{"as_of":"2026-08-08T06:00:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ad46b66e235dbebd99e175fe2e88e38392be1d567fa3206963c43dea927d2173","coverage":[{"denominator":42,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":42,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T05:29:36.946605Z","state":"measured"},{"denominator":42,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":42,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.07827/citation-record","integrity":"/paper/2506.07827/integrity","json":"/paper/2506.07827/citation-record.json","paper":"/paper/2506.07827"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:44.144073Z","title":"Hoglund and J","venue":null,"work_id":"94304d69-3d7d-4c7d-b98f-130430573bee","year":2005},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.739340Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:5c819cabb7344b254ef383242c7bf7f1b140d85f800014f91ba4bf4b04bf3cf5","observation_id":"90dd663d-1db9-429b-803e-82619736c6f2","resolution":{"observed_at":"2026-08-07T05:29:44.207296Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:44.003428Z","title":null,"venue":null,"work_id":"4bcfeecf-e80e-40f5-90bb-391c26090d74","year":2009},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.745308Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:337ccaf4cd84cba8a17622766c206d54973b7eeaf999bfd657a0c785e63858f7","observation_id":"f85794ef-06b7-4c35-bfb8-3ae860d09ea0","resolution":{"observed_at":"2026-08-07T05:29:44.067442Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.894884Z","title":"Subverting vista kernel for fun and profit","venue":null,"work_id":"323930a9-6344-4a28-84b2-6abf370456d2","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.750543Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:ebe771eb8d123bd9174f58dc203d2920c49c931552c191532ccf1f99e7638b2c","observation_id":"7aa28e0c-15f9-4ee0-9da4-51d138bad691","resolution":{"observed_at":"2026-08-07T05:29:43.957622Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.740639Z","title":"Subvirt: implementing malware with vir- tual machines,","venue":null,"work_id":"899195ff-78b7-417e-b4ce-d51b6820b61d","year":2006},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.756685Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:118423f6d886327bd667eaf8c5d012721d1e773fae78be284a33f5a1999e97d2","observation_id":"c3db2c56-47a2-4eb6-a7f3-3e0f277242c0","resolution":{"observed_at":"2026-08-07T05:29:43.797643Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.581282Z","title":"Covirt (a virtual-machine based rootkit)","venue":null,"work_id":"5729152d-075d-4f7c-b7e3-3e364ad773d8","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.761993Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:10d7bf361968c1173f9df2399811586ee3c1d93300e6e5f5ba0a132f43b418b8","observation_id":"ce82c954-62f5-4800-aab4-eac8c46a777a","resolution":{"observed_at":"2026-08-07T05:29:43.655929Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.414618Z","title":"Linux on-the-fly kernel patching without lkm,","venue":null,"work_id":"96b962ad-6365-4f8a-971d-a2fa35467cbc","year":2001},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.766946Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:94c363926e44957f93c2af5869b8db842e46d1c90ac286a77cd954b864054a8e","observation_id":"97f9c4ef-ad5a-44eb-baac-361e795d75c2","resolution":{"observed_at":"2026-08-07T05:29:43.499916Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.283584Z","title":"Triplecross","venue":null,"work_id":"177a2492-f2fe-4fe4-8ac4-4913a0cfc4c4","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.772490Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:9b8afcf458d38ed09705c3e1b8fa06395a4735ba7814974015574790293096b9","observation_id":"a930a85e-1db3-4e72-a17b-9adbf79bf02c","resolution":{"observed_at":"2026-08-07T05:29:43.342167Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1145/3688808","metadata_source":"doi_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:36.980119Z","title":"The hidden threat: Analysis of linux rootkit techniques and limitations of current detection tools,","venue":null,"work_id":"3b4e9111-f338-4822-acfc-8e2045ab6e9f","year":2024},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.777329Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:6aa3a1dab1eaefc0625fe886e0b9c1f187bd45180f4921c8da791be9c2a7aa79","observation_id":"41b46cce-fcb0-401d-bb82-d6240a38370d","resolution":{"observed_at":"2026-08-07T05:29:36.987982Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:43.124920Z","title":"Unhide