{"id":"W3008617927","doi":"10.1109/ssci44817.2019.9002773","title":"Augmented YARA Rules Fused With Fuzzy Hashing in Ransomware Triaging","year":2019,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":18,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"","keywords":"Ransomware; Malware; Computer science; Hash function; Data mining; Malware analysis; Fuzzy logic; Artificial intelligence; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002233464,0.0001431204,0.0001882937,0.0002517688,0.00004820133,0.0001150043,0.0005140438,0.00004748179,0.00003762916],"category_scores_gemma":[0.00001947253,0.00011649,0.00003287507,0.0004818608,0.00001739317,0.001012962,0.0001241904,0.0001778871,0.00007172856],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008513773,"about_ca_system_score_gemma":0.00004050679,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00007627726,"about_ca_topic_score_gemma":0.00006372398,"domain_scores_codex":[0.9988351,0.00004673963,0.0002097712,0.0004108766,0.0002286191,0.0002688899],"domain_scores_gemma":[0.9992321,0.00008539082,0.0000740804,0.0005092801,0.00005057468,0.00004858636],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.0007346538,0.0006469621,0.06167061,0.0003265465,0.0001327991,0.0003499183,0.006535865,0.007470464,0.08237531,0.2173334,0.001192338,0.6212312],"study_design_scores_gemma":[0.02099688,0.002001313,0.03221102,0.00131565,0.0000231908,0.0002216505,0.001578124,0.1615141,0.7000119,0.05619586,0.02032675,0.003603623],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1216599,0.00002331064,0.8704044,0.0003850851,0.0001038209,0.0003732374,6.31688e-7,0.001138741,0.005910925],"genre_scores_gemma":[0.7799113,0.000004513771,0.2191317,0.0002689721,0.00001159536,0.00003189387,0.000001239443,0.00001282599,0.0006259202],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.6582514,"threshold_uncertainty_score":0.4750326,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.006762589529553787,"score_gpt":0.2236066504061207,"score_spread":0.2168440608765669,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}