{"id":"W4293870309","doi":"10.13052/jcsm2245-1439.1135","title":"Can We Detect Malicious Behaviours in Encrypted DNS Tunnels Using Network Flow Entropy?","year":2022,"lang":"en","type":"article","venue":"Journal of Cyber Security and Mobility","topic":"Internet Traffic Analysis and Secure E-voting","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"National Institute for Materials Science; Natural Sciences and Engineering Research Council of Canada; Dalhousie University","keywords":"Byte; Computer science; Entropy (arrow of time); Network packet; Encryption; Approximate entropy; Classifier (UML); Data mining; Artificial intelligence; Theoretical computer science; Pattern recognition (psychology); Computer network; Operating system; Physics","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001900853,0.0009480006,0.0008988621,0.004887964,0.0002824829,0.00151809,0.0005520292,0.0007565778,0.0006608337],"category_scores_gemma":[0.007795327,0.0002548795,0.0005507352,0.001419675,0.0005992193,0.003475449,0.0006800733,0.0007712627,0.0006595185],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004469267,"about_ca_system_score_gemma":0.0004438662,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001334713,"about_ca_topic_score_gemma":0.001896483,"domain_scores_codex":[0.9992034,0.0002215453,0.00005528285,0.000156743,0.0002357931,0.000127181],"domain_scores_gemma":[0.9967333,0.00162556,0.000641089,0.0003855076,0.0004749582,0.0001396416],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001002372,0.0006658459,0.4158769,0.0003369129,0.0003538784,0.0003987594,0.0002578944,0.1514579,0.02483831,0.006533971,0.006623174,0.3916542],"study_design_scores_gemma":[0.00001952249,0.0001592487,0.07053421,0.0000647304,0.00007466955,0.000316324,0.0001521107,0.9000841,0.01541595,0.01039713,0.002719103,0.00006287579],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8072591,0.001651382,0.1794146,0.001261399,0.000217731,0.0001121459,0.002363849,0.002827806,0.004891883],"genre_scores_gemma":[0.9811276,0.0003163598,0.01665998,0.00006292625,0.0001151087,0.00002274242,0.001242104,0.0000467453,0.0004064872],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.004887964,"threshold_uncertainty_score":0.0100528,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01220919879255619,"score_gpt":0.23781740316967,"score_spread":0.2256082043771138,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}