{"id":"W2739052910","doi":"10.23919/inm.2017.7987417","title":"Exploring a service-based normal behaviour profiling system for botnet detection","year":2017,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Botnet; Computer science; Anomaly detection; Profiling (computer programming); Payload (computing); Constant false alarm rate; Encryption; Network packet; Data mining; Intrusion detection system; Deep packet inspection; Outlier; False alarm; Computer network; Real-time computing; Computer security; Artificial intelligence; The Internet; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003622951,0.0001113639,0.0001148423,0.00007674716,0.001103409,0.0005196332,0.0006451087,0.00006000703,0.000003554849],"category_scores_gemma":[0.0000205831,0.0001057917,0.00007098677,0.0001003527,0.00001118952,0.001637081,0.0001460927,0.0001033915,0.00002308236],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006623458,"about_ca_system_score_gemma":0.00003221721,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000275469,"about_ca_topic_score_gemma":0.0003236792,"domain_scores_codex":[0.9990495,0.00002603418,0.0001890718,0.0003103483,0.0001706883,0.0002542995],"domain_scores_gemma":[0.998932,0.00003205365,0.0001554603,0.0006587366,0.0001484923,0.00007326097],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0006155266,0.0004059356,0.006317357,0.001804407,0.00009740562,0.00004592884,0.001771843,0.009322994,0.08288613,0.08040395,0.000225376,0.8161032],"study_design_scores_gemma":[0.0004605152,0.0001265085,0.001449975,0.00005420409,0.000007806309,0.000009575458,0.00005171733,0.6594859,0.337675,0.00006027875,0.0004668898,0.0001516007],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.3274453,0.000005678451,0.6695427,0.0002244756,0.001569258,0.0003095535,0.000001168295,0.0003593954,0.0005424867],"genre_scores_gemma":[0.9792244,0.000001421348,0.0200961,0.00008715813,0.0002870605,0.0002560878,0.000001412612,0.000009257571,0.00003711428],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8159515,"threshold_uncertainty_score":0.8486644,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.08980855718034453,"score_gpt":0.2599114011773079,"score_spread":0.1701028439969633,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}