Evidence

Measured results.

Each row was produced by the engine, trained on normal behaviour only, and judged against a pass mark set before the run.

Dataset and taskResultOutcome
CSIC 2010 (public). Stop attacking web sources, not genuine ones91.69% of attacking sources by the 3rd request, 0 of 6,000 genuine; 100% by the 10thPass
ADFA-LD (public). Rank host intrusions above normal activityAUC 0.9246Pass
AIT log data (public). Find attack windows in mail-server logsAUC 0.9604, all 4 hostsPass
Server Machine Dataset (public). Find anomalies in server metricsAUC 0.7747; 23 of 28 machines at 0.70 or betterPass
Wikidata relations (public). Discover entity types with no labels81% purity against the true typesPass