{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:42BMKOMCKZQRNPUXTABSVU7ZFE","short_pith_number":"pith:42BMKOMC","canonical_record":{"source":{"id":"2206.12447","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-06-24T18:17:02Z","cross_cats_sorted":[],"title_canon_sha256":"42f2e221365277e3251d7ea8efd813313986f5391b255c819386d1534a601b2d","abstract_canon_sha256":"3d55409264330cc7a422d5c97bf3f0cc6a56aff44b7846ebb3d7d592a4ec645d"},"schema_version":"1.0"},"canonical_sha256":"e682c53982566116be9798032ad3f9290cbbd036997293fb4cb77fff67f56c10","source":{"kind":"arxiv","id":"2206.12447","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.12447","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"arxiv_version","alias_value":"2206.12447v3","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.12447","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_12","alias_value":"42BMKOMCKZQR","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_16","alias_value":"42BMKOMCKZQRNPUX","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_8","alias_value":"42BMKOMC","created_at":"2026-07-05T07:49:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:42BMKOMCKZQRNPUXTABSVU7ZFE","target":"record","payload":{"canonical_record":{"source":{"id":"2206.12447","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-06-24T18:17:02Z","cross_cats_sorted":[],"title_canon_sha256":"42f2e221365277e3251d7ea8efd813313986f5391b255c819386d1534a601b2d","abstract_canon_sha256":"3d55409264330cc7a422d5c97bf3f0cc6a56aff44b7846ebb3d7d592a4ec645d"},"schema_version":"1.0"},"canonical_sha256":"e682c53982566116be9798032ad3f9290cbbd036997293fb4cb77fff67f56c10","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:49:58.664011Z","signature_b64":"wuwjtSFhQIpq9luHy5LXFt1WKju9hngjwRYSV4QNw6Jj5oSRYd6cDwg16F7ywI3B2yBIbGL6xc+3y0tE+tzgBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e682c53982566116be9798032ad3f9290cbbd036997293fb4cb77fff67f56c10","last_reissued_at":"2026-07-05T07:49:58.663505Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:49:58.663505Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2206.12447","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"81gwIchQvu526fXaQS02Rr1Lyf2WlpPaPGBd7+gmFWznE8m0nJAXZDbMPN8lgJg4LnMEIPt6R6RM//+GMqYCBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:51:27.583355Z"},"content_sha256":"5867ff55e3cb0e4be7d4fe7ab33dc79123ffbfaba000cde782b33b487e0f89b6","schema_version":"1.0","event_id":"sha256:5867ff55e3cb0e4be7d4fe7ab33dc79123ffbfaba000cde782b33b487e0f89b6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:42BMKOMCKZQRNPUXTABSVU7ZFE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"XMD: An Expansive Hardware-telemetry based Mobile Malware Detector to enhance Endpoint Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Biswadeep Chakraborty, Harshit Kumar, Saibal Mukhopadhyay, Sudarshan Sharma","submitted_at":"2022-06-24T18:17:02Z","abstract_excerpt":"Hardware-based Malware Detectors (HMDs) have shown promise in detecting malicious workloads. However, the current HMDs focus solely on the CPU core of a System-on-Chip (SoC) and, therefore, do not exploit the full potential of the hardware telemetry. In this paper, we propose XMD, an HMD that uses an expansive set of telemetry channels extracted from the different subsystems of SoC. XMD exploits the thread-level profiling power of the CPU-core telemetry, and the global profiling power of non-core telemetry channels, to achieve significantly better detection performance than currently used Hard"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.12447","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.12447/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:49:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UNhW19jYnZzGhff7i7uDJqdLkiMK8oPoRpM6BtXM3XX7Hb1xFMF0zz0ePehS0WXiv7EnKSaSgPwfVXawOescBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:51:27.584069Z"},"content_sha256":"6d3d95b25649107cae4518e870c9c2a391df2216022c638f554dd5c854f744ab","schema_version":"1.0","event_id":"sha256:6d3d95b25649107cae4518e870c9c2a391df2216022c638f554dd5c854f744ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/bundle.json","state_url":"https