{"id":"W4293192140","doi":"10.5220/0010908200003120","title":"Detecting Obfuscated Malware using Memory Feature Engineering","year":2022,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":147,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of New Brunswick","funders":"","keywords":"Computer science; Malware; Feature (linguistics); Feature engineering; Artificial intelligence; Obfuscation; Pattern recognition (psychology); Operating system; Computer security; Deep learning","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0002056517,0.000138515,0.0001188986,0.0002220632,0.0003899782,0.00006686289,0.0006447439,0.00003844688,0.0001249795],"category_scores_gemma":[0.000052645,0.0001541268,0.00005941284,0.0008704779,0.000007761269,0.0004259919,0.0008170721,0.0003985763,0.000003514563],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002380082,"about_ca_system_score_gemma":0.00003472586,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00002733193,"about_ca_topic_score_gemma":0.000002017891,"domain_scores_codex":[0.998912,0.0000402972,0.0001398845,0.0003627939,0.0002646016,0.0002804333],"domain_scores_gemma":[0.9993209,0.000049814,0.00007233917,0.0004479495,0.00004989677,0.00005907383],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"bench_or_experimental","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00001901682,0.00008455064,0.0001673856,0.00007080338,0.00005695578,0.0002598568,0.001154367,0.3213814,0.4364126,0.007489076,0.001140587,0.2317633],"study_design_scores_gemma":[0.0001906113,0.00008675273,0.0001402822,0.00001088118,0.000004964863,0.0007230929,0.0002066224,0.7674746,0.2203399,0.0006040364,0.009759091,0.000459181],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.02015381,0.00007804193,0.9758115,0.0001491681,0.0004330431,0.0001578886,0.000001390727,0.002712632,0.0005025038],"genre_scores_gemma":[0.5523915,7.135547e-7,0.4466729,0.0002045352,0.00003806123,0.00004305237,8.483036e-7,0.00002071544,0.0006276673],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.5322376,"threshold_uncertainty_score":0.6285108,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01154745839125784,"score_gpt":0.2286258534574822,"score_spread":0.2170783950662244,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}