{"id":"W4386029484","doi":"10.1080/23742917.2023.2246229","title":"Parent process termination: an adversarial technique for persistent malware","year":2023,"lang":"en","type":"article","venue":"Journal of Cyber Security Technology","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of New Brunswick; University of Windsor; MacEwan University","funders":"","keywords":"Malware; Obfuscation; Computer security; Computer science; Malware analysis; Process (computing); Cryptovirology; Adversarial system; Digital forensics; Digital evidence; Internet privacy; Artificial intelligence; Operating system","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.002245752,0.000747553,0.00048113,0.0009701382,0.0008894327,0.001060073,0.001339654,0.001258912,0.00241592],"category_scores_gemma":[0.01046293,0.0003341483,0.0006910507,0.0003568543,0.001964288,0.002198369,0.002592638,0.002041502,0.000798669],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004621568,"about_ca_system_score_gemma":0.0006408084,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0003962838,"about_ca_topic_score_gemma":0.0003558585,"domain_scores_codex":[0.9975968,0.000661272,0.0001012012,0.0003620882,0.001038174,0.0002404828],"domain_scores_gemma":[0.9900933,0.004881999,0.001013813,0.003113553,0.0006686638,0.0002286071],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"bench_or_experimental","study_design_scores_codex":[0.001618742,0.0006620489,0.01548778,0.0004694231,0.0002190476,0.00460453,0.004150278,0.1035646,0.3416503,0.1520506,0.009177217,0.3663454],"study_design_scores_gemma":[0.00007602377,0.0008175356,0.002565282,0.0001526312,0.0001091985,0.004321115,0.0002112755,0.6364796,0.2894587,0.03847406,0.02722886,0.0001057382],"study_design_candidate":"bench_or_experimental","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.0976966,0.0002796554,0.8880447,0.0004189426,0.00009730305,0.0002854127,0.0001045952,0.005946076,0.007126675],"genre_scores_gemma":[0.7970606,0.0002006209,0.195882,0.0003000043,0.00004881979,0.0002497511,0.0001265666,0.0006576984,0.00547397],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.00241592,"threshold_uncertainty_score":0.01187682,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01659649455495104,"score_gpt":0.3138718457606914,"score_spread":0.2972753512057403,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}