{"id":"W4389791575","doi":"10.1007/s10207-023-00790-z","title":"Detection, characterization, and profiling DoH Malicious traffic using statistical pattern recognition","year":2023,"lang":"en","type":"article","venue":"International Journal of Information Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Toronto; York University","funders":"","keywords":"Profiling (computer programming); Computer science; Computer security; Data mining; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003484504,0.0004786808,0.0004872239,0.002355468,0.0002781397,0.000738784,0.0004168621,0.0003686773,0.0004852446],"category_scores_gemma":[0.001490313,0.0001452832,0.0002789502,0.0008633713,0.0003001421,0.0007075493,0.0004150813,0.0005515431,0.0005227871],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002639435,"about_ca_system_score_gemma":0.0004705601,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00172841,"about_ca_topic_score_gemma":0.002433423,"domain_scores_codex":[0.9995257,0.00006583126,0.00002907853,0.00008825375,0.0002061565,0.00008500914],"domain_scores_gemma":[0.9988362,0.0002889982,0.0002820972,0.0001660581,0.0003504334,0.00007624746],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0006934351,0.0007912847,0.1681912,0.0001683522,0.0001480589,0.0006994049,0.0002358319,0.05088694,0.1664427,0.003331454,0.003363588,0.6050477],"study_design_scores_gemma":[0.000009124775,0.0002525237,0.03682048,0.00001047871,0.00003089858,0.0005005494,0.0001402907,0.9268529,0.0329231,0.001261262,0.001174368,0.00002401647],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.757785,0.0004175352,0.2347505,0.0003255399,0.00009092767,0.0001541641,0.0005980693,0.003100588,0.002777736],"genre_scores_gemma":[0.9660894,0.0001212094,0.03203202,0.00004270656,0.00003000796,0.0000315336,0.0005016191,0.00004081763,0.001110647],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002355468,"threshold_uncertainty_score":0.003436685,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01625480221771067,"score_gpt":0.257742658488794,"score_spread":0.2414878562710834,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}