{"id":"W3105087971","doi":"10.1109/dasc-picom-cbdcom-cyberscitech49142.2020.00026","title":"Detection of DoH Tunnels using Time-series Classification of Encrypted Traffic","year":2020,"lang":"en","type":"article","venue":"","topic":"Internet Traffic Analysis and Secure E-voting","field":"Computer Science","cited_by":216,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Domain Name System; Computer science; Computer security; Encryption; Computer network; Man-in-the-middle attack; Eavesdropping; Network packet; The Internet; Transport Layer Security; Hypertext Transfer Protocol; Covert channel; World Wide Web; Cloud computing security; Cloud computing; Operating system; Security information and event management","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0007373773,0.0004794197,0.0004404929,0.003359956,0.0003219377,0.0008051132,0.0003907564,0.0006132851,0.0004852132],"category_scores_gemma":[0.001877186,0.00009503181,0.0003729641,0.001377752,0.0002682809,0.0006260345,0.0002974147,0.0005738624,0.000413352],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004417216,"about_ca_system_score_gemma":0.0002386828,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002566343,"about_ca_topic_score_gemma":0.001707055,"domain_scores_codex":[0.9995233,0.00006845731,0.00005005951,0.0001076913,0.0001735751,0.00007694712],"domain_scores_gemma":[0.9988121,0.0003787638,0.0003178413,0.0001035151,0.0002870115,0.0001009239],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0008603919,0.00137599,0.3525764,0.000166918,0.0002334005,0.001303835,0.0004421372,0.1370277,0.06889517,0.006493368,0.00450302,0.4261218],"study_design_scores_gemma":[0.000003419085,0.0001085326,0.04856067,0.000009510409,0.00002074301,0.0002958463,0.0001552998,0.939613,0.009407605,0.001027764,0.0007756528,0.00002197553],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"methods","genre_scores_codex":[0.9174171,0.0002049099,0.07864162,0.0002231398,0.00008181274,0.00006458467,0.000604583,0.0007380822,0.002024216],"genre_scores_gemma":[0.9893956,0.00007737104,0.009459479,0.00001646393,0.00002832357,0.00001507548,0.0005356487,0.00001345465,0.0004586818],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.003359956,"threshold_uncertainty_score":0.005102813,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02846102960472317,"score_gpt":0.2361290249856536,"score_spread":0.2076679953809304,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}