://pith.science/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T03:51:27Z","links":{"resolver":"https://pith.science/pith/42BMKOMCKZQRNPUXTABSVU7ZFE","bundle":"https://pith.science/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/bundle.json","state":"https://pith.science/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/42BMKOMCKZQRNPUXTABSVU7ZFE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:42BMKOMCKZQRNPUXTABSVU7ZFE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3d55409264330cc7a422d5c97bf3f0cc6a56aff44b7846ebb3d7d592a4ec645d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-06-24T18:17:02Z","title_canon_sha256":"42f2e221365277e3251d7ea8efd813313986f5391b255c819386d1534a601b2d"},"schema_version":"1.0","source":{"id":"2206.12447","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2206.12447","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"arxiv_version","alias_value":"2206.12447v3","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.12447","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_12","alias_value":"42BMKOMCKZQR","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_16","alias_value":"42BMKOMCKZQRNPUX","created_at":"2026-07-05T07:49:58Z"},{"alias_kind":"pith_short_8","alias_value":"42BMKOMC","created_at":"2026-07-05T07:49:58Z"}],"graph_snapshots":[{"event_id":"sha256:6d3d95b25649107cae4518e870c9c2a391df2216022c638f554dd5c854f744ab","target":"graph","created_at":"2026-07-05T07:49:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2206.12447/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Hardware-based Malware Detectors (HMDs) have shown promise in detecting malicious workloads. However, the current HMDs focus solely on the CPU core of a System-on-Chip (SoC) and, therefore, do not exploit the full potential of the hardware telemetry. In this paper, we propose XMD, an HMD that uses an expansive set of telemetry channels extracted from the different subsystems of SoC. XMD exploits the thread-level profiling power of the CPU-core telemetry, and the global profiling power of non-core telemetry channels, to achieve significantly better detection performance than currently used Hard","authors_text":"Biswadeep Chakraborty, Harshit Kumar, Saibal Mukhopadhyay, Sudarshan Sharma","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-06-24T18:17:02Z","title":"XMD: An Expansive Hardware-telemetry based Mobile Malware Detector to enhance Endpoint Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.12447","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5867ff55e3cb0e4be7d4fe7ab33dc79123ffbfaba000cde782b33b487e0f89b6","target":"record","created_at":"2026-07-05T07:49:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3d55409264330cc7a422d5c97bf3f0cc6a56aff44b7846ebb3d7d592a4ec645d","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-06-24T18:17:02Z","title_canon_sha256":"42f2e221365277e3251d7ea8efd813313986f5391b255c819386d1534a601b2d"},"schema_version":"1.0","source":{"id":"2206.12447","kind":"arxiv","version":3}},"canonical_sha256":"e682c53982566116be9798032ad3f9290cbbd036997293fb4cb77fff67f56c10","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e682c53982566116be9798032ad3f9290cbbd036997293fb4cb77fff67f56c10","first_computed_at":"2026-07-05T07:49:58.663505Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:49:58.663505Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wuwjtSFhQIpq9luHy5LXFt1WKju9hngjwRYSV4QNw6Jj5oSRYd6cDwg16F7ywI3B2yBIbGL6xc+3y0tE+tzgBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:49:58.664011Z","signed_message":"canonical_sha256_bytes"},"source_id":"2206.12447","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5867ff55e3cb0e4be7d4fe7ab33dc79123ffbfaba000cde782b33b487e0f89b6","sha256:6d3d95b25649107cae4518e870c9c2a391df2216022c638f554dd5c854f744ab"],"state_sha256":"0998b9040cf93b0be6c4ef7fec880ecc8b4e08a0ead3b357f0b32ed11dc1aa67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2bDT/oFHB/rPGy5QEWDAR0wxkzFKeLzYYm6lB9uz1GbpEyCv2xARQ3lQRz+6beGeE2NVUss2MCctM5kR1Q21CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T03:51:27.589566Z","bundle_sha256":"560709eee278b8f6b0a2bb542502bfca4df855b4253846657f21d873a7e3863d"}}