{"as_of":"2026-08-17T17:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:72a6074259975dbf984ec851f9005ee2f13cade9bfaf745f29a4a5237915bae7","coverage":[{"denominator":25,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":25,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-21T19:22:57.011639Z","state":"measured"},{"denominator":25,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":25,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-17T06:30:58.91139+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2511.04472/citation-record","integrity":"/paper/2511.04472/integrity","json":"/paper/2511.04472/citation-record.json","paper":"/paper/2511.04472"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"EvilEDR: Repurposing EDR as an offensive tool","venue":null,"work_id":"1b27926c-76a4-4da5-bab8-55ad74c2e2a3","year":2025},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:1e51de8ae6bea254cfa4e1d2057d4600718dfb484d7e3bbdfaa8665833c61696","observation_id":"07f038a7-e011-4053-8bfe-62cdb5856b99","resolution":{"observed_at":"2026-05-21T19:24:20.390474Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Resurrecting anti-virtualization and anti-debugging: Unhooking your hooks.Future Generation Computer Systems, 116:393–405","venue":null,"work_id":"ea3eafcd-e70c-4f1a-baa9-3a299cb8690e","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:a634c48c7f3467d93255383129c695a1e4b3afe97687c2f0d49509e56c802478","observation_id":"a405047c-69c7-4045-9e56-f621871611f4","resolution":{"observed_at":"2026-05-21T19:24:20.393172Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dealing with process overload attacks in unix.Information Security Journal: A Global Perspective, 17(1):33–44","venue":null,"work_id":"3c0da2b3-8352-490a-b776-a6349719b55d","year":2008},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:85207f2e3b1524dbf2c13a182e4463e2b9aed4a44684a3270684d621820b4ed0","observation_id":"ee15b220-2eda-431a-8914-4fa635a16055","resolution":{"observed_at":"2026-05-21T19:24:20.399190Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on automated dynamic malware analysis evasion and counter-evasion: Pc, mobile, and web","venue":null,"work_id":"37959af4-08df-456c-bf5b-c3563f24f7f3","year":2017},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:9011db4851d8f1da24355fd5854c1fa998817a891f7b4cc1e13066ab89ab4035","observation_id":"7c6eda71-7a36-4384-8a90-d4c8bec6faa0","resolution":{"observed_at":"2026-05-21T19:24:20.401782Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A survey on automated dynamic malware analysis evasion and counter-evasion: Pc, mobile, and web","venue":null,"work_id":"fcc33aef-fa5e-4b5a-a777-3e063ad068d4","year":2017},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:708e460e052e4d9698e44abfa12323f5c461ad8ac9d9b63cdba039d75ad5c349","observation_id":"2d09cb91-c5e3-4501-8a83-aeb4f215cc8e","resolution":{"observed_at":"2026-05-21T19:24:20.396052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The dark side of EDR: Repurpose EDR as an offensive tool","venue":null,"work_id":"0772542d-ca48-4091-b901-607eab4c12af","year":2024},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:e18f510a2c95af43d916163c648ea0441b861399c427cd9bcad377705d03f055","observation_id":"78eff812-b28b-413e-894f-90302fb15e42","resolution":{"observed_at":"2026-05-21T19:24:20.425068Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Markelon, Kenneth G","venue":null,"work_id":"76b4269a-6253-4cc4-8616-1a138fc6ec53","year":2025},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:b23e6020f099f1f37a4aa9b6f562264a0e8691186f2841b8a6a6b8615456eb30","observation_id":"25738954-609b-4b70-9459-5cbdf2ee31c7","resolution":{"observed_at":"2026-05-21T19:24:20.416233Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"A systematical and longitudinal study of evasive behaviors in windows malware.Comput","venue":null,"work_id":"54ce8ce2-1a6e-4797-bc1d-1eafbaf137e8","year":2022},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:cce77217152fdbdb059400b315223d884f08252ad6ddb25de5a596e97d99def2","observation_id":"d7001585-1ab0-4280-ace5-beeb97bb052e","resolution":{"observed_at":"2026-05-21T19:24:20.419777Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2404.16856","last_updated":"2024-08-17T02:12:39Z","snapshot_observed_at":"2026-08-17T09:28:17.405333Z","submitted_at":"2024-04-04T11:44:08Z","title":"HookChain: A new perspective for Bypassing EDR Solutions","version":3},"cited_work":{"arxiv_id":"2404.16856","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2404.16856","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Hookchain: