{"id":"W2143251458","doi":"","title":"Self-signed executables: restricting replacement of program binaries by malware","year":2007,"lang":"en","type":"article","venue":"USENIX conference on Hot topics in security","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":22,"is_retracted":false,"has_abstract":true,"ca_institutions":"Carleton University","funders":"","keywords":"Malware; Computer science; Executable; Operating system; Hypervisor; Computer security; Context (archaeology); Rootkit; File system; Public key infrastructure; Public-key cryptography; Virtualization; Encryption; Cloud computing","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.001821793,0.0006602354,0.0006654048,0.001251571,0.001013832,0.001873111,0.002395415,0.001546168,0.002013092],"category_scores_gemma":[0.009829169,0.0005405337,0.0005292625,0.0005950565,0.002945177,0.00578492,0.003752024,0.001384841,0.001529245],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004769387,"about_ca_system_score_gemma":0.001155365,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0005733389,"about_ca_topic_score_gemma":0.000769588,"domain_scores_codex":[0.9971309,0.0004432328,0.0002794134,0.0004790195,0.001314354,0.0003530425],"domain_scores_gemma":[0.9832672,0.003198186,0.001886568,0.008563356,0.002354722,0.0007299425],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001173539,0.0008303356,0.01470925,0.0005832248,0.0001072414,0.001424564,0.002175435,0.02950081,0.2527556,0.1445158,0.007469323,0.544755],"study_design_scores_gemma":[0.0001935888,0.001746371,0.004270499,0.0002365613,0.0001800409,0.003477619,0.0005015396,0.2613561,0.5381706,0.08725865,0.1023381,0.0002703732],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2925788,0.0008848317,0.681019,0.001016352,0.0004550905,0.0003061776,0.0001849971,0.009181642,0.01437305],"genre_scores_gemma":[0.8421102,0.0003036557,0.1446923,0.0004399487,0.0001716864,0.0001658093,0.000284308,0.0006245304,0.01120769],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.002395415,"threshold_uncertainty_score":0.009634614,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02398087902299241,"score_gpt":0.3111819470281815,"score_spread":0.2872010680051891,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}