{"id":"W4416448103","doi":"10.1515/9783111436548-002","title":"31Graph-ensemble methods for generating malware behavioral signatures","year":2025,"lang":"","type":"book-chapter","venue":"Cybersecurity","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Manitoba","funders":"","keywords":"Malware; Signature (topology); Network security; Feature (linguistics); Malware analysis","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","sts","research_integrity"],"consensus_categories":["metaepi_narrow","research_integrity"],"category_scores_codex":[0.001639065,0.001638606,0.00167953,0.001048424,0.001505334,0.0006280622,0.002518909,0.002070408,0.0002426052],"category_scores_gemma":[0.0004125675,0.001918514,0.001531169,0.0004855137,0.0005055623,0.0009939324,0.001633741,0.002386052,0.00001807878],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0004657262,"about_ca_system_score_gemma":0.0005202334,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00008179326,"about_ca_topic_score_gemma":0.0000974807,"domain_scores_codex":[0.9930176,0.0003566312,0.00165257,0.00303231,0.0006328181,0.001308048],"domain_scores_gemma":[0.9931628,0.001064676,0.001256242,0.002557722,0.001525524,0.0004329992],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"design_other","study_design_gemma":"not_applicable","study_design_scores_codex":[0.00006151219,0.0001197783,0.000002612088,0.0002757035,0.0001340668,0.00003749814,0.0005218566,0.00006521314,0.004133233,0.3730471,0.003601516,0.6179999],"study_design_scores_gemma":[0.001051004,0.001612026,0.000007565779,0.001131211,0.0004727348,0.00006126673,0.0001037237,0.03198399,0.104559,0.3321119,0.5234852,0.00342039],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.00005115487,0.004558693,0.9666098,0.0002428052,0.004202873,0.003162583,0.0002874839,0.00156418,0.01932047],"genre_scores_gemma":[0.005742623,0.0007248682,0.9657974,0.0009205618,0.0006089789,0.0006203399,0.00009571389,0.0001634462,0.02532609],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.6145795,"threshold_uncertainty_score":0.9999155,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.03755986042241803,"score_gpt":0.3797541754870531,"score_spread":0.342194315064635,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}