{"id":"W4415359598","doi":"10.1007/978-3-032-07894-0_21","title":"CapMan: Detecting and Mitigating Linux Capability Abuses at Runtime to Secure Privileged Containers","year":2025,"lang":"en","type":"book-chapter","venue":"Lecture notes in computer science","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"Ericsson (Canada); University of British Columbia, Okanagan Campus; University of British Columbia; Concordia University","funders":"","keywords":"Executable; Linux kernel; Lagging; Set (abstract data type); Kernel (algebra); Feature (linguistics)","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0008873462,0.001361293,0.0005090781,0.001126587,0.0006994202,0.001948001,0.001645674,0.0009467202,0.004637695],"category_scores_gemma":[0.004242206,0.0006331559,0.0005021684,0.000463782,0.001098293,0.003379078,0.002082492,0.00161584,0.002164089],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0006807834,"about_ca_system_score_gemma":0.001555991,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.002487811,"about_ca_topic_score_gemma":0.003672404,"domain_scores_codex":[0.998731,0.0001677911,0.00003843061,0.000213274,0.0006692005,0.0001802366],"domain_scores_gemma":[0.9980893,0.0005803306,0.0002110846,0.000655492,0.0003724672,0.00009144056],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.0007019769,0.0003885408,0.007586898,0.0005481669,0.000123088,0.0006444049,0.0007276524,0.02718864,0.06304539,0.0246896,0.1081919,0.7661638],"study_design_scores_gemma":[0.00006692815,0.00069218,0.006165414,0.0002529797,0.000201735,0.00188574,0.0004105316,0.6123782,0.2191768,0.0317692,0.1268052,0.0001950965],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1350694,0.003797238,0.6615381,0.001374429,0.0009446891,0.000481038,0.0009137469,0.1381187,0.05776249],"genre_scores_gemma":[0.6334219,0.001083747,0.3192714,0.0008696863,0.0001972094,0.0001908641,0.00174468,0.004328296,0.03889222],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.004637695,"threshold_uncertainty_score":0.01551461,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.008634152211272415,"score_gpt":0.2471202866758046,"score_spread":0.2384861344645322,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}