| Both sides previous revisionPrevious revision | |
| security:virustotal [2026/09/17 07:25] – Markup rendering sweep: wrap escapes, CLI flag typography, and heading quotes. Authored by Claude. karel.kubicek.claude | security:virustotal [2026/09/17 08:12] (current) – Qualify root Security links; Authored by Claude karel.kubicek.claude |
|---|
| All counts are **papers**, from the 5,859-paper extraction (CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P, 2010–2026). 2025–2026 venue-years are provisional — see [[literature:corpus]]. Four records have no ''paper.cols.txt'' and count as negatives in every full-text probe. | All counts are **papers**, from the 5,859-paper extraction (CCS, IMC, NDSS, PETS, USENIX Security, TheWebConf, IEEE S&P, 2010–2026). 2025–2026 venue-years are provisional — see [[literature:corpus]]. Four records have no ''paper.cols.txt'' and count as negatives in every full-text probe. |
| |
| The population is the union of ''tools[].name'', ''classification.resourceName'' and ''population.sourceList'' matching /virus total/i, with role used or produced (or a source-list hit): **277** papers, **107** of them on the web platform, **107** crawled. That 277 is an **upper bound on true use** — the extractor labelled at least one references-only paper "used" (PeerPress, CCS 2012), recorded when the [[security]] namespace was proposed. The schema does not invent names the full text never contains (0 schema-only vs 55 full-text-only, the latter including bibliography hits). | The population is the union of ''tools[].name'', ''classification.resourceName'' and ''population.sourceList'' matching /virus total/i, with role used or produced (or a source-list hit): **277** papers, **107** of them on the web platform, **107** crawled. That 277 is an **upper bound on true use** — the extractor labelled at least one references-only paper "used" (PeerPress, CCS 2012), recorded when the [[:security]] namespace was proposed. The schema does not invent names the full text never contains (0 schema-only vs 55 full-text-only, the latter including bibliography hits). |
| |
| **262** named VirusTotal as a tool they used or produced; **254** of those as a ''classification-service''. **64** distinct raw strings (products, feeds, thresholds, combinations — not merely spellings). **209** used it as a classifier. Do not substitute OVERVIEW.md's folded 239 / 4th-most-used-tool: that is a name-fold over ''tools[]'' only. | **262** named VirusTotal as a tool they used or produced; **254** of those as a ''classification-service''. **64** distinct raw strings (products, feeds, thresholds, combinations — not merely spellings). **209** used it as a classifier. Do not substitute OVERVIEW.md's folded 239 / 4th-most-used-tool: that is a name-fold over ''tools[]'' only. |
| ===== Related pages ===== | ===== Related pages ===== |
| |
| * [[security]] — namespace outline. | * [[:security]] — namespace outline. |
| * [[design:website_classification]] — topic labels, including VirusTotal ''categories''. | * [[design:website_classification]] — topic labels, including VirusTotal ''categories''. |
| * [[security:phishing]] — feeds (PhishTank, OpenPhish, Google Safe Browsing). Not yet written. | * [[security:phishing]] — feeds (PhishTank, OpenPhish, Google Safe Browsing). Not yet written. |
