{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:76WRNZKZGI4KTARS7BBPAJPLE2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d2d7ee0a1197a32dec3c06e1dc25eb2b34d55d824557efd481812661cb9e88d9","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-12-10T20:08:47Z","title_canon_sha256":"08f4206b1ef71fa2056446084369d8b447c1542088ec533778408e6d5bd77c69"},"schema_version":"1.0","source":{"id":"1812.04064","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.04064","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"arxiv_version","alias_value":"1812.04064v2","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.04064","created_at":"2026-05-17T23:46:41Z"},{"alias_kind":"pith_short_12","alias_value":"76WRNZKZGI4K","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"76WRNZKZGI4KTARS","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"76WRNZKZ","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:ed9c292b034e8099eb72da366e8c2c26d2f612c9219ae5aaa82ab2ec9cb53b9e","target":"graph","created_at":"2026-05-17T23:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Program or process is an integral part of almost every IT/OT system. Can we trust the identity/ID (e.g., executable name) of the program? To avoid detection, malware may disguise itself using the ID of a legitimate program, and a system tool (e.g., PowerShell) used by the attackers may have the fake ID of another common software, which is less sensitive. However, existing intrusion detection techniques often overlook this critical program reidentification problem (i.e., checking the program's identity). In this paper, we propose an attentional heterogeneous graph neural network model (DeepHGNN","authors_text":"Ding Li, Haifeng Chen, Jingchao Ni, Junghwan Rhee, Lu-An Tang, Philip S. Yu, Shen Wang, Zhengzhang Chen, Zhichun Li","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-12-10T20:08:47Z","title":"Attentional Heterogeneous Graph Neural Network: Application to Program Reidentification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.04064","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:00bc1816c4836b8b038f607bde71b0504f274723cc835f015b93f193cefa007f","target":"record","created_at":"2026-05-17T23:46:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d2d7ee0a1197a32dec3c06e1dc25eb2b34d55d824557efd481812661cb9e88d9","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-12-10T20:08:47Z","title_canon_sha256":"08f4206b1ef71fa2056446084369d8b447c1542088ec533778408e6d5bd77c69"},"schema_version":"1.0","source":{"id":"1812.04064","kind":"arxiv","version":2}},"canonical_sha256":"ffad16e5593238a98232f842f025eb26ba7d467e290989acc2bde93969b286d7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ffad16e5593238a98232f842f025eb26ba7d467e290989acc2bde93969b286d7","first_computed_at":"2026-05-17T23:46:41.262776Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:46:41.262776Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CQ5ANUqkKdeT+jpqpUeM3KJdC7LtwEHoJp5cLMEG7k+30RO9epH7zR9L4qjSg6jNTkugsKAwyFvBZlwP0R+bDQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:46:41.263276Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.04064","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:00bc1816c4836b8b038f607bde71b0504f274723cc835f015b93f193cefa007f","sha256:ed9c292b034e8099eb72da366e8c2c26d2f612c9219ae5aaa82ab2ec9cb53b9e"],"state_sha256":"e17eb86e3ed63ae1e5b6a356c63fddf2851262ca81d1959b01911371a1194413"}