{"id":"W4391623949","doi":"10.1145/3623278.3624759","title":"FITS: Inferring Intermediate Taint Sources for Effective Vulnerability Analysis of IoT Device Firmware","year":2023,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":18,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"National Natural Science Foundation of China; National Key Research and Development Program of China; Cisco Systems","keywords":"Firmware; Computer science; Vulnerability (computing); Scalability; Embedded system; Microcode; Interface (matter); Operating system; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0007790553,0.00229797,0.0007479058,0.00495267,0.000834858,0.001836647,0.001553515,0.001651374,0.003652749],"category_scores_gemma":[0.006148512,0.0008808689,0.00186234,0.001653023,0.0009877364,0.004935275,0.00275547,0.001481014,0.002875876],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0007654298,"about_ca_system_score_gemma":0.001627178,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.004135453,"about_ca_topic_score_gemma":0.006410429,"domain_scores_codex":[0.9988927,0.0001519792,0.00007561834,0.0002889,0.0004468566,0.0001438825],"domain_scores_gemma":[0.9975281,0.0009016126,0.0003524406,0.0007143006,0.0004077452,0.00009577537],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0013068,0.0009055789,0.1201256,0.001593005,0.0007330951,0.003554412,0.002702027,0.1082186,0.1382254,0.02815443,0.0583048,0.5361764],"study_design_scores_gemma":[0.00007231769,0.0002586612,0.01086365,0.0002035526,0.000249708,0.0009734179,0.0004995363,0.8202496,0.07952788,0.06709257,0.01988137,0.0001277323],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.09560208,0.0009108619,0.759939,0.0006203748,0.0001473025,0.0003710953,0.005925631,0.1328218,0.003661777],"genre_scores_gemma":[0.6096885,0.0005864113,0.3627186,0.0004476388,0.0001200158,0.0003936559,0.01528707,0.004943193,0.005814901],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.00495267,"threshold_uncertainty_score":0.01221967,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01895527409280928,"score_gpt":0.3235345117335088,"score_spread":0.3045792376406995,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}