git repository","venue":null,"work_id":"c5c5884b-7612-4afd-a903-695b8426e1b3","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.783334Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:a7791b46df5e679d3b625d88528c4b3238a2a97a1c4d35d42415fca3d0932a24","observation_id":"faf641f8-a9fb-4203-b856-0538ef507c9e","resolution":{"observed_at":"2026-08-07T05:29:43.205639Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:42.911643Z","title":"Unhide: the open source forensic tool","venue":null,"work_id":"492af695-2b8e-4020-8262-9e2fec959e83","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.788588Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0e7532a2a33dd5cd9bf5857ce791bed25bb21537c6605de7a6015cb2749a1072","observation_id":"287fa780-7d3f-4e55-8a38-18d3f008499f","resolution":{"observed_at":"2026-08-07T05:29:43.021299Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:42.717413Z","title":"Unhide-ng (next generation) git repository","venue":null,"work_id":"5f7a6cdf-d1ea-4b9e-b914-d7f70ce1cfb1","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.793594Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:15627e50f34cd0ff9ae33c0a546ca2ebcab14798b6bdfc2d486a9b8e71f9f7dd","observation_id":"bfab6b6d-482c-472e-a906-76744919759a","resolution":{"observed_at":"2026-08-07T05:29:42.816819Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:42.446184Z","title":"Kong,Designing BSD Rootkits","venue":null,"work_id":"e117026e-9908-4352-8454-862da161ac2b","year":2007},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.799371Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0a59606034cd3ed77bd90dc5e79324c0813667823c41b636e1d6bd9fa4111101","observation_id":"c54f283e-d838-4338-a817-64b0b6ceae68","resolution":{"observed_at":"2026-08-07T05:29:42.534764Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:42.271638Z","title":"Blunden,The Rootkit Arsenal: Escape and Evasion in the Dark Cor- ners of the System","venue":null,"work_id":"bf104e72-5b9e-41f8-a82c-ca9dba3f011f","year":2009},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.804728Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:34ac9c48c71ffc737f030c369ae16e68c25cc38aea7e53284878c85fba475047","observation_id":"34aa1783-d7d6-4ced-b276-841796076c86","resolution":{"observed_at":"2026-08-07T05:29:42.345154Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6263.34069","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.079231Z","title":"Efficient and trusted detection of rootkit in iot devices via offline profiling and online monitoring,","venue":null,"work_id":"c93f92f0-f8c4-4a74-9563-48ec16f4dbad","year":2020},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.809361Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:7cbdadf1b51024f86c1647c48274b6d018ecddd369a9de964fda28d2712ef994","observation_id":"c55a4c1d-29b8-436d-b0c7-be84b9201b81","resolution":{"observed_at":"2026-08-07T05:29:38.160585Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"9065.15190","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.868340Z","title":"Multi-aspect profiling of kernel rootkit behavior,","venue":null,"work_id":"52e74b69-9ef4-4647-bf37-10166874b7e5","year":2009},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.814086Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0430aafeaab54ed2e673b195b8f3b5c6c697705e4db0bd5938f9ac5130190319","observation_id":"bf1c7202-475f-4627-80f3-2293b8688c3d","resolution":{"observed_at":"2026-08-07T05:29:37.947157Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8997.19890","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.577686Z","title":"An online cross view difference and behavior based kernel rootkit detector,","venue":null,"work_id":"e88fd49a-c427-4da9-85fb-b3684ba12bd3","year":2011},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.818828Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:50bc1de275f454dec2b25e3e48e6c1a3e7f59bab194f98799fb359ebaaa26963","observation_id":"f8282bbc-9414-4fae-9e4c-b4b57482ce60","resolution":{"observed_at":"2026-08-07T05:29:37.668202Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2973.30529","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.390950Z","title":"On the detection of kernel-level rootkits using hardware performance