{"id":"W2051272247","doi":"10.1007/s11416-009-0139-z","title":"Stealth malware analysis from kernel space with Kolumbo","year":2009,"lang":"en","type":"article","venue":"Journal in Computer Virology","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":false,"ca_institutions":"Université de Sherbrooke","funders":"","keywords":"Computer science; Malware; Debugging; Malware analysis; Operating system; Hypervisor; Kernel (algebra); Task (project management); Virtual machine; Computer security; Static analysis; User space; Linux kernel; Programming language; Virtualization; Cloud computing","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002206909,0.0005135975,0.0005336193,0.002167369,0.0006105013,0.0007705314,0.0003785698,0.0003965351,0.001928608],"category_scores_gemma":[0.001256279,0.0002227033,0.0004140938,0.0006181988,0.0003123903,0.00116516,0.001039961,0.0003983942,0.0006532531],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002144689,"about_ca_system_score_gemma":0.0003683469,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0006843745,"about_ca_topic_score_gemma":0.001183464,"domain_scores_codex":[0.9997676,0.0000378058,0.00001254168,0.00003547866,0.00008786105,0.00005880833],"domain_scores_gemma":[0.9994758,0.0001506306,0.00009140896,0.0001344205,0.000103395,0.00004439022],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.001543846,0.0004205602,0.02407359,0.0002146399,0.0001749986,0.001088421,0.0004915223,0.03975239,0.2659957,0.01119963,0.004858507,0.6501861],"study_design_scores_gemma":[0.00002707891,0.0002700102,0.01147776,0.00002343858,0.00005344925,0.0006280237,0.0002171402,0.8959224,0.08018465,0.007717207,0.003423179,0.0000556503],"study_design_candidate":"not_applicable","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.6669058,0.0005754635,0.3177838,0.0001958213,0.0001038334,0.00009280303,0.000299926,0.009450615,0.004591966],"genre_scores_gemma":[0.9106368,0.000106233,0.0864845,0.00003726817,0.00002671842,0.000035431,0.0002919267,0.0003005925,0.002080598],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.002167369,"threshold_uncertainty_score":0.006451786,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008247963480913825,"score_gpt":0.2562394783829036,"score_spread":0.2479915149019897,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}