{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:4L2DHC7QRRRNF5WQWBYPFUKC2B","short_pith_number":"pith:4L2DHC7Q","canonical_record":{"source":{"id":"2003.03100","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-06T09:33:39Z","cross_cats_sorted":[],"title_canon_sha256":"cd8d33ebc349f97f782034efdfec72415649ef4b9e988da144f85b12f26b0c8d","abstract_canon_sha256":"5efc571da5fb799dff6509bb8a1621a5d8b27be99615f94d403ec0fc2654a71e"},"schema_version":"1.0"},"canonical_sha256":"e2f4338bf08c62d2f6d0b070f2d142d078fa23edf70d3464447762cbb9ee665a","source":{"kind":"arxiv","id":"2003.03100","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.03100","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"arxiv_version","alias_value":"2003.03100v3","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.03100","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_12","alias_value":"4L2DHC7QRRRN","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_16","alias_value":"4L2DHC7QRRRNF5WQ","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_8","alias_value":"4L2DHC7Q","created_at":"2026-07-05T02:36:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:4L2DHC7QRRRNF5WQWBYPFUKC2B","target":"record","payload":{"canonical_record":{"source":{"id":"2003.03100","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-06T09:33:39Z","cross_cats_sorted":[],"title_canon_sha256":"cd8d33ebc349f97f782034efdfec72415649ef4b9e988da144f85b12f26b0c8d","abstract_canon_sha256":"5efc571da5fb799dff6509bb8a1621a5d8b27be99615f94d403ec0fc2654a71e"},"schema_version":"1.0"},"canonical_sha256":"e2f4338bf08c62d2f6d0b070f2d142d078fa23edf70d3464447762cbb9ee665a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:36:19.293429Z","signature_b64":"efK8DyOOD4Xv13Oneu4CAaFOSqRqraiRlKdrnEIu1eojl1mc5aRxyoChmiBoAwW8xJZEm7frHmCnGgr3Kww5BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e2f4338bf08c62d2f6d0b070f2d142d078fa23edf70d3464447762cbb9ee665a","last_reissued_at":"2026-07-05T02:36:19.292929Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:36:19.292929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.03100","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z4oqJRxiJwur8Oqmo9b32TwgyLTkhh33H8s9XNY2eI8CbrAGcsy4MH7wVFEekR1u0OedmbCGQOY/LdJL3cKnBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:09:07.603084Z"},"content_sha256":"f4f6d944e33291d1c6614a518684b9633084308b8aa5764291843dae21cd7074","schema_version":"1.0","event_id":"sha256:f4f6d944e33291d1c6614a518684b9633084308b8aa5764291843dae21cd7074"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:4L2DHC7QRRRNF5WQWBYPFUKC2B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MAB-Malware: A Reinforcement Learning Framework for Attacking Static Malware Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Deepali Garg, Dmitry Kuznetsov, Heng Yin, Sadia Afroz, Wei Song, Xuezixiang Li","submitted_at":"2020-03-06T09:33:39Z","abstract_excerpt":"Modern commercial antivirus systems increasingly rely on machine learning to keep up with the rampant inflation of new malware. However, it is well-known that machine learning models are vulnerable to adversarial examples (AEs). Previous works have shown that ML malware classifiers are fragile to the white-box adversarial attacks. However, ML models used in commercial antivirus products are usually not available to attackers and only return hard classification labels. Therefore, it is more practical to evaluate the robustness of ML models and real-world AVs in a pure black-box manner. We propo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.03100","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.03100/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YmxtDf0i9t759lU6BSn3ZKlxrgKzzmwyL3o5ABtFbksPCo1YoHOXrgnhqYG9vDm40SOkYdm8Q0PKYWuMlXH2Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T17:09:07.603857Z"},"content_sha256":"4e634b8b35b34ce3428da5f388054e6a895f6e796feda231e84d5dddbe5076f5","schema_version":"1.0","event_id":"sha256:4e634b8b35b34ce3428da5f388054e6a895f6e796feda231e84d5dddbe5076f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/bundle.json","state_url":"https://pith.science/