{"id":"W2045756085","doi":"10.1145/2523514.2527006","title":"MAIL: Malware Analysis Intermediate Language","year":2013,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":32,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Victoria","funders":"","keywords":"Malware; Computer science; Opcode; Obfuscation; Software portability; System call; Call graph; Static analysis; Malware analysis; Control flow graph; Process (computing); Artificial intelligence; Natural language processing; Data mining; Programming language; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001542626,0.002225738,0.0007842671,0.002694763,0.0006844625,0.002494709,0.001639733,0.001374195,0.01540415],"category_scores_gemma":[0.005201,0.0009527693,0.001112085,0.0009187156,0.001003989,0.004375412,0.002064381,0.002209126,0.01637213],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.001063295,"about_ca_system_score_gemma":0.001878861,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.001166523,"about_ca_topic_score_gemma":0.001409889,"domain_scores_codex":[0.9978568,0.0003786225,0.0004217548,0.0004605579,0.0006399576,0.0002422495],"domain_scores_gemma":[0.9959792,0.001392404,0.0008946278,0.0007252338,0.000834768,0.0001736858],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.0027913,0.0004954147,0.01441946,0.002711707,0.0001793224,0.001843614,0.001782366,0.005540592,0.08929913,0.09797581,0.3591223,0.423839],"study_design_scores_gemma":[0.000203796,0.0004871255,0.006188557,0.0005971236,0.0001277001,0.003253986,0.0002636245,0.04380966,0.1403117,0.03491028,0.7695544,0.0002919413],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"software","genre_scores_codex":[0.02719344,0.00124047,0.54094,0.001549658,0.0005558259,0.001182862,0.03631144,0.3712313,0.01979511],"genre_scores_gemma":[0.1780124,0.001035665,0.6623913,0.00266191,0.0005668701,0.002178788,0.08112743,0.03871904,0.03330669],"genre_candidate":"software","genre_consensus":null,"teacher_disagreement_score":0.01540415,"threshold_uncertainty_score":0.05153209,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.003864636268046145,"score_gpt":0.2359364415896564,"score_spread":0.2320718053216103,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}