counters,","venue":null,"work_id":"723e0d9f-3703-42d8-91a7-8e206679b44b","year":2017},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.823866Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:fb2a04305eeb0367014da4ef30ff1f09b08bd5a1335d865daeebdced4a970b61","observation_id":"9a0a9682-5073-45be-bf7c-637553de1e96","resolution":{"observed_at":"2026-08-07T05:29:37.468658Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"8903.34589","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.288100Z","title":"Position paper: Consider hardware-enhanced defenses for rootkit attacks,","venue":null,"work_id":"47d2649b-0ebe-41ef-9750-3c44fed47ff6","year":2021},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.828602Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:ac64785505ff9a9d671587af533eeb6c3b4e31cf395cc76cbc27eeab84b94aaf","observation_id":"211fed27-19f6-48d2-9829-a1b11ed5135e","resolution":{"observed_at":"2026-08-07T05:29:37.306664Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:42.129878Z","title":"Advance kernel rootkit de- tection: Survey,","venue":null,"work_id":"4a948004-bfb0-472f-bc8e-157ba271569d","year":2023},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.833148Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:766e2e3de1098ac09aa4e71bdd1099b2e7d37c065d280b9c09780848ece13668","observation_id":"cce7b835-b996-4a2d-a997-9b532fd6dba5","resolution":{"observed_at":"2026-08-07T05:29:42.192259Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.953945Z","title":"Rootkit modeling and ex- periments under linux,","venue":null,"work_id":"e001b2db-83bc-435a-aa2d-16861ad6f4db","year":2008},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.838247Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:f341e3306dc70275642176f2785047af6bee943cc1d658a7bf5402f501736ec9","observation_id":"2f52696a-5de2-4cd9-9b40-665618e68f71","resolution":{"observed_at":"2026-08-07T05:29:42.031531Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.792311Z","title":"Rootkit detection mechanism: A survey,","venue":null,"work_id":"8b9cdd82-eb72-4ee6-ab12-0d2c1a36de48","year":2011},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.843052Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:6debdb6b8305c788a06d5833150c0793668962ed28cf09bcec350c03a1130855","observation_id":"e925dbd6-116a-4caa-b627-5c8d176b13b9","resolution":{"observed_at":"2026-08-07T05:29:41.858578Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.636827Z","title":"A framework for prototyping and testing data-only rootkit attacks,","venue":null,"work_id":"3330c700-31e7-4dc3-8b49-de825b2dc360","year":2013},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.847883Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:4d0fcafac3aa8eaf795db223a5cf59d725959f6bbf24e252d50510dbbeb95b60","observation_id":"c74d0fda-3145-4024-b104-4fb0886df5ef","resolution":{"observed_at":"2026-08-07T05:29:41.715505Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"4105.35141","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.201199Z","title":"The design of the simple smm rootkit,","venue":null,"work_id":"87a02340-2a11-4da7-ad71-30f9cb626c19","year":2022},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.852583Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:70d87dfe5351c535e8a60f8315d81c4b980544c148495fa3e5449afd0a042732","observation_id":"0e21a625-40f5-4bf7-958c-7f9a66cadbf1","resolution":{"observed_at":"2026-08-07T05:29:37.216043Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.467139Z","title":"The research on rootkit for information system classified protection,","venue":null,"work_id":"1db677f9-1ccb-4eaa-a2f7-b3496dbb8760","year":2011},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.857287Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:e9ce49dac1d220598d1b829102da07192ee5b7da7bccab768a77ccf17e2edbe9","observation_id":"82ef1018-f4cc-477a-a785-bd2a8f56e42b","resolution":{"observed_at":"2026-08-07T05:29:41.546260Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.250930Z","title":"Kernel rootkit experiences,","venue":null,"work_id":"3f0471f0-0463-4e4d-ad96-0b655faceb4d","year":2003},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.861844Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0e50d9910f329a099aa936470ddfae326b3ae8975239384c85261934243bc651","observation_id":"f11f6cf6-f95d-47a2-9ffd-3c4eea0d6590","resolution":{"observed_at":"2026-08-07T05:29:41.355475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:41.102931Z","title":"Execution path analysis: finding kernel based