{"id":"W2051272247","doi":"10.1007/s11416-009-0139-z","title":"Stealth malware analysis from kernel space with Kolumbo","year":2009,"lang":"en","type":"article","venue":"Journal in Computer Virology","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":false,"ca_institutions":"Université de Sherbrooke","funders":"","keywords":"Computer science; Malware; Debugging; Malware analysis; Operating system; Hypervisor; Kernel (algebra); Task (project management); Virtual machine; Computer security; Static analysis; User space; Linux kernel; Programming language; Virtualization; Cloud computing","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003433532,0.0002203923,0.0004959833,0.0007695383,0.0001289248,0.0001786127,0.001001081,0.0001462127,0.0000267476],"category_scores_gemma":[0.00001078944,0.0001913079,0.0001310857,0.001292379,0.00004804078,0.0006251431,0.0001631897,0.0007538843,0.00001398288],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001618529,"about_ca_system_score_gemma":0.00006977075,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00009053583,"about_ca_topic_score_gemma":0.0002556729,"domain_scores_codex":[0.9980322,0.0002479196,0.0004531043,0.0005267169,0.0002862605,0.0004537641],"domain_scores_gemma":[0.9986045,0.0001406561,0.0003491264,0.0006095869,0.0001174131,0.0001786845],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"observational","study_design_scores_codex":[0.000461093,0.0009633046,0.0608909,0.00001217621,0.001015231,0.004738564,0.00292049,0.1644055,0.001668511,0.008868406,0.004547299,0.7495085],"study_design_scores_gemma":[0.001880393,0.003636435,0.5412617,0.0000544124,0.0001296535,0.001371413,0.00002414162,0.3742307,0.001120282,0.06996567,0.005497076,0.0008280993],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1077329,0.0001027883,0.8879362,0.003578301,0.0002345579,0.00009277569,0.000001682774,0.0002290489,0.0000916365],"genre_scores_gemma":[0.5546165,0.00004785807,0.4428413,0.002247017,0.0002054359,0.000002964231,0.000001411049,0.000007539024,0.00002994257],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.7486804,"threshold_uncertainty_score":0.7801309,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008247963480913825,"score_gpt":0.2562394783829036,"score_spread":0.2479915149019897,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}