{"id":"W2045756085","doi":"10.1145/2523514.2527006","title":"MAIL: Malware Analysis Intermediate Language","year":2013,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":32,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria","funders":"","keywords":"Malware; Computer science; Opcode; Obfuscation; Software portability; System call; Call graph; Static analysis; Malware analysis; Control flow graph; Process (computing); Artificial intelligence; Natural language processing; Data mining; Programming language; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.00007016106,0.00009730974,0.0001334145,0.0002991011,0.00004055238,0.0001252932,0.0006146414,0.00004012146,0.0008905026],"category_scores_gemma":[0.00002784667,0.0000809737,0.00009957989,0.0009477441,0.00002296937,0.0007307146,0.0002580659,0.00008580201,0.0005903048],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00003083466,"about_ca_system_score_gemma":0.000007848816,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001689673,"about_ca_topic_score_gemma":0.00004529293,"domain_scores_codex":[0.9992027,0.00002550201,0.0001509055,0.000282119,0.0001422773,0.0001965015],"domain_scores_gemma":[0.9991542,0.00003630481,0.00005236707,0.0006044505,0.0000726006,0.00008006538],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.000004027295,0.0001141107,0.006101882,0.00002530437,0.0004589816,0.00007636719,0.00225607,0.0002125778,0.01446548,0.02807814,0.01955781,0.9286492],"study_design_scores_gemma":[0.000811013,0.000481762,0.1512033,0.00003069246,0.0002123407,0.0000652821,0.001264014,0.2899534,0.486796,0.04999993,0.01698845,0.002193855],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01959881,0.00002164504,0.973009,0.0003033176,0.00007658856,0.0001232247,8.466658e-7,0.001455888,0.005410706],"genre_scores_gemma":[0.8183104,0.000004796309,0.1777548,0.0005610685,0.00002136755,0.0000592606,0.000001942432,0.000005864536,0.003280531],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9264554,"threshold_uncertainty_score":0.9750379,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.003864636268046145,"score_gpt":0.2359364415896564,"score_spread":0.2320718053216103,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}