{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:4WRLHUKNA6FKOGA6BFNIGCVUNJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db5b391e2b302cd1ce2d9edbc7a75a760124875f7c3f922a94a6d65fd0635d2e","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-17T01:05:50Z","title_canon_sha256":"19df668ea003012ca109e2d69bb6540183e396e39c92130317777ca4a1c43401"},"schema_version":"1.0","source":{"id":"2012.09344","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.09344","created_at":"2026-07-05T02:24:53Z"},{"alias_kind":"arxiv_version","alias_value":"2012.09344v2","created_at":"2026-07-05T02:24:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.09344","created_at":"2026-07-05T02:24:53Z"},{"alias_kind":"pith_short_12","alias_value":"4WRLHUKNA6FK","created_at":"2026-07-05T02:24:53Z"},{"alias_kind":"pith_short_16","alias_value":"4WRLHUKNA6FKOGA6","created_at":"2026-07-05T02:24:53Z"},{"alias_kind":"pith_short_8","alias_value":"4WRLHUKN","created_at":"2026-07-05T02:24:53Z"}],"graph_snapshots":[{"event_id":"sha256:aaa3862cdd8ef15085111ea640f7b35c33829fafd4988459ff24286a8c2a68af","target":"graph","created_at":"2026-07-05T02:24:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.09344/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Context: Research at the intersection of cybersecurity, Machine Learning (ML), and Software Engineering (SE) has recently taken significant steps in proposing countermeasures for detecting sophisticated data exfiltration attacks. It is important to systematically review and synthesize the ML-based data exfiltration countermeasures for building a body of knowledge on this important topic. Objective: This paper aims at systematically reviewing ML-based data exfiltration countermeasures to identify and classify ML approaches, feature engineering techniques, evaluation datasets, and performance me","authors_text":"Bushra Sabir, Faheem Ullah, M. Ali Babar, Raj Gaire","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-17T01:05:50Z","title":"Machine Learning for Detecting Data Exfiltration: A Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.09344","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3cbb4041cd229486de8742f7461d7cef64883856179a9fb31e902c2aeb0d60d6","target":"record","created_at":"2026-07-05T02:24:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db5b391e2b302cd1ce2d9edbc7a75a760124875f7c3f922a94a6d65fd0635d2e","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2020-12-17T01:05:50Z","title_canon_sha256":"19df668ea003012ca109e2d69bb6540183e396e39c92130317777ca4a1c43401"},"schema_version":"1.0","source":{"id":"2012.09344","kind":"arxiv","version":2}},"canonical_sha256":"e5a2b3d14d078aa7181e095a830ab46a4efb78ed7d0230b03697c6437ccd0b5d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e5a2b3d14d078aa7181e095a830ab46a4efb78ed7d0230b03697c6437ccd0b5d","first_computed_at":"2026-07-05T02:24:53.063923Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:24:53.063923Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wJh6hB1CHEr3558ivJPTdjj1WwdBzvkmWsZZgkUtx7jzgu0t+eNC3ZwqZiojA77Y4aETrKXdHY6Wgm7ZYqo7Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:24:53.064299Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.09344","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3cbb4041cd229486de8742f7461d7cef64883856179a9fb31e902c2aeb0d60d6","sha256:aaa3862cdd8ef15085111ea640f7b35c33829fafd4988459ff24286a8c2a68af"],"state_sha256":"dc7b25155bf064129f2ea0cca8dcad72a61166ca9259654c40fa608623cd901b"}