{"id":"W4389791575","doi":"10.1007/s10207-023-00790-z","title":"Detection, characterization, and profiling DoH Malicious traffic using statistical pattern recognition","year":2023,"lang":"en","type":"article","venue":"International Journal of Information Security","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":15,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Toronto; York University","funders":"","keywords":"Profiling (computer programming); Computer science; Computer security; Data mining; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006965519,0.0001074082,0.0001358723,0.0005808097,0.0001321044,0.0003985346,0.000323933,0.00008143474,0.00002658398],"category_scores_gemma":[0.0001779731,0.0001051148,0.00005162845,0.0004008172,0.00003385894,0.003794509,0.0001073442,0.000231689,0.00004684084],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00009016824,"about_ca_system_score_gemma":0.00006259886,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000105825,"about_ca_topic_score_gemma":0.000004737397,"domain_scores_codex":[0.9983686,0.00008275423,0.0007207743,0.0001022486,0.0005792328,0.0001463883],"domain_scores_gemma":[0.9981462,0.00008091621,0.0005920185,0.00009072872,0.001000465,0.00008967728],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00006834143,0.00004184593,0.0002649419,0.0000286239,0.00006934592,0.00002514063,0.003189167,0.0008265098,0.002054214,0.00118871,0.0001352025,0.9921079],"study_design_scores_gemma":[0.0009957084,0.0001756426,0.007107489,0.0001083867,0.00001677933,0.001077084,0.0002240394,0.9720201,0.008125583,0.004137996,0.005757067,0.0002540895],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.4732576,0.000005567364,0.5249031,0.0003170344,0.001345734,0.00006631033,0.0000252568,0.00005859332,0.0000207321],"genre_scores_gemma":[0.9964997,0.0001424845,0.002559363,0.0003443466,0.0003672299,0.00000306341,0.00007683204,0.000004965478,0.000002021848],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.9918539,"threshold_uncertainty_score":0.4286459,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01625480221771067,"score_gpt":0.257742658488794,"score_spread":0.2414878562710834,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}