{"as_of":"2026-08-13T21:58:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:01ba98f9545af405800e040d4b2867da35d9a17d75785fbd82a1e4bbe2cdacf7","coverage":[{"denominator":57,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":57,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-08T19:41:43.166605Z","state":"measured"},{"denominator":57,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":57,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-13T06:32:02.005865+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2502.05367/citation-record","integrity":"/paper/2502.05367/integrity","json":"/paper/2502.05367/citation-record.json","paper":"/paper/2502.05367"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.856083Z","title":"Strategically- motivated advanced persistent threat: Definition, process, tactics and a disinformation model of counterattack,","venue":null,"work_id":"927ee783-7071-4f0a-9298-3827d452ecad","year":2019},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.930174Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:8c30756df852004c336334b8d78c8055a9131f4cf002a811bfe13dfc3cda8867","observation_id":"3b0cb3b4-0234-46d5-ad11-e6f3d97a8f8e","resolution":{"observed_at":"2026-08-08T19:41:43.860376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.844896Z","title":"Anomaly detection in log data using graph databases and machine learning to defend advanced persistent threats,","venue":null,"work_id":"3703dc8e-5260-47c1-9367-2a22ceaaa2e9","year":2017},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.934983Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:fd6576214a6c8ca27c56a4d5c5bb3b392bfb28ac7b969ff2eb233f1339f057f5","observation_id":"2ee05805-4bce-415a-9deb-f7ef93a377ee","resolution":{"observed_at":"2026-08-08T19:41:43.848961Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.833755Z","title":"Dark matter: Uncovering the darkcomet rat ecosystem,","venue":null,"work_id":"44aff19c-bdd7-4160-a370-662de1dd5874","year":2020},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.939224Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:9cf7c7282041bf656e9894fc0c1d99fd86e28022afc7f752ebb2efb6c138c036","observation_id":"c5df73c4-7e39-4a9e-b0b7-e6fd3ebaa80b","resolution":{"observed_at":"2026-08-08T19:41:43.837821Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.822695Z","title":"Schrödinger’s RAT: Profiling the stakeholders in the remote access trojan ecosystem,","venue":null,"work_id":"53edc150-ebff-4273-86ac-28c1fff88e73","year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.943995Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:fa911117500f64943ed43df4db10143c227e56a9e944acd7e085a3cb4a551473","observation_id":"4d8198f2-a635-4bff-a00c-98c87372f5e5","resolution":{"observed_at":"2026-08-08T19:41:43.826644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.810916Z","title":"To catch a ratter: Monitoring the behavior of amateur darkcomet rat operators in the wild,","venue":null,"work_id":"ba19fee0-d91e-402c-bc9d-702d28999ddc","year":2017},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.948636Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:b8dcf5805947bd17b2c1ea3dfd55f9d3ab36f251e6add53fc8272582a16fe3b0","observation_id":"04c5c58f-d57f-47d6-aeaf-cc6b2d2119ec","resolution":{"observed_at":"2026-08-08T19:41:43.815121Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.799261Z","title":"Fin7.5: the infamous cybercrime rig “fin7","venue":null,"work_id":"e7eb77fc-b461-42e9-bd73-961c3e92f148","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.953177Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:e7af903bca14ade9f3171a399ff86308a5513d203f62d889603e383914561e20","observation_id":"7ca70c6d-8435-4641-b8ba-c8346d054dd5","resolution":{"observed_at":"2026-08-08T19:41:43.802974Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.787972Z","title":"Intelligence-driven computer network defense informed by analysis of adversary campaigns and intrusion kill