{"id":"W4395117296","doi":"10.1007/978-3-031-57537-2_20","title":"Following the Obfuscation Trail: Identifying and Exploiting Obfuscation Signatures in Malicious Code","year":2024,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa; IBM (Canada); Polytechnique Montréal","funders":"","keywords":"Obfuscation; Computer science; Code (set theory); Computer security; Malware; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0005755413,0.0008054558,0.0005231767,0.001486814,0.0006969799,0.001967839,0.0007606797,0.001244024,0.00345506],"category_scores_gemma":[0.004111958,0.0006710207,0.0004889337,0.00110579,0.001162297,0.004084065,0.001577032,0.001597255,0.003481731],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004248816,"about_ca_system_score_gemma":0.0008821082,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0008162822,"about_ca_topic_score_gemma":0.001292116,"domain_scores_codex":[0.9994753,0.00005739568,0.00002547627,0.0000886838,0.0002821845,0.00007103756],"domain_scores_gemma":[0.9976842,0.001017686,0.0002938784,0.0006004349,0.0003405977,0.00006316448],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0003342967,0.0001264668,0.004509914,0.0003675822,0.00003106164,0.0006025152,0.0009214592,0.01363232,0.07528114,0.04860209,0.0124567,0.8431345],"study_design_scores_gemma":[0.00002862363,0.0005253492,0.005426333,0.0006298353,0.000132717,0.004702159,0.0006649209,0.3836887,0.3418841,0.1728613,0.08928152,0.0001744034],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.1703902,0.004268021,0.7790786,0.001348566,0.0004991223,0.0002067541,0.0005714018,0.00929092,0.03434652],"genre_scores_gemma":[0.555375,0.003979831,0.3889467,0.0003724197,0.0001480987,0.00007499259,0.001240883,0.001975011,0.04788717],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.00345506,"threshold_uncertainty_score":0.01155835,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02137137113749035,"score_gpt":0.2811721798111387,"score_spread":0.2598008086736483,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}