{"id":"W2564822508","doi":"10.1007/978-3-319-51966-1_17","title":"On the Feasibility of Malware Authorship Attribution","year":2016,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":36,"is_retracted":false,"has_abstract":false,"ca_institutions":"Concordia University","funders":"","keywords":"Malware; Computer science; Authorship attribution; Process (computing); Code (set theory); Attribution; Cryptovirology; Malware analysis; Domain (mathematical analysis); Software; Source code; Data science; Artificial intelligence; Computer security; Programming language; Set (abstract data type)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001704799,0.0004282743,0.0004289482,0.0005220574,0.0002404738,0.0001338998,0.003409806,0.0003466806,0.00003945916],"category_scores_gemma":[0.0004667649,0.0002719985,0.0001658991,0.0005801316,0.0009701835,0.0004351629,0.001061722,0.0007973525,0.00003299049],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005285977,"about_ca_system_score_gemma":0.0003078708,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000004024972,"about_ca_topic_score_gemma":0.00001432112,"domain_scores_codex":[0.9965791,0.00008643459,0.0005304823,0.001297815,0.001015319,0.0004908246],"domain_scores_gemma":[0.9955658,0.001195736,0.0004691111,0.00224134,0.0004197194,0.0001082619],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.00001413831,0.00002283651,0.00003278364,0.00002487271,0.000004950406,0.00001164866,0.0001406991,0.0007831451,0.0004068544,0.494599,0.00002402334,0.5039351],"study_design_scores_gemma":[0.0001209025,0.0003840984,0.0001956757,0.0005002318,0.000003368647,0.00002385843,4.24917e-8,0.008431053,0.0271689,0.9621,0.0006831585,0.00038868],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.000143795,0.00007379431,0.9946396,0.00176197,0.0008912995,0.0006080393,0.00001614257,0.0003103377,0.001555055],"genre_scores_gemma":[0.7306036,0.00002300518,0.2673809,0.001124131,0.0002473825,0.00002824549,0.000001900466,0.00003773621,0.000553004],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.7304599,"threshold_uncertainty_score":0.9999732,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.04601763185672615,"score_gpt":0.2955895492792332,"score_spread":0.2495719174225071,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}