Rank-1 Similarity Matrix Decomposition For Modeling Changes in Antivirus Consensus Through Time. (arXiv:2201.00757v1 [cs.CR])

Although groups of strongly correlated antivirus engines are known to exist,
at present there is limited understanding of how or why these correlations came
to be. Using a corpus of 25 million VirusTotal reports representing over a
decade of antivirus scan data, we challenge prevailing wisdom that these
correlations primarily originate from "first-order" interactions such as
antivirus vendors copying the labels of leading vendors. We introduce the
Temporal Rank-1 Similarity Matrix decomposition (R1SM-T) in order to
investigate the origins of …

antivirus matrix modeling