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T17:09:07Z","links":{"resolver":"https://pith.science/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B","bundle":"https://pith.science/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/bundle.json","state":"https://pith.science/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4L2DHC7QRRRNF5WQWBYPFUKC2B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:4L2DHC7QRRRNF5WQWBYPFUKC2B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5efc571da5fb799dff6509bb8a1621a5d8b27be99615f94d403ec0fc2654a71e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-06T09:33:39Z","title_canon_sha256":"cd8d33ebc349f97f782034efdfec72415649ef4b9e988da144f85b12f26b0c8d"},"schema_version":"1.0","source":{"id":"2003.03100","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.03100","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"arxiv_version","alias_value":"2003.03100v3","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.03100","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_12","alias_value":"4L2DHC7QRRRN","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_16","alias_value":"4L2DHC7QRRRNF5WQ","created_at":"2026-07-05T02:36:19Z"},{"alias_kind":"pith_short_8","alias_value":"4L2DHC7Q","created_at":"2026-07-05T02:36:19Z"}],"graph_snapshots":[{"event_id":"sha256:4e634b8b35b34ce3428da5f388054e6a895f6e796feda231e84d5dddbe5076f5","target":"graph","created_at":"2026-07-05T02:36:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.03100/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern commercial antivirus systems increasingly rely on machine learning to keep up with the rampant inflation of new malware. However, it is well-known that machine learning models are vulnerable to adversarial examples (AEs). Previous works have shown that ML malware classifiers are fragile to the white-box adversarial attacks. However, ML models used in commercial antivirus products are usually not available to attackers and only return hard classification labels. Therefore, it is more practical to evaluate the robustness of ML models and real-world AVs in a pure black-box manner. We propo","authors_text":"Deepali Garg, Dmitry Kuznetsov, Heng Yin, Sadia Afroz, Wei Song, Xuezixiang Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-06T09:33:39Z","title":"MAB-Malware: A Reinforcement Learning Framework for Attacking Static Malware Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.03100","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f4f6d944e33291d1c6614a518684b9633084308b8aa5764291843dae21cd7074","target":"record","created_at":"2026-07-05T02:36:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5efc571da5fb799dff6509bb8a1621a5d8b27be99615f94d403ec0fc2654a71e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-03-06T09:33:39Z","title_canon_sha256":"cd8d33ebc349f97f782034efdfec72415649ef4b9e988da144f85b12f26b0c8d"},"schema_version":"1.0","source":{"id":"2003.03100","kind":"arxiv","version":3}},"canonical_sha256":"e2f4338bf08c62d2f6d0b070f2d142d078fa23edf70d3464447762cbb9ee665a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e2f4338bf08c62d2f6d0b070f2d142d078fa23edf70d3464447762cbb9ee665a","first_computed_at":"2026-07-05T02:36:19.292929Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:36:19.292929Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"efK8DyOOD4Xv13Oneu4CAaFOSqRqraiRlKdrnEIu1eojl1mc5aRxyoChmiBoAwW8xJZEm7frHmCnGgr3Kww5BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:36:19.293429Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.03100","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f4f6d944e33291d1c6614a518684b9633084308b8aa5764291843dae21cd7074","sha256:4e634b8b35b34ce3428da5f388054e6a895f6e796feda231e84d5dddbe5076f5"],"state_sha256":"424984d5b5be493f88f848e44fa4c0ec4ebdb74fadd323c041c38c8d9a4ebcb1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"caJY6GxtCzizUGVTGGTDBnEfs0x/Ladgr0SKbNMn7n5qe0KwPKoWNJSaxy0uMUHehLzn3G9YT4n+20kvWMOmDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T17:09:07.609138Z","bundle_sha256":"2335bcea8da61822b6b84ded62d39d5e6ced81382f2e2c74cd8d9d0b45149400"}}