{"id":"W4405181837","doi":"10.1145/3658644.3690307","title":"OctopusTaint: Advanced Data Flow Analysis for Detecting Taint-Based Vulnerabilities in IoT/IIoT Firmware","year":2024,"lang":"en","type":"article","venue":"","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":6,"is_retracted":false,"has_abstract":true,"ca_institutions":"Concordia University","funders":"","keywords":"Computer science; Taint checking; Firmware; Computer security; False positive paradox; False positives and false negatives; Vulnerability (computing); Software; Operating system; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0009886938,0.0002529108,0.00034852,0.0009844882,0.0001558231,0.0003747456,0.001559604,0.0001082362,0.00005336494],"category_scores_gemma":[0.0009382379,0.0002377759,0.0001791774,0.002660206,0.0000547448,0.001046579,0.0005293151,0.0002829334,0.000005910899],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002761101,"about_ca_system_score_gemma":0.0001492692,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0001099993,"about_ca_topic_score_gemma":0.0008595323,"domain_scores_codex":[0.9974254,0.00008638913,0.0005073876,0.001216236,0.0002847044,0.0004798797],"domain_scores_gemma":[0.996744,0.001048055,0.00007270815,0.001870064,0.0001819279,0.0000831819],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003610012,0.00005383957,0.0008879702,0.0003159716,0.0001287881,0.00003729833,0.0003099995,0.1943735,0.0006004907,0.006066418,0.0002067819,0.7969828],"study_design_scores_gemma":[0.0002132464,0.0001283706,0.0001692076,0.00004817589,0.00002968557,0.000003013493,0.0001900483,0.958069,0.02711452,0.006227917,0.007494555,0.0003123139],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.004635189,0.0002628095,0.9911714,0.0007049444,0.0002325013,0.0005451026,0.00006589337,0.002211938,0.0001702475],"genre_scores_gemma":[0.5214361,0.000003484997,0.4778026,0.0001550281,0.00003746468,0.0001775623,0.0000317566,0.00001857716,0.0003374289],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.7966705,"threshold_uncertainty_score":0.969622,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03170630715243451,"score_gpt":0.3221118025548699,"score_spread":0.2904054954024354,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}