A new perspective for bypassing edr solutions","venue":null,"work_id":"cac595e1-29bc-4fa3-ad27-f71f693e7b8c","year":2024},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"cited_paper":"/paper/2404.16856","citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:fb9809f75da7aa6328c26b89c2e23f28abdcc960522fea65899c75f4003d66ad","observation_id":"5825f53f-fdc7-413e-8a7c-f2fd2ce39fc2","resolution":{"observed_at":"2026-05-21T19:24:20.025618Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"An empirical assessment of endpoint detec- tion and response systems against advanced persistent threats attack vectors.Journal of Cybersecurity and Privacy, 1(3):387–421","venue":null,"work_id":"305557c3-0f8b-43eb-9563-00fbbbe0b57b","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:9de30970b8ac87f0bc3c3355428caae4ceaee4ae17d391a5d2733b3f9d1c94e6","observation_id":"eec2678b-28e1-41f4-9dbe-10d9359f57d6","resolution":{"observed_at":"2026-05-21T19:24:20.426691Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"The power of procrastination: detection and mitigation of execution-stalling malicious code","venue":null,"work_id":"421a21fb-d1f3-488d-af66-919fca1bae8e","year":2011},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:a734d8f7547b288b528730a1e2eb775b5b9d9b0e1a36401652fa5e75b6b91a8d","observation_id":"7e83cb0f-2da0-4bd6-bbe2-8cc88413a268","resolution":{"observed_at":"2026-05-21T19:24:20.430212Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2105.00565","last_updated":"2021-05-02T22:29:22Z","snapshot_observed_at":"2026-08-16T18:27:33.170135Z","submitted_at":"2021-05-02T22:29:22Z","title":"Python and Malware: Developing Stealth and Evasive Malware Without Obfuscation","version":1},"cited_work":{"arxiv_id":"2105.00565","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2105.00565","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Python and malware: Developing stealth and evasive malware without obfuscation","venue":null,"work_id":"3a0654db-8723-4987-877c-cc7c3c74c37f","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"cited_paper":"/paper/2105.00565","citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:12cf400c1bbb495e9bf3da2d784336bb83eece48a250a89612da87d92d9d3864","observation_id":"2b1b529c-fa94-49eb-bbfd-27c59d1272b0","resolution":{"observed_at":"2026-05-21T19:24:20.030378Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Does every second count? time-based evolution of malware behavior in sandboxes","venue":null,"work_id":"ed9deaef-c764-46b0-8ec0-849048599460","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:0a0d3e9e951bb4c8c8cf6b16d4034c3e23ea01e44ad01ac7a9e8413853b24f0f","observation_id":"5b4990ef-1f6d-4a05-bae5-58a42038673a","resolution":{"observed_at":"2026-05-21T19:24:20.413499Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Lewis and Bhaskar P","venue":null,"work_id":"11af7645-2aa4-4fd3-a65d-825d308bed7d","year":2024},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:8fa267ebfa8158981d2b77b1ac8b1dc848529f155c2cbe4805a614d7f8ae68e3","observation_id":"f24b4c62-2682-4bf2-965d-ec8c0dd2c649","resolution":{"observed_at":"2026-05-21T19:24:20.454424Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"ReDoSHunter: A combined static and dynamic approach for eliminating regular expression DoS vulnerabilities","venue":null,"work_id":"a51d1612-f5ec-48c9-9038-93c4a11b0eeb","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:3ea4fb7e2cb49a902be982746832cb9bd63a3e57ac75c467c3bf4c389c4c6051","observation_id":"5a44911e-2abb-42e8-8d29-b4475c895196","resolution":{"observed_at":"2026-05-21T19:24:20.440105Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"RegexScalpel: Regular expression denial of service vulnerability repair","venue":null,"work_id":"d976f76b-070a-4990-b1e6-b179d1c54f54","year":2022},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:5493263223d5f36cc32d4d0277f825ecc672664b54b78b7616108771d4297218","observation_id":"e6e97d37-d7f7-4d6d-9575-684873049251","resolution":{"observed_at":"2026-05-21T19:24:20.431809Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Gomez, Juan Tapiador, and Andrea Lanzi","venue":null,"work_id":"50eb1709-7c1b-41ce-8ec3-a6b0f87a6c3c","year":2021},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:da5bf4bf7a2340831fc8541d96a4c9ca6218dbdca97ae8c6e466a363abbfe372","observation_id":"f378a87c-c6ef-448b-a90a-e395c20e0d4a","resolution":{"observed_at":"2026-05-21T19:24:20.443035Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Keromytis, and Suman