chains,","venue":null,"work_id":"1b76baa5-b9ef-4d42-b2bb-34495887c2a8","year":2011},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.957877Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:6a269098b46aab7ff89c0561e3cc562600a1f9b34597c2c2f22067ff3e02a0d1","observation_id":"2cf3b356-b082-420f-adf7-b97a87667a72","resolution":{"observed_at":"2026-08-08T19:41:43.792375Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"1810.01594","last_updated":"2019-01-17T23:08:35Z","snapshot_observed_at":"2026-07-06T07:05:47.165490Z","submitted_at":"2018-10-03T06:10:33Z","title":"HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1810.01594","snapshot_observed_at":"2026-08-08T19:41:42.961856Z","title":"Holmes: real-time APT detection through correlation of suspicious information flows,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.961856Z"},"links":{"cited_paper":"/paper/1810.01594","citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:baace7fee47b7474605dd5c9008f032f253fe2e32c62feb09e2436845733d760","observation_id":"fb881cb2-de99-4349-92f6-798080848f43","resolution":{"observed_at":"2026-08-08T19:41:42.961856Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.775991Z","title":"Botminer: Clustering analysis of network traffic for protocol-and structure-independent botnet detec- tion,","venue":null,"work_id":"323148df-7b65-4376-a86e-996ac737b2ae","year":2008},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.966550Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:ae77b5d427d39486c634eecf5a269b6655ba268ec1f10bf7dc9dfeb2a3d6fd5d","observation_id":"3380a6eb-e7d4-4498-a1b8-d4952dfef01e","resolution":{"observed_at":"2026-08-08T19:41:43.780266Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.764124Z","title":"Disclo- sure: detecting botnet command and control servers through large-scale netflow analysis,","venue":null,"work_id":"52ef3c32-e8be-4c3f-be46-1699716458f1","year":2012},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.971260Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:a2c843f776b011265fd5ca56c9c717d8a1634b00ff5c70872eb02a20fe1d9c43","observation_id":"1bfd2319-4477-4b49-a54e-176b6afeea82","resolution":{"observed_at":"2026-08-08T19:41:43.768625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.752438Z","title":"Beehive: Large-scale log analysis for detecting suspicious activity in enterprise networks,","venue":null,"work_id":"c160d991-ad4a-4429-9056-e6971d1af5aa","year":2013},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.975269Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:e2daf3f40eae2f799ce0bbc92067b27c7fda7f02105ddfd99bd6bdcafdae0a5a","observation_id":"6d902a09-7093-4fa4-8cea-9a5516d59d7d","resolution":{"observed_at":"2026-08-08T19:41:43.756550Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.741112Z","title":"Baywatch: robust beaconing detection to identify infected hosts in large-scale enterprise networks,","venue":null,"work_id":"631aa56d-57bb-416b-9a33-5e5341f44bf4","year":2016},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.979630Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:2327639386f841c438faa5b33e2c39c0ae39da82c6627533fc16a03ff3c16625","observation_id":"59a64934-15a5-4b91-8f56-ce87e6a0d422","resolution":{"observed_at":"2026-08-08T19:41:43.744995Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.730949Z","title":"Detection of early-stage enterprise infection by mining large-scale log data,","venue":null,"work_id":"49f0c744-a842-4858-85ba-72cc368a600b","year":2015},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.983614Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:b4fd57a0295826096685e52dd6b89a0404f366814d1a100d13ca9a547ece1258","observation_id":"433d009b-c316-4485-9e1c-913e958c6ccc","resolution":{"observed_at":"2026-08-08T19:41:43.734644Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.720711Z","title":"Behavioral clustering of http-based malware and signature generation using malicious network traces.,","venue":null,"work_id":"336d369a-90dc-402b-8b1c-f588fa846663","year":2010},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.987874Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:9164a451eafbfa73f98a4fa15e8ea308425d4f2467042a39b57c285bc3433127","observation_id":"1f014a93-edf3-4e81-bbdd-99cc477fa2e7","resolution":{"observed_at":"2026-08-08T19:41:43.724584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.709679Z","title":"Applying deep learning on packet flows for botnet detection,","venue":null,"work_id":"d2716ca5-ae04-483e-8891-d87b75bbdb17","year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.991826Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:7e88c9db5ee9672ba1da7a22312773a1ad2125d411555d2419dabf661b1d463a","observation_id":"744bb125-7266-44b9-9550-b19ab2d4324f","resolution":{"observed_at":"2026-08-08T19:41:43.713384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.697937Z","title":"H