{"id":"W4413860767","doi":"10.1016/j.jisa.2025.104200","title":"VADViT: Vision transformer-driven memory forensics for malicious process detection and explainable threat attribution","year":2025,"lang":"en","type":"article","venue":"Journal of Information Security and Applications","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"York University","funders":"Natural Sciences and Engineering Research Council of Canada; Canada Research Chairs","keywords":"Attribution; Computer science; Computer security; Process (computing); Psychology; Social psychology; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003127583,0.00009201236,0.000143444,0.0002689318,0.0003469553,0.0001305779,0.0001537823,0.0000877363,5.410659e-7],"category_scores_gemma":[0.00003066324,0.00008552682,0.00004735124,0.0003636092,0.00004530785,0.002952728,0.00002482528,0.0001435305,5.158066e-7],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00006153937,"about_ca_system_score_gemma":0.00005183192,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.000003009972,"about_ca_topic_score_gemma":0.000006998442,"domain_scores_codex":[0.9992085,0.00001367441,0.0004379245,0.00009313489,0.0001348323,0.0001119351],"domain_scores_gemma":[0.9988366,0.00007191479,0.0003259696,0.0001252532,0.0005858864,0.00005439079],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.000087492,0.00005486602,0.00003125991,0.0004568021,0.0000290868,2.445718e-7,0.002475354,0.0004646308,0.001900223,0.1408991,0.0002108563,0.8533901],"study_design_scores_gemma":[0.002419439,0.0008656604,0.0009175376,0.0002159438,0.00008816243,0.0002852415,0.002149145,0.06494158,0.2585099,0.5368308,0.1323539,0.0004227203],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.007570699,0.000111986,0.9904601,0.0008303136,0.00005893035,0.0006292763,0.00001093381,0.00007526506,0.000252524],"genre_scores_gemma":[0.9729147,0.0003298294,0.02624891,0.0002446548,0.00003943903,0.0002026023,0.000006510254,0.000003185528,0.00001016629],"genre_candidate":"methods","genre_consensus":null,"teacher_disagreement_score":0.965344,"threshold_uncertainty_score":0.3487682,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.004783437096474672,"score_gpt":0.2751573726983606,"score_spread":0.2703739356018859,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}