{"id":"W4402957849","doi":"10.1145/3678890.3678921","title":"Extending C2 Traffic Detection Methodologies: From TLS 1.2 to TLS 1.3-enabled Malware","year":2024,"lang":"en","type":"article","venue":"","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Malware; Computer science; Computer security; Operating system; Embedded system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000767044,0.0001897403,0.0002074325,0.0003037876,0.0002248554,0.0006575524,0.0005822054,0.0001475889,0.0004592506],"category_scores_gemma":[0.0001580952,0.0001624829,0.0001239324,0.001207335,0.00001900898,0.000840081,0.000291061,0.0002890624,0.00065972],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001196848,"about_ca_system_score_gemma":0.00003481491,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001421449,"about_ca_topic_score_gemma":0.000136181,"domain_scores_codex":[0.9980855,0.0002432891,0.0002925675,0.0007330132,0.0002781465,0.0003674663],"domain_scores_gemma":[0.998696,0.0005963419,0.00003597433,0.0004828913,0.00005247563,0.0001363627],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001896569,0.00001446481,0.000001537361,0.00002007977,0.00003354925,0.00003303002,0.001057822,0.003826394,0.01905203,0.00459037,0.003310832,0.9680409],"study_design_scores_gemma":[0.0002220719,0.0004145415,0.0003009585,0.0001939822,0.00002784364,0.00005453168,0.0003338309,0.7274214,0.1353539,0.02083908,0.1142257,0.0006121757],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.09774739,0.0005238625,0.8937541,0.0008826563,0.003473197,0.0002195732,0.000002440043,0.002034469,0.001362307],"genre_scores_gemma":[0.8685793,0.00008998643,0.1290405,0.000651397,0.0005193894,0.00004432321,0.000002067636,0.00002015083,0.001052915],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9674287,"threshold_uncertainty_score":0.8479587,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04491667366303918,"score_gpt":0.3033650481543261,"score_spread":0.2584483744912869,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}