AWK-EYE: Holistic detection of APT command and control domains,","venue":null,"work_id":"e2d28336-29ad-4035-aa1f-9614d30e8ed9","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.995691Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:51eb353f42bd89989df194e6c61c0b963d809acc71268d68f8a5cc8b5b16fb6e","observation_id":"a122a8b3-401c-42b4-bbe3-84aa69f58f45","resolution":{"observed_at":"2026-08-08T19:41:43.702196Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.681575Z","title":"Converting information into knowledge-based assets","venue":null,"work_id":"51317260-1bac-4ad7-82ce-56aab95db710","year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:42.999339Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:3facf58cc7e814943ae269d73df322d857b584f4544d841719043cd93c09ec52","observation_id":"378ca119-834e-4832-aa12-169188601978","resolution":{"observed_at":"2026-08-08T19:41:43.685740Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.669076Z","title":"Bro: A system for detecting network intruders in real-time,","venue":null,"work_id":"bfa56a9c-3e80-4333-b8d6-c2ebade6e23b","year":1999},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.002994Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:585b9999cd5c46662b3c2f604f90445b75add54827720a294e9a366066f3399a","observation_id":"b1b6ac2e-e126-492f-bfd9-dea9b6f852ee","resolution":{"observed_at":"2026-08-08T19:41:43.672930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.657869Z","title":"Command and control","venue":null,"work_id":"4633622e-5e3d-4da3-8d73-635bcffc6996","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.006915Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:d80843b2110398cfd5c5770860f2f4c4d8c98294469ca184978c91ca430c6bbe","observation_id":"547a4c6e-3e9b-43f5-8816-b735bee3b97f","resolution":{"observed_at":"2026-08-08T19:41:43.661633Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.645819Z","title":"E ARLYCROW github repository","venue":null,"work_id":"967bf3f3-3bd8-4b63-9361-da403fc4568d","year":null},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.011398Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:ddc08e5da175fe849ca662b323e4d5755a2954816503aab026190968f8fbc868","observation_id":"9ce50892-a5a8-48a7-b89a-4959e8c49a19","resolution":{"observed_at":"2026-08-08T19:41:43.649928Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.634692Z","title":"Outside the closed world: On using machine learning for network intrusion detection,","venue":null,"work_id":"69d2bedf-579f-4491-b9c1-97e8803505d2","year":2010},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.015568Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:0c0b3081c6f67bd112c10d0da8f864c3a83797d3242d26bebf9198c8628ac0a4","observation_id":"027f56f7-aa45-4b7c-8dea-026a90c623f2","resolution":{"observed_at":"2026-08-08T19:41:43.638681Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.623076Z","title":"Fallback channel ttp","venue":null,"work_id":"603b10f9-d409-4eb1-b94d-8eb0d5d14bf4","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.019214Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:8b6cc750ab4f933496d37a9f29f1fa022b4902fdeacb3d7c146ddb3bf2e05d5e","observation_id":"34d1f640-ffa4-4efc-8074-c97ef45a5d75","resolution":{"observed_at":"2026-08-08T19:41:43.626876Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.611409Z","title":"Protocol tunneling","venue":null,"work_id":"7815c49a-fc9b-438c-b79b-f0878ab138af","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.024060Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:5a669f35a96b382178f761c3d149cd50026ed02c521a30e32368346b2c5ebadc","observation_id":"c3ce8b43-d8c1-409c-9045-1fe26ffa40e5","resolution":{"observed_at":"2026-08-08T19:41:43.615131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.600301Z","title":"Abusing cloud services to fly under the radar","venue":null,"work_id":"26ea547f-e360-4f3f-9378-55ab60b7f557","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.028050Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:e2e61896ef6728895ded4ee512aaa8c29376a4071716a94b8ec0764abc1e430f","observation_id":"eb135f24-27dc-4f33-bdc5-9dda6af5c6be","resolution":{"observed_at":"2026-08-08T19:41:43.604279Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.588148Z","title":"Highly