CIS490/references
Max Gorog db9f013969 deck: 9 new scenes to meet CIS-490 assignment-guide rubric
Five required + four optional slides, slotted into the existing flow
without renumbering the visible deck UI:

REQUIRED
- problem-statement (after motivation): single-sentence problem,
  three numeric stat cards, explicit task-type justification
  (multi-class classification, why not regression/ranking)
- research-questions (after problem-statement): two-column literature
  gap layout + RQ1/RQ2/RQ3
- solution-overview (after research-questions): inline-SVG block
  diagram of the pipeline (fleet hosts → receiver → episodes →
  windowing → model zoo → per-window phase → trust score →
  containment + reset)
- evaluation-setup (between chunking and models): four blocks
  covering split recipe, primary metric, baselines compared, and
  what's reported alongside accuracy. Each block leads with the
  *why*, matching the assignment's "explain not only what will be
  measured but why" requirement.
- conclusion-future (before references): two-column "what we showed"
  + unsupervised next steps (clustering / anomaly / SSL pretrain /
  embedding viz). Addresses Section 8 of the assignment guide.

OPTIONAL
- theoretical-contributions: window-centre labelling,
  schema-hashed checkpoints, cross-host as eval axis
- practical-contributions: /proc-only deployment,
  producer-agnostic dashboard, labelled dataset on disk
- design-principles: one-loop-many-models, typed events as
  contract, two-agent path ownership
- limitations: two-host fleet, synthetic profiles, 10 Hz floor,
  KNN cross-host gap

Plus references/links.md gains four real online references (PyTorch,
XGBoost, scikit-learn, proc(5)) bringing the citation count from 8
to 12 — over the assignment's 10-source minimum.

CSS additions cover the new layouts (.problem-claim, .problem-stats,
.research-grid, .pipeline-svg + .pipeline-stage / .pipeline-arrow,
.eval-blocks, .conclusion-grid). Limitations cards reuse the
motivation-card pattern with an armed-phase amber marker for the
"warning" feel.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-08 15:32:50 -05:00
..
cis490_ipynbfiles Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
A Deep Learning Model Leveraging Time‑Series System Call Data to Detect Malware Attacks in Virtual Machines.pdf Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
A Deep Learning Model Leveraging Time‑Series System Call Data to Detect Malware Attacks in Virtual Machines.md training/dashboard(references): description sidebar + better space use 2026-05-08 12:40:32 -05:00
CIS490_Project_Workbook.xlsx Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
CIS_490_ML_Project_Assignment_Guide.docx Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
DANTE: Predicting Insider Threat using LSTM on system logs.pdf Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
DANTE: Predicting Insider Threat using LSTM on system logs.md training/dashboard(references): description sidebar + better space use 2026-05-08 12:40:32 -05:00
IEEE 9881803 — network-behavior trust scoring.md motivation scene: why detection matters before how we do it 2026-05-08 14:49:45 -05:00
links.md deck: 9 new scenes to meet CIS-490 assignment-guide rubric 2026-05-08 15:32:50 -05:00
LogBERT: Log Anomaly Detection via BERT.md training/dashboard(references): description sidebar + better space use 2026-05-08 12:40:32 -05:00
LogBERT: Log Anomaly Detection via BERT.pdf Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
Transformer-based malware detection using process resource utilization metrics.pdf Add references folder with course materials and notebooks 2026-05-07 21:14:07 -06:00
Transformer-based malware detection using process resource utilization metrics.md training/dashboard(references): description sidebar + better space use 2026-05-08 12:40:32 -05:00