Jana","venue":null,"work_id":"4b1f9987-f237-4b80-b984-17889225bb94","year":2017},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:13ab54167440aa350bfa3d0cc70368da619c989c2b5821d96963415182eb4aa7","observation_id":"bf4aa295-8fa6-432d-8a01-0dc08ef52767","resolution":{"observed_at":"2026-05-21T19:24:20.452022Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2210.02821","last_updated":"2022-10-06T11:25:05Z","snapshot_observed_at":"2026-08-16T16:26:27.743139Z","submitted_at":"2022-10-06T11:25:05Z","title":"Microsoft Defender Will Be Defended: MemoryRanger Prevents Blinding Windows AV","version":1},"cited_work":{"arxiv_id":"2210.02821","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2210.02821","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Microsoft defender will be defended: Memoryranger prevents blinding windows av","venue":null,"work_id":"a51c65e2-f34a-4be4-88df-8cbad02381b3","year":2022},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"cited_paper":"/paper/2210.02821","citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:830703ce4177c7a66304960b95836a6ffd35b94f67f0cbb50d26b65e66135920","observation_id":"1e2a39d7-71c1-40a3-a8c5-956fe2927cab","resolution":{"observed_at":"2026-05-21T19:24:20.026810Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Laughter in the wild: A study into dos vulnerabilitiesinyamllibraries","venue":null,"work_id":"0c541561-476f-4a08-a9ee-658efd8d3494","year":2019},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:52acc75c16528a4fabb9eb92ed05547781bc2fbe91ea7291e68bac97be5d4611","observation_id":"fe4af5d3-ca98-406b-9371-ebecd86c33e6","resolution":{"observed_at":"2026-05-21T19:24:20.449413Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Cardinal pill testing of system virtual machines","venue":null,"work_id":"0ce91225-1ce5-4415-9ee7-e0d7d137019c","year":2014},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:33ce7ea9e3335d73e361421a95e924ec48a97278bd375ba895c8b8bce6f9fea6","observation_id":"6f6ab608-81c4-4f8a-9a8d-e73400344e3e","resolution":{"observed_at":"2026-05-21T19:24:20.437165Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"On breaking SAML: Be whoever you want to be","venue":null,"work_id":"5a4de228-80b5-418b-a83f-bfc4a4a5dea7","year":2012},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:d4a154ca1364616ffc492ac3bf22408d226775315d60b4b5f15ac17fe5d59b22","observation_id":"5847e6c2-e4df-4dc6-8afd-4c7151a13a8c","resolution":{"observed_at":"2026-05-21T19:24:20.433628Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"SoK: XML parser vulnerabilities","venue":null,"work_id":"a8e67312-21d3-438d-ba3a-7cf0a5256930","year":2016},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:ed7089b5b48fdad18d1c8b22a931ddbcaf9b5419ec4d58039a0ed2f5636b75cf","observation_id":"84290ec2-df09-489e-ba5e-599219310c1e","resolution":{"observed_at":"2026-05-21T19:24:20.410788Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Exposing ReDoS vulnerability of non-backtracking matchers","venue":null,"work_id":"5a16faad-1886-4d9b-9d21-4a27e19e8da0","year":2022},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:3d79833bf1af1de404c7f4a470bb9a4e6e4aac7a82774257c2ccba0648617b05","observation_id":"060fefc5-ba6a-4666-9522-354e03259c3c","resolution":{"observed_at":"2026-05-21T19:24:20.418000Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Sandprint: Fingerprinting malware sandboxes to provide intelligence for sandbox evasion","venue":null,"work_id":"eafb9174-aab3-43b5-976c-525af3320874","year":2016},"citing_paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization","version":3},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-05-21T19:22:57.011639Z"},"links":{"citing_paper":"/paper/2511.04472"},"observation_digest":"sha256:0f300b4aae5fff0b9dbef8c8da2d84add2e988019f5f71e9ecee2a1f34dd4463","observation_id":"39212fa5-2d36-420d-8450-188b3f05a14f","resolution":{"observed_at":"2026-05-21T19:24:20.446456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2511.04472","last_updated":"2026-05-17T14:38:45Z","latest_version":3,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-17T13:58:18.667690Z","submitted_at":"2025-11-06T15:45:03Z","title":"Evading and crashing anti-malware solutions via data collection overloading during analysis serialization"},"reference_resolution":{"displayed":25,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":3,"verified_fuzzy":22},"total_outbound_references":25},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-17T06:30:58.91139+00:00","source":"crossref"},{"observed_at":"2026-08-17T06:30:54.323127+00:00","source":"retraction_watch"}],"thesis":"As of 17 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2511.04472."}