evasive attacker leverages solarwinds supply chain to compromise multiple global victims with sunburst back- door","venue":null,"work_id":"b2501548-033e-4171-89c0-2a108ca7eb9c","year":2020},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.032412Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:4b3c6e5e6079f659a5af13b184f7c0b53cad188b7b056e829a225743111a7dfd","observation_id":"4628d6b8-72c8-4e1e-9f97-d26c238cfc10","resolution":{"observed_at":"2026-08-08T19:41:43.592591Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.576446Z","title":"Application layer protocol: Web protocols","venue":null,"work_id":"6426128d-bb69-472a-abeb-f7070971029c","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.036717Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:be9a42c5e12e8d656d60de4b1d18694d64f614ff75c501ea33dfba3cdcfe81be","observation_id":"f2294f53-5634-4da8-b84c-e5669fff7705","resolution":{"observed_at":"2026-08-08T19:41:43.580480Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.565423Z","title":"Non-application layer protocol","venue":null,"work_id":"218b57de-18f4-47b6-98b2-c72e0d80ebd9","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.041895Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:8f4c7ef9bc2d1cc5c9c7801b735f7a3c06ff88d77a12263dfd83a25fdc760b00","observation_id":"1475ee6e-db72-4cc6-b17a-57d49d7d8641","resolution":{"observed_at":"2026-08-08T19:41:43.569227Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.554034Z","title":"Encrypted channel","venue":null,"work_id":"158dec33-7342-47a4-90da-bb31acce31b4","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.047415Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:e5eed8eeae4a2757afe484c3ea62d13a024cc790094ef1d5617fb4287163d41b","observation_id":"8a54b737-63c7-41db-94b2-1b5979432e3d","resolution":{"observed_at":"2026-08-08T19:41:43.557949Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.542955Z","title":"Dynamic resolution: Fast flux dns","venue":null,"work_id":"36814e32-4548-46d2-b89c-3d09b614108c","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.051571Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:302d83ad3b24bf9f864313e49d0fdeb386b83bf9f1877799f2cbb9d2cce193ae","observation_id":"44a65cc2-3766-4740-bfa9-61846c89c3b5","resolution":{"observed_at":"2026-08-08T19:41:43.546816Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.532438Z","title":"Data obfuscation: Protocol impersonation","venue":null,"work_id":"c9ca9daf-d714-41d6-8c64-822b463c41ec","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.055751Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:0a8bdccac55c63c1d1a62b160324694d42d883284820d4cda8e274fba2144abd","observation_id":"4638f57b-d511-4706-8f80-bc87c06f5fb8","resolution":{"observed_at":"2026-08-08T19:41:43.536163Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.521291Z","title":"Cisco systems netflow services export version 9,","venue":null,"work_id":"3da18784-bba8-4500-8632-a2dadd9d1c5a","year":2004},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.060117Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:ef73bd41ed7d28c892cbaa52bcf6354d293bf8e9d759a614b5cfc1448f4391f9","observation_id":"4775fd73-e637-427e-9324-bf36180b3470","resolution":{"observed_at":"2026-08-08T19:41:43.525156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.510065Z","title":"Tranalyzer: Versatile high performance network traffic analyser,","venue":null,"work_id":"607a3aa0-e782-4782-a4e0-6ebc7765ccd1","year":2016},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.064121Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:afbf385a181385d9e01201801fe9c724b0fd2803f0854b67bf5da78b2b6b8579","observation_id":"256bf0fa-cdbc-4f63-9b8e-3cbb32844517","resolution":{"observed_at":"2026-08-08T19:41:43.514225Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.497792Z","title":"Identifying encrypted malware traffic with contextual flow data,","venue":null,"work_id":"4439cd3d-e4ed-4420-a011-e80435a62b9d","year":2016},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.068313Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:4a3dc78dcfe1961337f79116942a92ce479683cea3cead33356e7183015b01ac","observation_id":"adc6d296-f317-4332-8b75-7e2748bc90f0","resolution":{"observed_at":"2026-08-08T19:41:43.502024Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.484521Z","title":"Passive