{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:5UGPJPLGYQ2MV4S6SBGIBEWMOD","short_pith_number":"pith:5UGPJPLG","canonical_record":{"source":{"id":"1706.00947","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-03T13:07:53Z","cross_cats_sorted":["cs.LG","cs.SE"],"title_canon_sha256":"9088653a5cb743c3e642d652ab80fe160a2d63420aaeb99fe3c607ca80335a14","abstract_canon_sha256":"c866dbb839d2d5dda89f82099828cc98b4955e625be2a107ec75a4132e4e8418"},"schema_version":"1.0"},"canonical_sha256":"ed0cf4bd66c434caf25e904c8092cc70cd478732908ed9c1d2d9aad6966ffe21","source":{"kind":"arxiv","id":"1706.00947","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.00947","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"arxiv_version","alias_value":"1706.00947v2","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.00947","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"pith_short_12","alias_value":"5UGPJPLGYQ2M","created_at":"2026-05-18T12:31:00Z"},{"alias_kind":"pith_short_16","alias_value":"5UGPJPLGYQ2MV4S6","created_at":"2026-05-18T12:31:00Z"},{"alias_kind":"pith_short_8","alias_value":"5UGPJPLG","created_at":"2026-05-18T12:31:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:5UGPJPLGYQ2MV4S6SBGIBEWMOD","target":"record","payload":{"canonical_record":{"source":{"id":"1706.00947","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-03T13:07:53Z","cross_cats_sorted":["cs.LG","cs.SE"],"title_canon_sha256":"9088653a5cb743c3e642d652ab80fe160a2d63420aaeb99fe3c607ca80335a14","abstract_canon_sha256":"c866dbb839d2d5dda89f82099828cc98b4955e625be2a107ec75a4132e4e8418"},"schema_version":"1.0"},"canonical_sha256":"ed0cf4bd66c434caf25e904c8092cc70cd478732908ed9c1d2d9aad6966ffe21","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:40:48.597998Z","signature_b64":"7AxXt36bFN5omMQ1+HH5GeoI5ZAZOCDB/HVtOAUMA2fu/6/w4EWzOxn/AwL/V5Wv1dEWxClYRjdvduFI4OiMAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed0cf4bd66c434caf25e904c8092cc70cd478732908ed9c1d2d9aad6966ffe21","last_reissued_at":"2026-05-18T00:40:48.597329Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:40:48.597329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1706.00947","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:40:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qqR0RehKRszBgNRVyU6Z6O+meA8qReuC41Qnn/425KXd9ybv/NOlNo4hIHnVtajqW3IXx0X8amjWq/uGf4OJCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T07:23:55.250499Z"},"content_sha256":"981eede255ca3e9e414ea1cc3b74f463d17e1a5d5d602094bb99a4b5bb2a9840","schema_version":"1.0","event_id":"sha256:981eede255ca3e9e414ea1cc3b74f463d17e1a5d5d602094bb99a4b5bb2a9840"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:5UGPJPLGYQ2MV4S6SBGIBEWMOD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Context-aware, Adaptive and Scalable Android Malware Detection through Online Learning (extended version)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","cs.SE"],"primary_cat":"cs.CR","authors_text":"Annamalai Narayanan, Lihui Chen, Mahinthan Chandramohan, Yang Liu","submitted_at":"2017-06-03T13:07:53Z","abstract_excerpt":"It is well-known that Android malware constantly evolves so as to evade detection. This causes the entire malware population to be non-stationary. Contrary to this fact, most of the prior works on Machine Learning based Android malware detection have assumed that the distribution of the observed malware characteristics (i.e., features) does not change over time. In this work, we address the problem of malware population drift and propose a novel online learning based framework to detect malware, named CASANDRA (Contextaware, Adaptive and Scalable ANDRoid mAlware detector). In order to perform "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.00947","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:40:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Uo7idYsgZb79gWh/ajoBrMh74Nw8M0/NrgKUfk0BFEk/Sy6lnZRWX6kANQ7Wi4JKPJcxo2V14ZNxRYUuXi5sDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T07:23:55.250889Z"},"content_sha256":"adf2ed2e13b7964219d4261ac16e701756bb7fce3b6a7b830d29c10b5287f23d","schema_version":"1.0","event_id":"sha256:adf2ed2e13b7964219d4261ac16e701756bb7fce3b6a7b830d29c10b5287f23d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/bundle.json","state_url":"https://pith.science/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-28T07:23:55Z","links":{"resolver":"https://pith.science/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD","bundle":"https://pith.science/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/bundle.json","state":"https://pith.science/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5UGPJPLGYQ2MV4S6SBGIBEWMOD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:5UGPJPLGYQ2MV4S6SBGIBEWMOD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c866dbb839d2d5dda89f82099828cc98b4955e625be2a107ec75a4132e4e8418","cross_cats_sorted":["cs.LG","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-03T13:07:53Z","title_canon_sha256":"9088653a5cb743c3e642d652ab80fe160a2d63420aaeb99fe3c607ca80335a14"},"schema_version":"1.0","source":{"id":"1706.00947","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.00947","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"arxiv_version","alias_value":"1706.00947v2","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.00947","created_at":"2026-05-18T00:40:48Z"},{"alias_kind":"pith_short_12","alias_value":"5UGPJPLGYQ2M","created_at":"2026-05-18T12:31:00Z"},{"alias_kind":"pith_short_16","alias_value":"5UGPJPLGYQ2MV4S6","created_at":"2026-05-18T12:31:00Z"},{"alias_kind":"pith_short_8","alias_value":"5UGPJPLG","created_at":"2026-05-18T12:31:00Z"}],"graph_snapshots":[{"event_id":"sha256:adf2ed2e13b7964219d4261ac16e701756bb7fce3b6a7b830d29c10b5287f23d","target":"graph","created_at":"2026-05-18T00:40:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"It is well-known that Android malware constantly evolves so as to evade detection. This causes the entire malware population to be non-stationary. Contrary to this fact, most of the prior works on Machine Learning based Android malware detection have assumed that the distribution of the observed malware characteristics (i.e., features) does not change over time. In this work, we address the problem of malware population drift and propose a novel online learning based framework to detect malware, named CASANDRA (Contextaware, Adaptive and Scalable ANDRoid mAlware detector). In order to perform ","authors_text":"Annamalai Narayanan, Lihui Chen, Mahinthan Chandramohan, Yang Liu","cross_cats":["cs.LG","cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-03T13:07:53Z","title":"Context-aware, Adaptive and Scalable Android Malware Detection through Online Learning (extended version)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.00947","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:981eede255ca3e9e414ea1cc3b74f463d17e1a5d5d602094bb99a4b5bb2a9840","target":"record","created_at":"2026-05-18T00:40:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c866dbb839d2d5dda89f82099828cc98b4955e625be2a107ec75a4132e4e8418","cross_cats_sorted":["cs.LG","cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-03T13:07:53Z","title_canon_sha256":"9088653a5cb743c3e642d652ab80fe160a2d63420aaeb99fe3c607ca80335a14"},"schema_version":"1.0","source":{"id":"1706.00947","kind":"arxiv","version":2}},"canonical_sha256":"ed0cf4bd66c434caf25e904c8092cc70cd478732908ed9c1d2d9aad6966ffe21","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed0cf4bd66c434caf25e904c8092cc70cd478732908ed9c1d2d9aad6966ffe21","first_computed_at":"2026-05-18T00:40:48.597329Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:40:48.597329Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7AxXt36bFN5omMQ1+HH5GeoI5ZAZOCDB/HVtOAUMA2fu/6/w4EWzOxn/AwL/V5Wv1dEWxClYRjdvduFI4OiMAg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:40:48.597998Z","signed_message":"canonical_sha256_bytes"},"source_id":"1706.00947","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:981eede255ca3e9e414ea1cc3b74f463d17e1a5d5d602094bb99a4b5bb2a9840","sha256:adf2ed2e13b7964219d4261ac16e701756bb7fce3b6a7b830d29c10b5287f23d"],"state_sha256":"bea2690d450138c5b8508df4ef7db58eb2f123e7e1051da2b5d95aeb6a5961fc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B9mBmX8Sn4ZhTlttmgNeHgYJBOT0RjA7Z9qGR3ytgyCKWC3948Crjc4JrgamvTng+Y3XZndUhWPba8gO4AV3AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-28T07:23:55.253089Z","bundle_sha256":"942b3f633e3a2fe7f9e9d628377b1348db69c7e1b3b333db06263dd715aa6b00"}}