Paper Citation Record · LEDGER

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization

As of 17 August 2026, this Paper Citation Record lists 25 of 25 outbound references and 0 inbound Pith citation observations for arXiv:2511.04472.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2511.04472 v3

Coverage vector

measured 25 of 25 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-05-21T19:22:57.011639Z

measured 25 of 25 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

25 of 25 outbound references displayed

verified exact3
verified fuzzy22
unresolved0
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 07f038a7-e011-4053-8bfe-62cdb5856b99 · outbound

This paper cites EvilEDR: Repurposing EDR as an offensive tool.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization EvilEDR: Repurposing EDR as an offensive tool

Reference 1

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.390474Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation a405047c-69c7-4045-9e56-f621871611f4 · outbound

This paper cites Resurrecting anti-virtualization and anti-debugging: Unhooking your hooks.Future Generation Computer Systems, 116:393–405.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Resurrecting anti-virtualization and anti-debugging: Unhooking your hooks.Future Generation Computer Systems, 116:393–405

Reference 2

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.393172Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation ee15b220-2eda-431a-8914-4fa635a16055 · outbound

This paper cites Dealing with process overload attacks in unix.Information Security Journal: A Global Perspective, 17(1):33–44.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Dealing with process overload attacks in unix.Information Security Journal: A Global Perspective, 17(1):33–44

Reference 3

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.399190Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7c6eda71-7a36-4384-8a90-d4c8bec6faa0 · outbound

This paper cites A survey on automated dynamic malware analysis evasion and counter-evasion: Pc, mobile, and web.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization A survey on automated dynamic malware analysis evasion and counter-evasion: Pc, mobile, and web

Reference 4

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.401782Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 2d09cb91-c5e3-4501-8a83-aeb4f215cc8e · outbound

This paper cites A survey on automated dynamic malware analysis evasion and counter-evasion: Pc, mobile, and web.

Reference 5

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.396052Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 78eff812-b28b-413e-894f-90302fb15e42 · outbound

This paper cites The dark side of EDR: Repurpose EDR as an offensive tool.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization The dark side of EDR: Repurpose EDR as an offensive tool

Reference 6

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.425068Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 25738954-609b-4b70-9459-5cbdf2ee31c7 · outbound

This paper cites Markelon, Kenneth G.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Markelon, Kenneth G

Reference 7

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.416233Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation d7001585-1ab0-4280-ace5-beeb97bb052e · outbound

This paper cites A systematical and longitudinal study of evasive behaviors in windows malware.Comput.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization A systematical and longitudinal study of evasive behaviors in windows malware.Comput

Reference 8

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.419777Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5825f53f-fdc7-413e-8a7c-f2fd2ce39fc2 · outbound

This paper cites HookChain: A new perspective for Bypassing EDR Solutions.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization HookChain: A new perspective for Bypassing EDR Solutions

Reference 9

Resolution: verified exact; arxiv_id, observed 2026-05-21T19:24:20.025618Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation eec2678b-28e1-41f4-9dbe-10d9359f57d6 · outbound

This paper cites An empirical assessment of endpoint detec- tion and response systems against advanced persistent threats attack vectors.Journal of Cybersecurity and Privacy, 1(3):387–421.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization An empirical assessment of endpoint detec- tion and response systems against advanced persistent threats attack vectors.Journal of Cybersecurity and Privacy, 1(3):387–421

Reference 10

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.426691Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 7e83cb0f-2da0-4bd6-bbe2-8cc88413a268 · outbound

This paper cites The power of procrastination: detection and mitigation of execution-stalling malicious code.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization The power of procrastination: detection and mitigation of execution-stalling malicious code

Reference 11

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.430212Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 2b1b529c-fa94-49eb-bbfd-27c59d1272b0 · outbound

This paper cites Python and Malware: Developing Stealth and Evasive Malware Without Obfuscation.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Python and Malware: Developing Stealth and Evasive Malware Without Obfuscation

Reference 12

Resolution: verified exact; arxiv_id, observed 2026-05-21T19:24:20.030378Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5b4990ef-1f6d-4a05-bae5-58a42038673a · outbound

This paper cites Does every second count? time-based evolution of malware behavior in sandboxes.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Does every second count? time-based evolution of malware behavior in sandboxes

Reference 13

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.413499Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation f24b4c62-2682-4bf2-965d-ec8c0dd2c649 · outbound

This paper cites Lewis and Bhaskar P.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Lewis and Bhaskar P

Reference 14

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.454424Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5a44911e-2abb-42e8-8d29-b4475c895196 · outbound

This paper cites ReDoSHunter: A combined static and dynamic approach for eliminating regular expression DoS vulnerabilities.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization ReDoSHunter: A combined static and dynamic approach for eliminating regular expression DoS vulnerabilities

Reference 15

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.440105Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation e6e97d37-d7f7-4d6d-9575-684873049251 · outbound

This paper cites RegexScalpel: Regular expression denial of service vulnerability repair.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization RegexScalpel: Regular expression denial of service vulnerability repair

Reference 16

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.431809Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation f378a87c-c6ef-448b-a90a-e395c20e0d4a · outbound

This paper cites Gomez, Juan Tapiador, and Andrea Lanzi.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Gomez, Juan Tapiador, and Andrea Lanzi

Reference 17

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.443035Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation bf4aa295-8fa6-432d-8a01-0dc08ef52767 · outbound

This paper cites Keromytis, and Suman Jana.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Keromytis, and Suman Jana

Reference 18

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.452022Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 1e2a39d7-71c1-40a3-a8c5-956fe2927cab · outbound

This paper cites Microsoft Defender Will Be Defended: MemoryRanger Prevents Blinding Windows AV.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Microsoft Defender Will Be Defended: MemoryRanger Prevents Blinding Windows AV

Reference 19

Resolution: verified exact; arxiv_id, observed 2026-05-21T19:24:20.026810Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation fe4af5d3-ca98-406b-9371-ebecd86c33e6 · outbound

This paper cites Laughter in the wild: A study into dos vulnerabilitiesinyamllibraries.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Laughter in the wild: A study into dos vulnerabilitiesinyamllibraries

Reference 20

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.449413Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 6f6ab608-81c4-4f8a-9a8d-e73400344e3e · outbound

This paper cites Cardinal pill testing of system virtual machines.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Cardinal pill testing of system virtual machines

Reference 21

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.437165Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 5847e6c2-e4df-4dc6-8afd-4c7151a13a8c · outbound

This paper cites On breaking SAML: Be whoever you want to be.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization On breaking SAML: Be whoever you want to be

Reference 22

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.433628Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 84290ec2-df09-489e-ba5e-599219310c1e · outbound

This paper cites SoK: XML parser vulnerabilities.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization SoK: XML parser vulnerabilities

Reference 23

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.410788Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 060fefc5-ba6a-4666-9522-354e03259c3c · outbound

This paper cites Exposing ReDoS vulnerability of non-backtracking matchers.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Exposing ReDoS vulnerability of non-backtracking matchers

Reference 24

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.418000Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Observation 39212fa5-2d36-420d-8450-188b3f05a14f · outbound

This paper cites Sandprint: Fingerprinting malware sandboxes to provide intelligence for sandbox evasion.

Evading and crashing anti-malware solutions via data collection overloading during analysis serialization Sandprint: Fingerprinting malware sandboxes to provide intelligence for sandbox evasion

Reference 25

Resolution: verified fuzzy; raw_fallback, observed 2026-05-21T19:24:20.446456Z

Source-reported events for the cited work

No event found in the named queried sources as of 2026-08-17T06:30:58.91139+00:00.

Pith citing papers

No inbound Pith citation observations are available.