{"id":"W4293870309","doi":"10.13052/jcsm2245-1439.1135","title":"Can We Detect Malicious Behaviours in Encrypted DNS Tunnels Using Network Flow Entropy?","year":2022,"lang":"en","type":"article","venue":"Journal of Cyber Security and Mobility","topic":"Internet Traffic Analysis and Secure E-voting","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"National Institute for Materials Science; Natural Sciences and Engineering Research Council of Canada; Dalhousie University","keywords":"Byte; Computer science; Entropy (arrow of time); Network packet; Encryption; Approximate entropy; Classifier (UML); Data mining; Artificial intelligence; Theoretical computer science; Pattern recognition (psychology); Computer network; Operating system; Physics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002125046,0.0001779737,0.0004589576,0.0001654175,0.0002646984,0.0001172119,0.0006001035,0.00006747138,0.00008828681],"category_scores_gemma":[0.00004539386,0.00016467,0.0002353318,0.0004787172,0.0000628309,0.0002689697,0.0003659657,0.000818238,3.437397e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002333302,"about_ca_system_score_gemma":0.0001495936,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003195923,"about_ca_topic_score_gemma":0.0007203012,"domain_scores_codex":[0.9975418,0.0005159598,0.0007370118,0.0003144513,0.0004914233,0.0003993218],"domain_scores_gemma":[0.9989672,0.0001211001,0.0004181876,0.0002093814,0.0001268895,0.000157223],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003816291,0.002195961,0.03446507,0.00009816598,0.0004659554,0.001799057,0.06947557,0.8206999,0.0008119088,0.03133901,0.0009899704,0.0372778],"study_design_scores_gemma":[0.0008779822,0.0003692735,0.006007656,0.00006646778,0.00008587768,0.00056856,0.0007617131,0.9876434,0.0000894011,0.002557843,0.0006615286,0.0003103644],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9704966,0.001050698,0.0272818,0.0004834335,0.000523154,0.0001185842,0.000007827417,0.00001684532,0.00002104313],"genre_scores_gemma":[0.9966273,0.00004009663,0.002978264,0.0001747075,0.0001591142,0.000003057664,0.000001249447,0.000007584431,0.000008683327],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.1669434,"threshold_uncertainty_score":0.6715046,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01220919879255619,"score_gpt":0.23781740316967,"score_spread":0.2256082043771138,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}