{"id":"W2076952382","doi":"10.1007/s11416-014-0222-y","title":"Sliding window and control flow weight for metamorphic malware detection","year":2014,"lang":"en","type":"article","venue":"Journal of Computer Virology and Hacking Techniques","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":25,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Victoria","funders":"","keywords":"Opcode; Computer science; Malware; Control flow; Sliding window protocol; Compiler; Feature (linguistics); Artificial intelligence; Data mining; Window (computing); Operating system; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008227454,0.0006656709,0.0006180292,0.001573705,0.0003520502,0.0007111636,0.000630665,0.0004730638,0.002095982],"category_scores_gemma":[0.00311715,0.0002400308,0.0004157884,0.0009526051,0.0002815014,0.001055862,0.000600993,0.0006197834,0.0003370763],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004019898,"about_ca_system_score_gemma":0.0006698093,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003694622,"about_ca_topic_score_gemma":0.003149741,"domain_scores_codex":[0.9994531,0.00006842528,0.00003921064,0.0001014843,0.0002689636,0.00006881814],"domain_scores_gemma":[0.9986776,0.0005480027,0.0001302095,0.0001845502,0.0003832676,0.00007636902],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001151318,0.0003044095,0.003769134,0.00009010897,0.00007609603,0.000086735,0.00009560395,0.03571531,0.07407822,0.005370773,0.001647928,0.8776143],"study_design_scores_gemma":[0.0000173434,0.0001887649,0.00287867,0.000008601079,0.00003619422,0.00006951228,0.00002790768,0.9725832,0.02144652,0.001636,0.001091456,0.00001591747],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1410518,0.0008497121,0.854066,0.00009454008,0.0001520036,0.00009097095,0.000102769,0.002462853,0.001129397],"genre_scores_gemma":[0.7963881,0.0003300981,0.1993182,0.00004196198,0.00007920162,0.0000732853,0.0001804799,0.0001290264,0.003459698],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.003694622,"threshold_uncertainty_score":0.007346213,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006507935392993599,"score_gpt":0.2258057382333638,"score_spread":0.2192978028403702,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}