{"id":"W3137539372","doi":"10.1007/s00521-021-05861-7","title":"Deep learning-aided runtime opcode-based Windows malware detection","year":2021,"lang":"en","type":"article","venue":"Neural Computing and Applications","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":20,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Toronto; University of New Brunswick","funders":"","keywords":"Opcode; Malware; Computer science; Obfuscation; Artificial intelligence; Machine learning; Code (set theory); Deep learning; Data mining; Pattern recognition (psychology); Operating system; Computer security; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0001099081,0.0001458371,0.0001437585,0.0000882385,0.0006064915,0.0001738847,0.0002645745,0.0000685499,0.000005298467],"category_scores_gemma":[0.00005091421,0.000160884,0.00005860219,0.000629744,0.00004364706,0.0001776087,0.000201694,0.0003092803,0.00001582953],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00003452053,"about_ca_system_score_gemma":0.00002598145,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00000838553,"about_ca_topic_score_gemma":0.000009277998,"domain_scores_codex":[0.9987924,0.00008613797,0.0002178959,0.0005281956,0.0001506117,0.0002247193],"domain_scores_gemma":[0.999042,0.0001610648,0.0001203516,0.0004075366,0.0001800778,0.00008893832],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.000005908006,0.00006465322,0.0004296736,0.00003375198,0.00000910251,0.000009786489,0.00008633209,0.03050411,0.02565244,0.003078323,0.00003596179,0.9400899],"study_design_scores_gemma":[0.0002556289,0.00007392839,0.002423978,0.00001503318,0.00000841861,0.00009738047,0.00002925271,0.8822963,0.09887681,0.002135212,0.01353401,0.0002540762],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.01099375,0.0001593094,0.9864139,0.0005208306,0.00006837922,0.000230315,7.400849e-7,0.001327244,0.0002855155],"genre_scores_gemma":[0.9402798,0.000008746993,0.05905133,0.0003388745,0.0001035276,0.00007417393,0.000007367647,0.00001427281,0.0001218529],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9398359,"threshold_uncertainty_score":0.6560659,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.009466369414443773,"score_gpt":0.2562602113030099,"score_spread":0.2467938418885661,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}