{"id":"W3114105288","doi":"10.1109/isncc49221.2020.9297272","title":"P-Code Based Classification to Detect Malicious VBA Macro","year":2020,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":10,"is_retracted":false,"has_abstract":true,"ca_institutions":"École de Technologie Supérieure","funders":"","keywords":"Malware; Computer science; Opcode; Macro; Code (set theory); Heuristics; Obfuscation; Artificial intelligence; Visual Basic for Applications; Machine learning; Preprocessor; Source code; Data mining; Computer security; Programming language; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000104105,0.0001161224,0.0001095027,0.00008571197,0.00007099217,0.00008317363,0.0006689991,0.00004981299,0.00004501556],"category_scores_gemma":[0.0001249692,0.0001127715,0.00004655052,0.000641868,0.00001460203,0.0002543553,0.0001397267,0.0001018485,0.0002821082],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00005252425,"about_ca_system_score_gemma":0.00003215577,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000009626063,"about_ca_topic_score_gemma":0.00001063619,"domain_scores_codex":[0.9989322,0.00004005286,0.0001843865,0.0004469958,0.0001982113,0.0001981842],"domain_scores_gemma":[0.9991513,0.00005258763,0.00005351916,0.0004789668,0.0000820045,0.0001816162],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.00004783036,0.00003425463,0.00009095353,0.00003053342,0.000009456886,0.00002644778,0.0003921004,0.001092028,0.3492571,0.02781174,0.01794631,0.6032612],"study_design_scores_gemma":[0.0001776202,0.0002848346,0.0005645432,0.000005620533,0.000002201977,0.000005182454,0.00001242879,0.1607119,0.7535579,0.00214108,0.08227763,0.0002590728],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.000786897,0.000006197333,0.9814968,0.01253594,0.0000841584,0.0002680323,0.000002286183,0.002433841,0.002385917],"genre_scores_gemma":[0.4896118,0.000001139154,0.500256,0.009920056,0.0000369908,0.00005220608,6.383847e-7,0.000009563907,0.0001116606],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.6030021,"threshold_uncertainty_score":0.4598688,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03830866726439872,"score_gpt":0.2844805363594726,"score_spread":0.2461718690950739,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}