{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:2SGYZ3R2NE4FG6ZCRFDWXPYM36","short_pith_number":"pith:2SGYZ3R2","canonical_record":{"source":{"id":"1903.11551","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-01-21T02:15:53Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"0a7e8922e37550c0a070c797757a332b20c6361fed40e25532567ce038fc9e3c","abstract_canon_sha256":"970548afa616217533ec87c63c32e05c345dc35cee5ad4377f33ed7adca027a2"},"schema_version":"1.0"},"canonical_sha256":"d48d8cee3a6938537b2289476bbf0cdfb5445509c55fb8b758a2b1946f771c1c","source":{"kind":"arxiv","id":"1903.11551","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.11551","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"arxiv_version","alias_value":"1903.11551v1","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.11551","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"pith_short_12","alias_value":"2SGYZ3R2NE4F","created_at":"2026-05-18T12:33:07Z"},{"alias_kind":"pith_short_16","alias_value":"2SGYZ3R2NE4FG6ZC","created_at":"2026-05-18T12:33:07Z"},{"alias_kind":"pith_short_8","alias_value":"2SGYZ3R2","created_at":"2026-05-18T12:33:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:2SGYZ3R2NE4FG6ZCRFDWXPYM36","target":"record","payload":{"canonical_record":{"source":{"id":"1903.11551","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-01-21T02:15:53Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"0a7e8922e37550c0a070c797757a332b20c6361fed40e25532567ce038fc9e3c","abstract_canon_sha256":"970548afa616217533ec87c63c32e05c345dc35cee5ad4377f33ed7adca027a2"},"schema_version":"1.0"},"canonical_sha256":"d48d8cee3a6938537b2289476bbf0cdfb5445509c55fb8b758a2b1946f771c1c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:50:02.981778Z","signature_b64":"9KiQRJGtHOthgxDlbvrVRZNrdDhEyrFgmc3FV9m9mRMfsspYBY7gEoFvwPMji5lw5SqjWcnvVAyVxEYLyGvHBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d48d8cee3a6938537b2289476bbf0cdfb5445509c55fb8b758a2b1946f771c1c","last_reissued_at":"2026-05-17T23:50:02.981122Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:50:02.981122Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1903.11551","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:50:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BtB5yuY1PfBCTD9xL1v+shwekYKbzrE3bhSaIK1Dls0uwB3P0E+iRPUJaOKHFlk4Q8AAaBH17oa5EB0nxU8QDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:06:16.390715Z"},"content_sha256":"2a19241d66042b072418e4360097656712f7a0f5c916594774f54c43ac7913cc","schema_version":"1.0","event_id":"sha256:2a19241d66042b072418e4360097656712f7a0f5c916594774f54c43ac7913cc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:2SGYZ3R2NE4FG6ZCRFDWXPYM36","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Transfer Learning for Image-Based Malware Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Fabio Di Troia, Mark Stamp, Niket Bhodia, Pratikkumar Prajapati","submitted_at":"2019-01-21T02:15:53Z","abstract_excerpt":"In this paper, we consider the problem of malware detection and classification based on image analysis. We convert executable files to images and apply image recognition using deep learning (DL) models. To train these models, we employ transfer learning based on existing DL models that have been pre-trained on massive image datasets. We carry out various experiments with this technique and compare its performance to that of an extremely simple machine learning technique, namely, k-nearest neighbors (\\kNN). For our k-NN experiments, we use features extracted directly from executables, rather