{"id":"W4296991884","doi":"10.3390/electronics11192992","title":"BTH: Behavior-Based Structured Threat Hunting Framework to Analyze and Detect Advanced Adversaries","year":2022,"lang":"en","type":"article","venue":"Electronics","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Computer security; Adversarial system; Malware; Compromise; Attack surface; Phishing; Computer science; Obstacle; Internet privacy; Business; Political science; The Internet; Law; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002100022,0.0002138549,0.0002173277,0.0002305143,0.000626832,0.0001060924,0.0006822281,0.00006622532,0.00003466655],"category_scores_gemma":[0.0001286927,0.0002437445,0.00006604049,0.001001862,0.00003637844,0.0003063288,0.0004892646,0.0006280503,0.000002083689],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003581432,"about_ca_system_score_gemma":0.0001465808,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00000951993,"about_ca_topic_score_gemma":0.00007436846,"domain_scores_codex":[0.9981956,0.000082171,0.0002204302,0.0005960243,0.0003630324,0.0005427398],"domain_scores_gemma":[0.9989205,0.0001365276,0.0001228554,0.0006451667,0.00006813094,0.0001068141],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0001757928,0.00007512895,0.00184339,0.00002555911,0.00004039818,0.00006705109,0.0008013904,0.01789024,0.03326253,0.02964331,0.0001340831,0.9160411],"study_design_scores_gemma":[0.001441739,0.005524446,0.006004971,0.00005458931,0.00009848904,0.0002293263,0.0002690805,0.01944165,0.6812168,0.1481106,0.1353871,0.002221264],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1183104,0.001784146,0.8780844,0.0003299649,0.0001917405,0.0004077938,0.000007078101,0.0008440993,0.00004041733],"genre_scores_gemma":[0.706834,0.00003311408,0.292293,0.0005461425,0.00002235116,0.0002153736,0.000003150188,0.00002327681,0.00002959382],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9138198,"threshold_uncertainty_score":0.9939611,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006314927013716265,"score_gpt":0.2574175147041839,"score_spread":0.2511025876904677,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}