{"id":"W4386029484","doi":"10.1080/23742917.2023.2246229","title":"Parent process termination: an adversarial technique for persistent malware","year":2023,"lang":"en","type":"article","venue":"Journal of Cyber Security Technology","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick; University of Windsor; MacEwan University","funders":"","keywords":"Malware; Obfuscation; Computer security; Computer science; Malware analysis; Process (computing); Cryptovirology; Adversarial system; Digital forensics; Digital evidence; Internet privacy; Artificial intelligence; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0006620175,0.0001903836,0.0003417016,0.001244196,0.0001659655,0.00005824047,0.001439257,0.0003351232,0.000006571298],"category_scores_gemma":[0.0002940833,0.0001805271,0.0002135156,0.001307056,0.0001109936,0.0009859338,0.0002225401,0.0004628048,0.00000440854],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0001548099,"about_ca_system_score_gemma":0.0001529319,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000001294041,"about_ca_topic_score_gemma":0.000005961308,"domain_scores_codex":[0.9983312,0.00004728917,0.000565705,0.0003418384,0.0003581399,0.0003558398],"domain_scores_gemma":[0.9978709,0.00006784554,0.0005647093,0.0005092301,0.0008853741,0.0001019931],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0008580156,0.00257371,0.003689783,0.001123113,0.0007205207,0.00155167,0.0133377,0.001538737,0.09133376,0.2544766,0.01915511,0.6096413],"study_design_scores_gemma":[0.001842677,0.004989136,0.000439825,0.0002254056,0.00007259002,0.002745274,0.001755193,0.008244898,0.3328389,0.6019112,0.04413916,0.00079573],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.04161243,0.00008952261,0.9502448,0.004907965,0.0007835351,0.000785432,0.00001131777,0.00144122,0.0001237673],"genre_scores_gemma":[0.9301829,0.00003784603,0.06924435,0.00008904756,0.0001709626,0.0002119574,0.000003250296,0.00002155135,0.0000381142],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.8885705,"threshold_uncertainty_score":0.7361683,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01659649455495104,"score_gpt":0.3138718457606914,"score_spread":0.2972753512057403,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}