th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.11551","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:50:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BA7uJgohivedItlkfqpjDOo1oGiaS+2QpmCZAt/aaR7oEkDHc7o4nQYX5U25Sa9sWpuI5YxofQLicYaSRmXLCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:06:16.391457Z"},"content_sha256":"9a23f378aab77a623fe67dd90cf23fb1caed385114eaaa1bbd6556ce3ff6714d","schema_version":"1.0","event_id":"sha256:9a23f378aab77a623fe67dd90cf23fb1caed385114eaaa1bbd6556ce3ff6714d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/bundle.json","state_url":"https://pith.science/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T22:06:16Z","links":{"resolver":"https://pith.science/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36","bundle":"https://pith.science/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/bundle.json","state":"https://pith.science/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2SGYZ3R2NE4FG6ZCRFDWXPYM36/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:2SGYZ3R2NE4FG6ZCRFDWXPYM36","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"970548afa616217533ec87c63c32e05c345dc35cee5ad4377f33ed7adca027a2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-01-21T02:15:53Z","title_canon_sha256":"0a7e8922e37550c0a070c797757a332b20c6361fed40e25532567ce038fc9e3c"},"schema_version":"1.0","source":{"id":"1903.11551","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.11551","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"arxiv_version","alias_value":"1903.11551v1","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.11551","created_at":"2026-05-17T23:50:02Z"},{"alias_kind":"pith_short_12","alias_value":"2SGYZ3R2NE4F","created_at":"2026-05-18T12:33:07Z"},{"alias_kind":"pith_short_16","alias_value":"2SGYZ3R2NE4FG6ZC","created_at":"2026-05-18T12:33:07Z"},{"alias_kind":"pith_short_8","alias_value":"2SGYZ3R2","created_at":"2026-05-18T12:33:07Z"}],"graph_snapshots":[{"event_id":"sha256:9a23f378aab77a623fe67dd90cf23fb1caed385114eaaa1bbd6556ce3ff6714d","target":"graph","created_at":"2026-05-17T23:50:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this paper, we consider the problem of malware detection and classification based on image analysis. We convert executable files to images and apply image recognition using deep learning (DL) models. To train these models, we employ transfer learning based on existing DL models that have been pre-trained on massive image datasets. We carry out various experiments with this technique and compare its performance to that of an extremely simple machine learning technique, namely, k-nearest neighbors (\\kNN). For our k-NN experiments, we use features extracted directly from executables, rather th","authors_text":"Fabio Di Troia, Mark Stamp, Niket Bhodia, Pratikkumar Prajapati","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-01-21T02:15:53Z","title":"Transfer Learning for Image-Based Malware Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.11551","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a19241d66042b072418e4360097656712f7a0f5c916594774f54c43ac7913cc","target":"record","created_at":"2026-05-17T23:50:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"970548afa616217533ec87c63c32e05c345dc35cee5ad4377f33ed7adca027a2","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-01-21T02:15:53Z","title_canon_sha256":"0a7e8922e37550c0a070c797757a332b20c6361fed40e25532567ce038fc9e3c"},"schema_version":"1.0","source":{"id":"1903.11551","kind":"arxiv","version":1}},"canonical_sha256":"d48d8cee3a6938537b2289476bbf0cdfb5445509c55fb8b758a2b1946f771c1c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d48d8cee3a6938537b2289476bbf0cdfb5445509c55fb8b758a2b1946f771c1c","first_computed_at":"2026-05-17T23:50:02.981122Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:50:02.981122Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9KiQRJGtHOthgxDlbvrVRZNrdDhEyrFgmc3FV9m9mRMfsspYBY7gEoFvwPMji5lw5SqjWcnvVAyVxEYLyGvHBg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:50:02.981778Z","signed_message":"canonical_sha256_bytes"},"source_id":"1903.11551","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a19241d66042b072418e4360097656712f7a0f5c916594774f54c43ac7913cc","sha256:9a23f378aab77a623fe67dd90cf23fb1caed385114eaaa1bbd6556ce3ff6714d"],"state_sha256":"8d61c6d85d64979bec0115845eb95667e27d44abac3883961953ac426c82daf6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3c6y4YF+hJrHD4iOz7ZPct88ecLF0SgZTCQYNPoqf68veGVkyxpA8irwclEfJt3SkbEW+9LRGfv0KHTX5/X8AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T22:06:16.395808Z","bundle_sha256":"42bc53d620366adfa28b904cf7b718bed8677e34b38740a186ac8b02bf848eef"}}