{"id":"W4296991884","doi":"10.3390/electronics11192992","title":"BTH: Behavior-Based Structured Threat Hunting Framework to Analyze and Detect Advanced Adversaries","year":2022,"lang":"en","type":"article","venue":"Electronics","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":21,"is_retracted":false,"has_abstract":true,"ca_institutions":"Dalhousie University","funders":"","keywords":"Computer security; Adversarial system; Malware; Compromise; Attack surface; Phishing; Computer science; Obstacle; Internet privacy; Business; Political science; The Internet; Law; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001374412,0.001160974,0.0006960735,0.002255067,0.0007161198,0.001606634,0.001938871,0.001360981,0.004539496],"category_scores_gemma":[0.003373369,0.0005165061,0.001708346,0.0007230644,0.001349207,0.002096836,0.002240418,0.001879396,0.001532335],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001092083,"about_ca_system_score_gemma":0.001838785,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.006890956,"about_ca_topic_score_gemma":0.008438155,"domain_scores_codex":[0.9991428,0.0002254204,0.00004932727,0.0001646029,0.0003083436,0.0001094544],"domain_scores_gemma":[0.9987318,0.0005329085,0.0001986474,0.0002289706,0.0001852709,0.0001225414],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0004139824,0.0007674359,0.0249259,0.000712916,0.0004947492,0.001132363,0.00132575,0.3773776,0.03152943,0.2073522,0.02361764,0.3303501],"study_design_scores_gemma":[0.00001724166,0.00009497288,0.001372841,0.00004059026,0.00002956238,0.0002297556,0.0001307022,0.935267,0.002496927,0.05228833,0.00800157,0.00003039762],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.003999861,0.0001038503,0.9894811,0.0001466723,0.00002582862,0.0002338853,0.0003780126,0.003760766,0.001869968],"genre_scores_gemma":[0.199002,0.0002713721,0.7923367,0.000307001,0.00006037617,0.0006253127,0.001469245,0.00046546,0.005462507],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.006890956,"threshold_uncertainty_score":0.01518613,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006314927013716265,"score_gpt":0.2574175147041839,"score_spread":0.2511025876904677,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}