dns replication,","venue":null,"work_id":"615e80b3-cda2-4054-aad2-39ae1579559f","year":2005},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.072511Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:16fc4c86899e94c042ec0bab46e11ce75b140e419637859c28cf2e6dabbc07c8","observation_id":"bc93fa25-e9bb-4f3b-bd74-f1f444721930","resolution":{"observed_at":"2026-08-08T19:41:43.489880Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.471739Z","title":"Forefront tmg web proxy","venue":null,"work_id":"7a278607-07d0-4e27-86f8-92226e8d9853","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.076431Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:2647f671ff8adca0eee89131eea52335ec4bc22788a4e6d22f4cfa591444b36c","observation_id":"5a8775e0-afb1-44bd-841a-8dde6124b4e9","resolution":{"observed_at":"2026-08-08T19:41:43.476257Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.459500Z","title":"Squid: Optimising web delivery","venue":null,"work_id":"e706436e-967f-4478-8555-077e86f70839","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.080877Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:7b776a81139193b6b4b411882a6c72838efc20cced4cbe382aa5ebe686ad6d9c","observation_id":"1e71c6ff-28da-413f-ab72-0a2c8dbb5722","resolution":{"observed_at":"2026-08-08T19:41:43.463335Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.447285Z","title":"Dynamic dns","venue":null,"work_id":"35aacf78-8d5b-41e6-9b23-855b92aac4cb","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.085587Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:1b42e37d797150c68d96609d4149f27922f89fd7af6c990900e7bb7ac95a2d45","observation_id":"0063c372-3606-47d4-bf8c-a133044d7c8f","resolution":{"observed_at":"2026-08-08T19:41:43.451529Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.435952Z","title":"Beyond blacklists: learning to detect malicious web sites from suspicious urls,","venue":null,"work_id":"25dd8693-02c5-4265-850f-d84836925513","year":2009},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.090018Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:706b37161b8477271669453e3adf50812471f4b6745378af5690fbd005988781","observation_id":"3e77476a-c218-443d-90e0-68bc81f83bbf","resolution":{"observed_at":"2026-08-08T19:41:43.439763Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.425069Z","title":"Made: Security analytics for enterprise threat detection,","venue":null,"work_id":"229a73b5-593e-4848-830a-b254381bc6d9","year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.094300Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:497d9358c44ce624c82aa3b05c1be8181fd39a2ff5e62ac5a2412077f6389375","observation_id":"e17ed71d-cccd-4f7b-a3cc-a22794bde5ab","resolution":{"observed_at":"2026-08-08T19:41:43.428768Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.414553Z","title":"Optimized invariant representation of network traffic for detecting unseen malware variants,","venue":null,"work_id":"d7e0dd4c-4bd3-4851-adb6-984c893468a3","year":2016},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.098400Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:57ab0f86b8e8de6506e2cf57b177bc39f483308f94397a06d92ab1f298aeb41d","observation_id":"077d4d7b-d206-45ef-a7e3-86724f923a4e","resolution":{"observed_at":"2026-08-08T19:41:43.418418Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.403816Z","title":"Behavioral classification and detection of malware through http user agent anomalies,","venue":null,"work_id":"eefb2504-724a-47d1-b63a-7cd960157417","year":2013},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.102669Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:9e9a6b8ee17b38f4cb678d8fe2fe0f41a144dc3e4f06bb7651b2a6cd455772fa","observation_id":"e772371d-98c5-4ce1-a12b-acb39b9a09e2","resolution":{"observed_at":"2026-08-08T19:41:43.407831Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.392804Z","title":"Trafficav: An effective and explainable detection of mobile malware behavior using network