{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:4PCOHZJUGSZFGFKFMHLVEOACJH","short_pith_number":"pith:4PCOHZJU","canonical_record":{"source":{"id":"2104.12848","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-04-26T19:53:30Z","cross_cats_sorted":[],"title_canon_sha256":"05855f468fcd06bd8c30a4d0b89730a352b4c5fa3c738a3e3df24d17e089ac10","abstract_canon_sha256":"01de27580510af1a49605fc4600d6c27c1361f17c9bd3bdbf3e720742274e041"},"schema_version":"1.0"},"canonical_sha256":"e3c4e3e53434b253154561d752380249df2d390ba6e3d69d832c03649aae423c","source":{"kind":"arxiv","id":"2104.12848","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.12848","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"arxiv_version","alias_value":"2104.12848v3","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.12848","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_12","alias_value":"4PCOHZJUGSZF","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_16","alias_value":"4PCOHZJUGSZFGFKF","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_8","alias_value":"4PCOHZJU","created_at":"2026-07-05T09:48:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:4PCOHZJUGSZFGFKFMHLVEOACJH","target":"record","payload":{"canonical_record":{"source":{"id":"2104.12848","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-04-26T19:53:30Z","cross_cats_sorted":[],"title_canon_sha256":"05855f468fcd06bd8c30a4d0b89730a352b4c5fa3c738a3e3df24d17e089ac10","abstract_canon_sha256":"01de27580510af1a49605fc4600d6c27c1361f17c9bd3bdbf3e720742274e041"},"schema_version":"1.0"},"canonical_sha256":"e3c4e3e53434b253154561d752380249df2d390ba6e3d69d832c03649aae423c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:48:27.882469Z","signature_b64":"IHgQhU93Cz4xtnv6TRKIm3kWfH6ArDj5FuTMv9rpjTT1Nba6I0zhJ8hBcSJUBTv8vjBOYmA+9sOiPAJJILyaCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e3c4e3e53434b253154561d752380249df2d390ba6e3d69d832c03649aae423c","last_reissued_at":"2026-07-05T09:48:27.881977Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:48:27.881977Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.12848","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PqG36ulNz4M7SzMy/Pllryzj8dKnBp36SA6e/3ptD4zMqXUssJxM7jrSlyGB3R76i1AEw/9JjhDh19bcyu3VDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:03:08.183323Z"},"content_sha256":"0e43b99011d7a48c685437a505224fe07244923407385e92ab4d6670798b0434","schema_version":"1.0","event_id":"sha256:0e43b99011d7a48c685437a505224fe07244923407385e92ab4d6670798b0434"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:4PCOHZJUGSZFGFKFMHLVEOACJH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"secml-malware: Pentesting Windows Malware Classifiers with Adversarial EXEmples in Python","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Battista Biggio, Luca Demetrio","submitted_at":"2021-04-26T19:53:30Z","abstract_excerpt":"Machine learning has been increasingly used as a first line of defense for Windows malware detection. Recent work has however shown that learning-based malware detectors can be evaded by carefully-perturbed input malware samples, referred to as adversarial EXEmples, thus demanding for tools that can ease and automate the adversarial robustness evaluation of such detectors. To this end, we present secml-malware, the first Python library for computing adversarial attacks on Windows malware detectors. secml-malware implements state-of-the-art white-box and black-box attacks on Windows malware cla"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.12848","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.12848/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:48:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pOwxT4qvk1Yg+9ulLLNS3Bepk8dtJvRWdGVMYu8v/hMEUb2inaQhNfCrzZ+CdRaBWAcSTiaQMpT6xvq3Fs3ECA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T17:03:08.183812Z"},"content_sha256":"904943131ad1b23c6b4bdf230f7a84375163e8704e85b0eed712a4cce913fcb2","schema_version":"1.0","event_id":"sha256:904943131ad1b23c6b4bdf230f7a84375163e8704e85b0eed712a4cce913fcb2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/bundle.json","state_url":"https://pith.science/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T17:03:08Z","links":{"resolver":"https://pith.science/pith/4PCOHZJUGSZFGFKFMHLVEOACJH","bundle":"https://pith.science/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/bundle.json","state":"https://pith.science/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4PCOHZJUGSZFGFKFMHLVEOACJH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:4PCOHZJUGSZFGFKFMHLVEOACJH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"01de27580510af1a49605fc4600d6c27c1361f17c9bd3bdbf3e720742274e041","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-04-26T19:53:30Z","title_canon_sha256":"05855f468fcd06bd8c30a4d0b89730a352b4c5fa3c738a3e3df24d17e089ac10"},"schema_version":"1.0","source":{"id":"2104.12848","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.12848","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"arxiv_version","alias_value":"2104.12848v3","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.12848","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_12","alias_value":"4PCOHZJUGSZF","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_16","alias_value":"4PCOHZJUGSZFGFKF","created_at":"2026-07-05T09:48:27Z"},{"alias_kind":"pith_short_8","alias_value":"4PCOHZJU","created_at":"2026-07-05T09:48:27Z"}],"graph_snapshots":[{"event_id":"sha256:904943131ad1b23c6b4bdf230f7a84375163e8704e85b0eed712a4cce913fcb2","target":"graph","created_at":"2026-07-05T09:48:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.12848/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning has been increasingly used as a first line of defense for Windows malware detection. Recent work has however shown that learning-based malware detectors can be evaded by carefully-perturbed input malware samples, referred to as adversarial EXEmples, thus demanding for tools that can ease and automate the adversarial robustness evaluation of such detectors. To this end, we present secml-malware, the first Python library for computing adversarial attacks on Windows malware detectors. secml-malware implements state-of-the-art white-box and black-box attacks on Windows malware cla","authors_text":"Battista Biggio, Luca Demetrio","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-04-26T19:53:30Z","title":"secml-malware: Pentesting Windows Malware Classifiers with Adversarial EXEmples in Python"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.12848","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0e43b99011d7a48c685437a505224fe07244923407385e92ab4d6670798b0434","target":"record","created_at":"2026-07-05T09:48:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"01de27580510af1a49605fc4600d6c27c1361f17c9bd3bdbf3e720742274e041","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-04-26T19:53:30Z","title_canon_sha256":"05855f468fcd06bd8c30a4d0b89730a352b4c5fa3c738a3e3df24d17e089ac10"},"schema_version":"1.0","source":{"id":"2104.12848","kind":"arxiv","version":3}},"canonical_sha256":"e3c4e3e53434b253154561d752380249df2d390ba6e3d69d832c03649aae423c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e3c4e3e53434b253154561d752380249df2d390ba6e3d69d832c03649aae423c","first_computed_at":"2026-07-05T09:48:27.881977Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:48:27.881977Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IHgQhU93Cz4xtnv6TRKIm3kWfH6ArDj5FuTMv9rpjTT1Nba6I0zhJ8hBcSJUBTv8vjBOYmA+9sOiPAJJILyaCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:48:27.882469Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.12848","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0e43b99011d7a48c685437a505224fe07244923407385e92ab4d6670798b0434","sha256:904943131ad1b23c6b4bdf230f7a84375163e8704e85b0eed712a4cce913fcb2"],"state_sha256":"eb2861dff402e1aa768f0f00fff44bb615c01f26e69431abf73be54db46fdb9f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NFAgUfmwbbSsK31F49/BSnjmZu28ZQQE1bBEOFcsHDNzHKybxwFiaz3BOZwLxdO11Z6qEfIlYzyxFo9/O4+LBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T17:03:08.187485Z","bundle_sha256":"eeda20024b9d739763ef63dedbbdb3d332822008f98249390fca88e4a44cda30"}}