rootkits,","venue":null,"work_id":"8bdd767a-1f1c-47fe-8c57-b8a8620233bb","year":2002},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.866707Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:68fba0ad850012c0c4528476bc01410053159aef1705b4eaadb5ae46164e42e6","observation_id":"0ff3dd1c-ad4b-42e8-803d-04b76228578a","resolution":{"observed_at":"2026-08-07T05:29:41.171563Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:40.925460Z","title":"Finding hidden kernel modules (extrem way reborn): 20 years later,","venue":null,"work_id":"59ab269c-5923-4588-8d5c-917e3e25bc5b","year":2024},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.871182Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:2fac96f51493853edd12152c3c1de4cdf48a7d88b13be87797456427c93e1c0e","observation_id":"2e57b1b8-1b17-4206-920f-fdea913376c4","resolution":{"observed_at":"2026-08-07T05:29:41.006144Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:40.706127Z","title":"Shared library redirection techniques,","venue":null,"work_id":"a7a36f68-0dfb-4306-acb8-85f25b5f2358","year":1997},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.875869Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0bc608190173763eceb34245c3e9669e6775ddcc88b2373b09f5d0ec186eb411","observation_id":"e51a3e76-1e5e-4d22-ac5d-651c83f291a9","resolution":{"observed_at":"2026-08-07T05:29:40.805380Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:40.509645Z","title":"He compels secure shells,","venue":null,"work_id":"9456dc78-12cf-4963-9d67-a92817f70046","year":2016},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.880477Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:3c8e4ffaba2fd66dd1c084d9efc86ea152ae801cb193d55993689804a5d74cd9","observation_id":"9e28e81d-8348-43dc-ac60-7faa903cbcc3","resolution":{"observed_at":"2026-08-07T05:29:40.597146Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:40.325796Z","title":"The art of linux kernel rootkits,","venue":null,"work_id":"8269a324-17a8-406e-9028-df21b69f1bc9","year":2025},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.885032Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:a835df513d9ca01a37d8f265c90a6ed1565bef09aa961edd5247ab0467e6948f","observation_id":"4e9e2d4a-be53-4bd2-9977-27b2158b35ec","resolution":{"observed_at":"2026-08-07T05:29:40.414753Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:40.135425Z","title":"Bypassing ldpreload rootkits is easy,","venue":null,"work_id":"d5935061-e1d2-452c-a434-894fbb731a39","year":2025},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.890073Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:f67e51802b4d6811c6c1007bbad12f346eb025a24178abc7b42c70d4be904063","observation_id":"ec043be2-d2e1-4276-be65-929f93604d36","resolution":{"observed_at":"2026-08-07T05:29:40.204667Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:39.916178Z","title":"In-depth study of linux rootkits: Evolution, detection, and defense","venue":null,"work_id":"89f1e81d-77f7-4a86-ab0d-cdef385a36af","year":2025},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.895274Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:17ff751f894f74cc6aa14a838f5156c08ccb8a3c3d5c68733b346f1b74cc646c","observation_id":"56f5da44-4f27-49f1-8018-04beb0bb521f","resolution":{"observed_at":"2026-08-07T05:29:40.042922Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:39.731706Z","title":"Malware memory analysis of the jynx2 linux rootkit: Investigating a publicly available linux rootkit using the volatility memory analy- sis framework,","venue":null,"work_id":"1e21c0ec-6a61-49ca-956b-5762ed2eb677","year":2014},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.901822Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:6788f3a3c32795d032e878e33486b9c2469038c7fb64ab3cf89999f7ed5db838","observation_id":"667ad252-9c53-4f0b-aad7-6cc299e17d64","resolution":{"observed_at":"2026-08-07T05:29:39.815620Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:39.534697Z","title":"Shared library call redirection via elf plt infection,","venue":null,"work_id":"641faead-728a-4ba6-8d15-80e943bb28c4","year":2000},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.907266Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:0f0cc554a60ac64a4c2919876fc8ffff8a8ae9f2074f5bf41c07bbd741eb4735","observation_id":"1ec92ba2-73ce-4ebc-9e2f-57d9f7825b04","resolution":{"observed_at":"2026-08-07T05:29:39.615271Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:39.328185Z","title":"How detect a ldpreload rootkit and hide from ldd and /proc,","venue":null,"work_id":"db826a76-7a1f-4645-b5b2-25a138fd5c10","year":2025},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.911782Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:5ee979921deaeb63c78e1bc472fdc188535dba43fb297e4eafcb459752af15ac","observation_id":"412cd382-697e-41ea-a6c6-73ba32f47898","resolution":{"observed_at":"2026-08-07T05:29:39.431162Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:39.164044Z","title":"Snoopy command logger","venue":null,"work_id":"0ffdef9b-bce9-46c0-9a3f-18169fde65ea","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.916900Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:a83bad2101827fb944758fd8f7f772aec7eb93b5d7e797f92f7396cffc19f7bf","observation_id":"f688440a-236f-4437-ba01-d33ee3a964e0","resolution":{"observed_at":"2026-08-07T05:29:39.240413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.957199Z","title":"zpoline: a system call hook mechanism based on binary rewriting,","venue":null,"work_id":"6deee3c7-cdfc-4f73-aabc-c331a20552b0","year":2023},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.922001Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:7af10ce97ae6a2cbffee018e22416766af85c63f2775795d74c33ba4c059a865","observation_id":"e3fda074-de24-43b9-b76f-0756cc604a5d","resolution":{"observed_at":"2026-08-07T05:29:39.052616Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.784718Z","title":"Kerrisk,The Linux Programming Interface: A Linux and UNIX Sys- tem Programming Handbook, 1st ed","venue":null,"work_id":"6125598e-2c77-426a-8ee8-79a7b4187d9e","year":2010},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.926956Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:a0ce0c24ab30fd5e67dfad2bc3df79ffe8bbe37938b1ea4a14fa20ebc0efecc3","observation_id":"5a1a0fd6-8aac-4eae-a877-82e4d91d6e0b","resolution":{"observed_at":"2026-08-07T05:29:38.863176Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"6378.50641","doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:37.112159Z","title":"The use of name spaces in plan 9,","venue":null,"work_id":"f60e499e-0837-4b46-8a05-6b9f7428f58e","year":1992},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.931752Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:cfa02ff6160b9b5cd59806313c912c91b7ba6bf17d6e9a38575d995236b647bc","observation_id":"93375496-e35a-4174-9194-0eb1783a19dd","resolution":{"observed_at":"2026-08-07T05:29:37.119780Z","resolver_source":"raw_fallback","status":"metadata_mismatch"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.617380Z","title":"The ptrace anti Re trick","venue":null,"work_id":"b6408b6a-5d52-4807-a71a-2a494a75f360","year":2023},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.936466Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:dca72bf1809d16fe3b5585e60d0076a54ca18aa0ac41aa7a2c9e698c639b1101","observation_id":"9b125233-d334-4655-9d04-f02e022099d2","resolution":{"observed_at":"2026-08-07T05:29:38.695428Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.415551Z","title":"The linux kernel documentation: Syscall user dispatch","venue":null,"work_id":"96515743-6c14-42f2-8da2-24eb7c21c548","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.941323Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:015fd53c9ac653a4c3f864c510aff963d49bb6888230d37627edbf34cd22bedc","observation_id":"51c1a27e-ba88-425a-a4dd-b8e6a2f8c893","resolution":{"observed_at":"2026-08-07T05:29:38.519192Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T05:29:38.215763Z","title":"The linux kernel documentation: ftrace - function tracer","venue":null,"work_id":"fe51de2d-af5f-49e9-86b5-5fa8eb8ac1c3","year":null},"citing_paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T05:29:36.946605Z"},"links":{"citing_paper":"/paper/2506.07827"},"observation_digest":"sha256:82fc75761ab7ec2b32c7d9c21f99e324fbc424b8375176a37d3f2249cf2bc5f6","observation_id":"5da1e49e-9487-471d-9b24-8e0c2d376626","resolution":{"observed_at":"2026-08-07T05:29:38.296650Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-07T06:34:17.273281+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.07827","last_updated":"2025-06-09T14:50:48Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-07T05:21:56.559199Z","submitted_at":"2025-06-09T14:50:48Z","title":"User-space library rootkits revisited: Are user-space detection mechanisms futile?"},"reference_resolution":{"displayed":42,"state_counts":{"malformed_identifier":0,"metadata_mismatch":7,"parse_uncertain":0,"unresolved":1,"verified_exact":1,"verified_fuzzy":33},"total_outbound_references":42},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 8 August 2026, this Paper Citation Record lists 42 of 42 outbound references and 0 inbound Pith citation observations for arXiv:2506.07827."}