{"id":"W4395117296","doi":"10.1007/978-3-031-57537-2_20","title":"Following the Obfuscation Trail: Identifying and Exploiting Obfuscation Signatures in Malicious Code","year":2024,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":1,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Ottawa; IBM (Canada); Polytechnique Montréal","funders":"","keywords":"Obfuscation; Computer science; Code (set theory); Computer security; Malware; Programming language","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.001257982,0.0004245704,0.0003607339,0.001053522,0.0003183466,0.0009322155,0.001732023,0.0002817565,0.000003015994],"category_scores_gemma":[0.0001391033,0.0003572273,0.0001136036,0.0009106845,0.0002959266,0.001082862,0.0009311854,0.001113734,0.000006817962],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0003851631,"about_ca_system_score_gemma":0.0001581316,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00003939607,"about_ca_topic_score_gemma":0.0003492895,"domain_scores_codex":[0.9967771,0.00004480315,0.0005510084,0.001391104,0.0007598462,0.0004760987],"domain_scores_gemma":[0.9981571,0.0005669783,0.0002485953,0.0008470196,0.0001084322,0.00007181198],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.000003427084,0.00001194301,0.00003604699,0.00009502242,0.00001186677,0.0001008385,0.003904505,0.01645573,0.001780559,0.03800803,0.00001165671,0.9395804],"study_design_scores_gemma":[0.0001995003,0.00009859246,0.0002662807,0.001513205,0.00001731143,0.00008753374,0.000005469097,0.3735041,0.01054467,0.6116743,0.001276619,0.0008124601],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.0006254378,0.002257574,0.9929669,0.001010743,0.001419924,0.0005637676,0.000002226724,0.0004765417,0.0006769167],"genre_scores_gemma":[0.772571,0.0001544104,0.2258244,0.0007801334,0.0002693087,0.00006334165,0.000002991279,0.0000523214,0.0002820731],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.9387679,"threshold_uncertainty_score":0.9998879,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02137137113749035,"score_gpt":0.2811721798111387,"score_spread":0.2598008086736483,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}