{"id":"W2937420105","doi":"","title":"Exploring a Service-Based Normal Behaviour Profiling System for Botnet Detection","year":2017,"lang":"en","type":"book-chapter","venue":"Author eBooks","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Botnet; Profiling (computer programming); Anomaly detection; Computer science; Deep packet inspection; Payload (computing); Constant false alarm rate; Data mining; Outlier; Encryption; Network packet; Intrusion detection system; False alarm; Computer security; Artificial intelligence; The Internet; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0005612863,0.0004349614,0.0004261486,0.0002791202,0.0009554596,0.000454048,0.0009844843,0.0004488722,0.000005579736],"category_scores_gemma":[0.00001385675,0.0004648546,0.0002875635,0.00001857489,0.00003704298,0.000451497,0.0002588227,0.000555207,0.00006286988],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002047239,"about_ca_system_score_gemma":0.0001545581,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007221758,"about_ca_topic_score_gemma":0.0002146595,"domain_scores_codex":[0.9978487,0.00003476836,0.0004934791,0.0007791767,0.0004087427,0.0004350821],"domain_scores_gemma":[0.9977031,0.00007344563,0.0006145081,0.001151989,0.0002971126,0.0001598337],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003344354,0.00002782264,0.000007388183,0.002085368,0.0001824184,0.000114808,0.001287402,0.0002113451,0.003896523,0.3267516,0.0001653484,0.6649355],"study_design_scores_gemma":[0.003262879,0.001906584,0.0000559321,0.005427698,0.0006100826,0.0002747643,0.00008991505,0.3703142,0.2956303,0.01464085,0.3037542,0.004032623],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.003961713,0.0001763603,0.7029195,0.0002527397,0.01459859,0.004088053,0.00008456209,0.002594543,0.2713239],"genre_scores_gemma":[0.8181992,0.000007737359,0.01805793,0.000256704,0.00314038,0.001591164,0.00005655983,0.0002528479,0.1584375],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8142375,"threshold_uncertainty_score":0.9997803,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.1104901281275905,"score_gpt":0.2614465003788951,"score_spread":0.1509563722513046,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}