{"id":"W4391623949","doi":"10.1145/3623278.3624759","title":"FITS: Inferring Intermediate Taint Sources for Effective Vulnerability Analysis of IoT Device Firmware","year":2023,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":18,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Waterloo","funders":"National Natural Science Foundation of China; National Key Research and Development Program of China; Cisco Systems","keywords":"Firmware; Computer science; Vulnerability (computing); Scalability; Embedded system; Microcode; Interface (matter); Operating system; Computer security","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.000621147,0.000137932,0.0003357952,0.0006284056,0.00009824806,0.00004013809,0.0005455691,0.00006309981,0.0000136315],"category_scores_gemma":[0.0007400563,0.0001211215,0.0002183506,0.002653464,0.00005591534,0.0002452325,0.000392417,0.0001039311,0.000005957025],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00008574473,"about_ca_system_score_gemma":0.00002105784,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0000853771,"about_ca_topic_score_gemma":0.0001933974,"domain_scores_codex":[0.9987319,0.00008270614,0.0003207311,0.000441748,0.0001786396,0.0002443505],"domain_scores_gemma":[0.9979125,0.00105473,0.0001551211,0.0005420454,0.0002757817,0.00005986279],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0001233127,0.0002382618,0.05073255,0.0007058968,0.001840791,0.00001230928,0.005861541,0.1011489,0.01209717,0.01213918,0.0007438503,0.8143562],"study_design_scores_gemma":[0.0003130841,0.0004049168,0.1019618,0.00004435209,0.0001596468,9.924337e-7,0.0003341276,0.5938591,0.2913201,0.01000116,0.001230604,0.0003701538],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.2676746,0.00000833101,0.7307348,0.00008887626,0.00006385325,0.0003788028,0.00001203872,0.0009537967,0.00008497431],"genre_scores_gemma":[0.9638253,0.000003359254,0.03565649,0.00008903892,0.0000187655,0.000315291,0.000006351748,0.000008700333,0.00007665258],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8139861,"threshold_uncertainty_score":0.4939192,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01895527409280928,"score_gpt":0.3235345117335088,"score_spread":0.3045792376406995,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}