{"id":"W4293791248","doi":"10.48550/arxiv.2208.12836","title":"Living-off-the-Land Abuse Detection Using Natural Language Processing and Supervised Learning","year":2022,"lang":"en","type":"preprint","venue":"arXiv (Cornell University)","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":5,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Guelph","funders":"","keywords":"Computer science; Security token; Encoding (memory); Evasion (ethics); Semaphore; Computer virus; Machine learning; Software; Artificial intelligence; Natural language; Computer security; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.0003264549,0.0002636905,0.0002163823,0.0002922082,0.0007784857,0.0002286454,0.0008561802,0.000140489,0.00001334933],"category_scores_gemma":[0.00006230286,0.0002764934,0.00009613051,0.0006283867,0.0000925443,0.0006286991,0.001896669,0.001289307,0.000001625767],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002965834,"about_ca_system_score_gemma":0.00007809931,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002051945,"about_ca_topic_score_gemma":0.00009200172,"domain_scores_codex":[0.9983201,0.0002567481,0.0001552349,0.0008680467,0.0001160471,0.0002838316],"domain_scores_gemma":[0.9988688,0.0001443973,0.000257447,0.0005608262,0.00009710842,0.00007140814],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001371954,0.0001503186,0.02121048,0.0006444776,0.0001895307,0.000950287,0.01701846,0.6848095,0.007033337,0.0009863706,0.000009323694,0.2668607],"study_design_scores_gemma":[0.0001459878,0.00005132132,0.001037445,0.0000926177,0.00003721421,0.00004394984,0.0005379347,0.9960532,0.0006962899,0.0007125302,0.0002236415,0.0003678207],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.5316263,0.0005462448,0.4668381,0.000007146619,0.0002049608,0.0001776173,0.000001004403,0.0005487732,0.0000498776],"genre_scores_gemma":[0.9954762,0.0001597787,0.003886509,0.00004336701,0.00005707336,0.000002840964,0.000002342257,0.00002639809,0.0003454826],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.4638499,"threshold_uncertainty_score":0.9999687,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03287329196300334,"score_gpt":0.2029692709386579,"score_spread":0.1700959789756545,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}