0.001223702,0.001334044,0.002036006,0.00170566,0.004682612,0.002523118,0.001945946,0.003703331],"category_scores_gemma":[0.06301105,0.0009984728,0.001277136,0.00152558,0.002381658,0.007739312,0.008533137,0.003437347,0.001877254],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001171257,"about_ca_system_score_gemma":0.00393052,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003274615,"about_ca_topic_score_gemma":0.004384178,"domain_scores_codex":[0.9837776,0.004402865,0.001489935,0.002035958,0.007597868,0.0006955847],"domain_scores_gemma":[0.9417508,0.01697825,0.003102762,0.02705863,0.009828749,0.001280761],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.003159981,0.0007914213,0.02246757,0.001280316,0.0005450596,0.001080306,0.002688118,0.07735395,0.07197871,0.08853196,0.04322234,0.6869002],"study_design_scores_gemma":[0.0003613165,0.0005113065,0.002888715,0.00019137,0.0002083965,0.0007596635,0.0005034101,0.691773,0.1253004,0.1396225,0.03768728,0.0001925565],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01838403,0.0003826407,0.9473823,0.0006279686,0.0004858923,0.0002478239,0.0007038386,0.03004845,0.001737096],"genre_scores_gemma":[0.4485165,0.0004939592,0.5378668,0.0004697011,0.0003651304,0.0001696251,0.003067191,0.004586822,0.004464248],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.01570606,"threshold_uncertainty_score":0.08306259,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01523704328631677,"score_gpt":0.2572429166212906,"score_spread":0.2420058733349738,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}