{"id":"W4415359598","doi":"10.1007/978-3-032-07894-0_21","title":"CapMan: Detecting and Mitigating Linux Capability Abuses at Runtime to Secure Privileged Containers","year":2025,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"Ericsson (Canada); University of British Columbia, Okanagan Campus; University of British Columbia; Concordia University","funders":"","keywords":"Executable; Linux kernel; Lagging; Set (abstract data type); Kernel (algebra); Feature (linguistics)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow"],"consensus_categories":[],"category_scores_codex":[0.00105833,0.0006882214,0.0007176291,0.0009909127,0.0006217427,0.0004522956,0.002201765,0.0003981336,0.00001345106],"category_scores_gemma":[0.0007483094,0.0006930315,0.0001253502,0.0009355827,0.0006350689,0.0006281091,0.003311526,0.001039282,0.0000121072],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0009265325,"about_ca_system_score_gemma":0.0003851164,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00006080156,"about_ca_topic_score_gemma":0.0006328924,"domain_scores_codex":[0.9953356,0.00006444971,0.0007011491,0.002331514,0.000781733,0.0007855042],"domain_scores_gemma":[0.9963201,0.001100649,0.0003581694,0.001518742,0.0004245136,0.0002777952],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00002033319,0.00002209012,0.0003000929,0.0002263359,0.00002429712,0.0001001253,0.002950036,0.008713327,0.00452034,0.006269895,0.00006129548,0.9767919],"study_design_scores_gemma":[0.001388247,0.001545753,0.0009617905,0.005406473,0.0000647166,0.0006148706,0.000006523667,0.4275558,0.2873418,0.2536676,0.01581368,0.005632748],"study_design_candidate":"design_other","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.002023431,0.0002723719,0.9932501,0.0007123608,0.0009314652,0.0009714091,0.000008570822,0.0007673599,0.001062958],"genre_scores_gemma":[0.208433,0.000020203,0.788711,0.0020312,0.0002234688,0.00004637321,0.000001711303,0.00003955343,0.0004935074],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.9711591,"threshold_uncertainty_score":0.9995521,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008634152211272415,"score_gpt":0.2471202866758046,"score_spread":0.2384861344645322,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}