traffic,","venue":null,"work_id":"c3f07e1a-9f7d-4d9b-825f-fc93e2ccc9f3","year":2016},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.106919Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:67dbe59cb6f4e62d7cf045397ba1f3f7d78c03f45d3fab35dd919e1f42eccdab","observation_id":"09c45779-2102-412e-8b79-3671530fec89","resolution":{"observed_at":"2026-08-08T19:41:43.396695Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.381136Z","title":"Malware detection using http user-agent dis- crepancy identification,","venue":null,"work_id":"a1bde774-d8cd-4ec0-ad71-b52faf7bb89e","year":2014},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.111115Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:9e82f1de45b4029b997df9b0fbad446a5f52c9965614315fe26f628c730f58f2","observation_id":"ab95193a-3d66-48f4-9174-e9e3c2f3ce04","resolution":{"observed_at":"2026-08-08T19:41:43.385336Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.369481Z","title":"Cipher suite info","venue":null,"work_id":"c1d3e858-5fd3-444c-8791-7d78874873ca","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.115629Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:c75166bba6d84a8e6501acdbf84bfb854a7e96b8959ba3012ac4b3f9de65ef07","observation_id":"64c0faf5-67ff-4a35-b77a-e85a625dd732","resolution":{"observed_at":"2026-08-08T19:41:43.373175Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.357880Z","title":"Network traffic behavior analysis by decomposition into control and data planes,","venue":null,"work_id":"06aeb8ce-ffc1-4194-9f35-90b0989ccb9c","year":2008},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.119570Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:3fecd6e2a97415b46e824130d23d2319ea3344d750b2335f27b485ed17a7f90c","observation_id":"3a93123a-4d2a-4500-832d-bceca841cc50","resolution":{"observed_at":"2026-08-08T19:41:43.361952Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.346358Z","title":"Detecting botnets using command and control traffic,","venue":null,"work_id":"23b7d6f6-e222-4223-b30f-9321b299e4e1","year":2009},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.123597Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:cb680da97a1de053a41bd350be7560c591fd5f8443908cf78bb39d1ec8b07b56","observation_id":"6569e055-ad16-4d6f-8729-4f15b43a0d61","resolution":{"observed_at":"2026-08-08T19:41:43.350447Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.333316Z","title":"Botfinder: Finding bots in network traffic without deep packet inspection,","venue":null,"work_id":"fa7a31db-c4ad-4ab5-8929-c85bb724e076","year":2012},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.127481Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:3d869b58fbed74f9beb2e49d6e507b77d755af96bfb25cfc6272bb2b2425af1e","observation_id":"33fe8a26-26a2-4c98-bc6b-8880ef3d903f","resolution":{"observed_at":"2026-08-08T19:41:43.338595Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.321923Z","title":"Nazca: Detecting malware distribution in large-scale networks.,","venue":null,"work_id":"b815cafe-9527-4d1f-b639-ba0ad320add3","year":2014},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.131424Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:250b96bb2042b832bbbafc2afce704ba76794633b1df35943405e39bca3719b3","observation_id":"fd2e8a17-1f2f-4940-ad4d-3cef56bb5b04","resolution":{"observed_at":"2026-08-08T19:41:43.325812Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.310368Z","title":"From Throw-Away traffic to bots: Detecting the rise of DGA-Based malware,","venue":null,"work_id":"947a215c-34c3-4843-ac48-9c57bab7aa25","year":2012},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.135320Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:651198009056edc744a2aa5ed16ff8da21e90fbf3cc0ea7f311be0e123c48622","observation_id":"e213f4ab-887d-4e59-8332-e7554faee37c","resolution":{"observed_at":"2026-08-08T19:41:43.314517Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.298778Z","title":"On botnets that use dns for command and control,","venue":null,"work_id":"09384352-1161-40d2-ab71-40148b8a0e3b","year":2011},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.139110Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:27e2b5dcbe7cb58f02e63fe65dd57ff85891f749da8239ef2e7b24b97b818f30","observation_id":"e16362d8-6a95-47c6-a884-771ce3e0d376","resolution":{"observed_at":"2026-08-08T19:41:43.302801Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.286789Z","title":"Dos and don’ts of machine learning in computer