{"id":"W2170899024","doi":"10.1109/icics.2009.5397551","title":"An approach towards anomaly based detection and profiling covert TCP/IP channels","year":2009,"lang":"en","type":"article","venue":"","topic":"Internet Traffic Analysis and Secure E-voting","field":"Computer Science","cited_by":9,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Covert channel; Anomaly detection; Covert; Profiling (computer programming); Payload (computing); Computer network; Protocol (science); Computer security; Intrusion detection system; Data mining","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003824751,0.0001385052,0.0001678063,0.0001161357,0.000119174,0.0003144162,0.000333627,0.00007067162,0.000008394671],"category_scores_gemma":[0.00001295567,0.0001123802,0.00006501402,0.0002649457,0.0000160747,0.0004581455,0.00002999146,0.000111029,0.000004405917],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0000247784,"about_ca_system_score_gemma":0.00003017682,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002598611,"about_ca_topic_score_gemma":0.000008964122,"domain_scores_codex":[0.9988472,0.00005854475,0.0001951564,0.0004487596,0.0002112707,0.0002389998],"domain_scores_gemma":[0.9995691,0.00001342512,0.00005738496,0.0001942388,0.00007046639,0.00009543212],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000528343,0.0007583124,0.0004487395,0.00005303513,0.00008374728,0.00002783351,0.002601601,0.07679579,0.01073222,0.3102601,0.0001133408,0.5980724],"study_design_scores_gemma":[0.0001710854,0.0002144535,0.0008007715,0.000005110987,0.00000801396,0.000009815381,0.00005594558,0.9900954,0.00839806,0.00003166794,0.00005370862,0.0001560146],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1648726,0.00002508985,0.8321498,0.0001198528,0.00008819711,0.00009027089,2.234836e-7,0.0001781444,0.002475822],"genre_scores_gemma":[0.9510646,0.000001030802,0.04808699,0.0006265156,0.0000990257,0.000003840661,0.000003113684,0.00000478596,0.0001100887],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9132996,"threshold_uncertainty_score":0.4582732,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01496435199485713,"score_gpt":0.2350610528850244,"score_spread":0.2200967008901673,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}