{"id":"W2059354039","doi":"10.1109/cnsr.2010.16","title":"A Multidisciplinary Approach for Online Detection of X86 Malicious Executables","year":2010,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Alberta","funders":"","keywords":"Malware; Executable; Computer science; x86; Signature (topology); Cryptovirology; Software; Data mining; False positive rate; Computer security; Artificial intelligence; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001532724,0.001127638,0.001219177,0.007388467,0.0009976702,0.001924895,0.001340318,0.002092389,0.002882369],"category_scores_gemma":[0.002938868,0.0004427846,0.001276265,0.001973941,0.000681871,0.002049983,0.001910406,0.000934528,0.001508459],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005508405,"about_ca_system_score_gemma":0.0007399533,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0006218333,"about_ca_topic_score_gemma":0.0009215701,"domain_scores_codex":[0.9972576,0.0005504063,0.0001580672,0.0006758778,0.001219118,0.0001388401],"domain_scores_gemma":[0.9984093,0.0004045721,0.0002005455,0.0002347514,0.0006423226,0.0001084299],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0001978715,0.0006618223,0.00663145,0.000198987,0.0001999347,0.0004345186,0.0004253427,0.01663966,0.1006323,0.008108816,0.001717652,0.8641515],"study_design_scores_gemma":[0.00003959149,0.000540572,0.008510887,0.00006588297,0.0001667952,0.002514962,0.0005682539,0.885037,0.0706846,0.02173463,0.01000736,0.0001293696],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02351011,0.0003565346,0.9721845,0.0003521942,0.00003232914,0.0001874403,0.00005153737,0.000739565,0.00258572],"genre_scores_gemma":[0.2023082,0.0003823021,0.7913718,0.0002140625,0.00008054738,0.0002519314,0.0001652418,0.00006746971,0.005158441],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.007388467,"threshold_uncertainty_score":0.009642482,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01318375840170992,"score_gpt":0.2770447479694833,"score_spread":0.2638609895677733,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}