The Simplest Science Behind Domain Similarity
A clear introduction to Levenshtein distance, homograph normalization, and how similarity scoring helps identify deceptive look-alike domains.
Read on ThreatSTOPWriting / Field notes
Notes from the boundary between models and operations.
Practical writing on security-focused machine learning, production threat detection, retrieval, and the technical judgment that connects them.
Enhancing DNS Security with Machine Learning
How domain similarity, structural signals, character patterns, and continuously refreshed threat intelligence strengthen protective DNS.
Read on ThreatSTOPWhile the notes develop
The case studies carry the full technical story.
See the architectures, constraints, evaluation strategies, and production lessons behind three applied AI systems.