{"id":"W4379374387","doi":"10.21428/594757db.88040587","title":"Detecting Malicious .NET Files Using CLR Header Features and Machine Learning","year":2023,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":2,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Ottawa","funders":"Natural Sciences and Engineering Research Council of Canada","keywords":"Computer science; Malware; Header; Net (polyhedron); .NET Framework; Machine learning; Artificial intelligence; Operating system; Computer network","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0009694383,0.001311742,0.0006400187,0.00747501,0.000528883,0.0008521106,0.0008538223,0.001045944,0.0008815889],"category_scores_gemma":[0.003936119,0.0001851135,0.0008393652,0.001682738,0.0004180011,0.001670571,0.0006496883,0.0009439313,0.00122529],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0005787346,"about_ca_system_score_gemma":0.00063118,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.005885355,"about_ca_topic_score_gemma":0.006475283,"domain_scores_codex":[0.9990788,0.0001016916,0.00006687925,0.0002621889,0.000322668,0.0001677228],"domain_scores_gemma":[0.9966378,0.001451813,0.0006289238,0.0003862515,0.0007029473,0.0001921755],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001346459,0.001580573,0.1684272,0.0006925543,0.0002325302,0.001706274,0.0002890909,0.05262412,0.03662813,0.001426259,0.03854102,0.6965058],"study_design_scores_gemma":[0.00007009874,0.0005477886,0.08568622,0.0001424265,0.0001025673,0.001863209,0.0004569443,0.8343095,0.06622309,0.002039134,0.00844712,0.0001119861],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9073611,0.001686106,0.05949677,0.0005036149,0.0003048651,0.0003172769,0.009530274,0.0168412,0.003958838],"genre_scores_gemma":[0.9001589,0.0003803364,0.07581247,0.00009939505,0.0001618584,0.0001161275,0.02091176,0.0002224583,0.002136654],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.00747501,"threshold_uncertainty_score":0.01170224,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03020082254085604,"score_gpt":0.2876651292808551,"score_spread":0.257464306739999,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}