{"id":"W7127123361","doi":"10.1109/trustcom66490.2025.00236","title":"From static to dynamic risk indicators in predicting and detecting insider attacks","year":2025,"lang":"","type":"article","venue":"","topic":"Information and Cyber Security","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"Mitacs","keywords":"Insider threat; Insider; Random forest; Autoregressive model; Scalability; Baseline (sea); Time series; Precision and recall","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0008334027,0.0002493304,0.000296394,0.001175737,0.000345154,0.0005664781,0.0004992092,0.0001499222,0.00007495841],"category_scores_gemma":[0.0004853649,0.0002578959,0.00004416257,0.002422374,0.00005707481,0.0009651478,0.0008858357,0.000595935,0.00005373217],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001796645,"about_ca_system_score_gemma":0.0002265445,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002743084,"about_ca_topic_score_gemma":0.002992845,"domain_scores_codex":[0.9976137,0.0002043933,0.0008576935,0.0005517593,0.0002993977,0.0004731075],"domain_scores_gemma":[0.9985977,0.0004343158,0.0002422644,0.000476127,0.00006008971,0.0001895098],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002054621,0.00006444883,0.2264737,0.00008344647,0.00006305374,0.000008672379,0.08961166,0.0006306442,0.00001907605,0.003059979,0.0001394688,0.6798253],"study_design_scores_gemma":[0.0007058326,0.00005279444,0.2225003,0.0002487327,0.00001860552,0.000001467253,0.004277491,0.7683003,0.0003073154,0.002898901,0.0004235041,0.0002647293],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.7516787,0.000114696,0.2410653,0.0007535299,0.000586853,0.0003532207,0.00001298265,0.00008334501,0.005351365],"genre_scores_gemma":[0.9857845,0.00004398684,0.01190316,0.002050793,0.00001856419,0.00001537,0.000002066702,0.000006750753,0.0001747657],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.7676697,"threshold_uncertainty_score":0.9999873,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.005241440035349501,"score_gpt":0.2580069818714504,"score_spread":0.2527655418361009,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}