{"id":"W4409839251","doi":"10.1007/s11227-025-07267-x","title":"Unveiling evasive malware behavior: toward generating a multi-sources benchmark dataset and evasive malware behavior profiling using network traffic and memory analysis","year":2025,"lang":"en","type":"article","venue":"The Journal of Supercomputing","topic":"Network Security and Intrusion Detection","field":"Computer Science","cited_by":3,"is_retracted":false,"has_abstract":false,"ca_institutions":"Bell (Canada); York University","funders":"Canada Research Chairs","keywords":"Computer science; Malware; Profiling (computer programming); Benchmark (surveying); Traffic analysis; Malware analysis; Computer security; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.00236274,0.0003104974,0.0005722351,0.0004325703,0.001241157,0.0004391532,0.0007041381,0.0001395853,0.0000110479],"category_scores_gemma":[0.0001097011,0.0002458825,0.0001748065,0.001331869,0.0001352028,0.0007981009,0.0007286915,0.000743911,5.106631e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00009791516,"about_ca_system_score_gemma":0.0001301529,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00008942784,"about_ca_topic_score_gemma":0.0000714417,"domain_scores_codex":[0.9972129,0.0005531612,0.0009115969,0.0004285353,0.0004128225,0.0004809262],"domain_scores_gemma":[0.9981627,0.0005176312,0.0004999145,0.0003788593,0.000295227,0.0001457006],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"simulation_or_modeling","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0000712321,0.0001783051,0.03133736,0.0001503986,0.0007396372,0.0001912383,0.01102344,0.8434782,0.009430422,0.00006233639,0.0001796561,0.1031578],"study_design_scores_gemma":[0.0006000075,0.0001257245,0.006208349,0.0003703964,0.00160839,0.0005859938,0.003246174,0.9854385,0.001461362,0.00002014035,0.00003422712,0.0003007215],"study_design_candidate":"simulation_or_modeling","study_design_consensus":"simulation_or_modeling","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.8997597,0.005113313,0.09418382,0.0001066071,0.000466688,0.0003082821,0.00002145641,0.00003690201,0.00000330584],"genre_scores_gemma":[0.9284175,0.0001960908,0.07073691,0.0001915322,0.0004141596,0.000003711718,0.00002171836,0.00001410972,0.000004273662],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.1419603,"threshold_uncertainty_score":0.9999993,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02944905947358488,"score_gpt":0.2875120779469746,"score_spread":0.2580630184733897,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}