security,","venue":null,"work_id":"4875b333-4bfe-4496-8769-092fe0f8a154","year":2022},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.142913Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:cd4da6a57c8c3aa2b21994c1f710ab43315b128a96eef39656159b611b7eb36a","observation_id":"65a308cb-4d21-475b-8542-6fbc38642e25","resolution":{"observed_at":"2026-08-08T19:41:43.290847Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.273862Z","title":"Causality matters in medical imaging,","venue":null,"work_id":"ae86ff2b-fb74-4bce-9d72-6fa19cf2655b","year":2020},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.147043Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:0cfbb2a256c64eefdfab05f7a108fa7669d0976aa86c3a97d0ed57ca89e84564","observation_id":"222d08f5-4a85-4c08-ae42-08c3cb67dd0a","resolution":{"observed_at":"2026-08-08T19:41:43.278376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.260360Z","title":"Troubleshooting an intrusion detection dataset: the cicids2017 case study,","venue":null,"work_id":"157f7c95-23c4-44d7-a5d5-88460b3cc689","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.150869Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:54599041eccdd66dccda1cc0a2cd6761aa0d2fdd7f6c71abaeec3ce37503629e","observation_id":"d9c0cf3d-55c2-4832-b153-ec15fa5986bb","resolution":{"observed_at":"2026-08-08T19:41:43.264663Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.247075Z","title":"Crafting adversarial example to bypass flow-&ml-based botnet detector via rl,","venue":null,"work_id":"2f8056ba-e184-4d46-9356-81f3b3dc68f3","year":2021},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.154724Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:ecf01a8129a2308c6db2999761e22d2fddc93746e777cddc5cdd21b2903a5c13","observation_id":"8bae7f3d-0a10-4db8-bccc-3bb5c63b0779","resolution":{"observed_at":"2026-08-08T19:41:43.251661Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.234576Z","title":"Execscent: Mining for new c&c domains in live networks with adaptive control protocol templates,","venue":null,"work_id":"74514634-fe69-4acd-a56f-418aadd671e8","year":2013},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.158863Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:65517ad23c7e318290b1d42effb4e54766ca8ff6f57d00299703f2211e326d09","observation_id":"a9c975fd-8d22-4918-a453-d17def568090","resolution":{"observed_at":"2026-08-08T19:41:43.238728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.222625Z","title":"Decanter: Detection of anomalous outbound http traffic by passive application fingerprinting,","venue":null,"work_id":"c2ecc498-8846-4864-b106-1f50a785812e","year":2017},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.162582Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:c956a105fd957e8ee627ae34411e1d93d28c4928d01b15483dded03c86519753","observation_id":"50fe57f7-12b6-47a6-8b75-0445702fcbcb","resolution":{"observed_at":"2026-08-08T19:41:43.226734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-08T19:41:43.207584Z","title":"Kitsune: an ensemble of autoencoders for online network intrusion detection,","venue":null,"work_id":"27ab8f2a-a13a-4ebf-8ef2-aedd192702e4","year":2018},"citing_paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-08T19:41:43.166605Z"},"links":{"citing_paper":"/paper/2502.05367"},"observation_digest":"sha256:0dcb2f21eccb145b5944ddadeb2e807bc79d8c0140d59687860b542fe8abb776","observation_id":"544cd299-cb14-40f9-92db-174d6f5c91d5","resolution":{"observed_at":"2026-08-08T19:41:43.213844Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-13T06:32:02.005865+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2502.05367","last_updated":"2025-02-07T22:38:39Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-13T17:23:21.666221Z","submitted_at":"2025-02-07T22:38:39Z","title":"Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries"},"reference_resolution":{"displayed":57,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":1,"verified_exact":0,"verified_fuzzy":56},"total_outbound_references":57},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-13T06:32:02.005865+00:00","source":"crossref"},{"observed_at":"2026-08-13T06:31:53.387327+00:00","source":"retraction_watch"}],"thesis":"As of 13 August 2026, this Paper Citation Record lists 57 of 57 outbound references and 0 inbound Pith citation observations for arXiv:2502.05367."}