{"id":"W1546317334","doi":"","title":"Hypervisor support for identifying covertly executing binaries","year":2008,"lang":"en","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":202,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Rootkit; Hypervisor; Computer science; Malware; Operating system; Executable; Code (set theory); Kernel (algebra); Source code; System call; Linux kernel; Semantic gap; Embedded system; Virtualization; Programming language; Cloud computing","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002715987,0.00009359869,0.0001172716,0.00007242574,0.0006042903,0.0001563248,0.0006281845,0.0000434271,0.00003170288],"category_scores_gemma":[0.00009817175,0.00009293264,0.00007495139,0.00024454,0.00004218356,0.0005325712,0.000176999,0.00006482463,0.00006657071],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002220946,"about_ca_system_score_gemma":0.00008464027,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000232769,"about_ca_topic_score_gemma":0.000001633035,"domain_scores_codex":[0.9990209,0.00001950713,0.0002383456,0.0003159785,0.000144939,0.0002602685],"domain_scores_gemma":[0.9991847,0.0002170847,0.00008071431,0.00034945,0.0001110705,0.00005696422],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001373811,0.0001399571,0.004905613,0.0001024433,0.00003725923,0.00002509333,0.009507615,0.0001986302,0.002895665,0.9330353,0.02948134,0.01965734],"study_design_scores_gemma":[0.001895215,0.0003453264,0.009504105,0.00006330006,0.0000175346,0.0006390057,0.0009504122,0.7088323,0.05357294,0.02778156,0.1951776,0.001220668],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.03215193,0.00005458859,0.9608957,0.0005793998,0.0005774695,0.0001483591,0.000001054063,0.0003362173,0.005255308],"genre_scores_gemma":[0.8036046,0.00001159792,0.1940212,0.0008905528,0.0001025492,0.00001696787,0.000003710319,0.000007176286,0.001341666],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9052538,"threshold_uncertainty_score":0.4647774,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.1085937034258301,"score_gpt":0.304664452298402,"score_spread":0.1960707488725719,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}