{"id":"W4413860767","doi":"10.1016/j.jisa.2025.104200","title":"VADViT: Vision transformer-driven memory forensics for malicious process detection and explainable threat attribution","year":2025,"lang":"en","type":"article","venue":"Journal of Information Security and Applications","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"York University","funders":"Natural Sciences and Engineering Research Council of Canada; Canada Research Chairs","keywords":"Attribution; Computer science; Computer security; Process (computing); Psychology; Social psychology; Operating system","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008213412,0.0008373919,0.0006568775,0.00158043,0.0004599324,0.001797335,0.001749137,0.001401701,0.007872356],"category_scores_gemma":[0.003478255,0.0004039663,0.0006408824,0.0004885717,0.0004990482,0.001879304,0.002823712,0.001301336,0.002336528],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004753355,"about_ca_system_score_gemma":0.0008025063,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0008512848,"about_ca_topic_score_gemma":0.001293448,"domain_scores_codex":[0.9995327,0.00007437138,0.00001934772,0.00007604325,0.000231609,0.00006600662],"domain_scores_gemma":[0.9992182,0.000237225,0.00008187423,0.000232086,0.000165773,0.00006486267],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.001444462,0.0002501544,0.003081396,0.0005816272,0.0001921207,0.0007817127,0.0003217804,0.02794028,0.09624249,0.02328128,0.05427654,0.7916062],"study_design_scores_gemma":[0.0001036951,0.0001974591,0.001031716,0.00008652599,0.0000403068,0.001260262,0.0001295666,0.8219154,0.1205613,0.03351668,0.02108408,0.00007295257],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.01901222,0.0006198227,0.9258318,0.0002828828,0.0002066076,0.0001484101,0.0007854603,0.04889571,0.00421715],"genre_scores_gemma":[0.5068334,0.0004070749,0.4814839,0.0004840909,0.00009707409,0.0001753472,0.001813691,0.003428833,0.005276486],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.007872356,"threshold_uncertainty_score":0.0263356,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.004783437096474672,"score_gpt":0.2751573726983606,"score_spread":0.2703739356018859,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}