{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:7CCKYN5CN33233ZYGN6NYU4J55","short_pith_number":"pith:7CCKYN5C","canonical_record":{"source":{"id":"1810.07321","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T12:28:55Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"78d3d0c2cf75137a744f7bdb9896a0c0d083e9540cf72c23ff948c2114d15cc0","abstract_canon_sha256":"af40be51dccf7e9d11b4e981f4e2bf9c52aa97c660e9942cab1a145c1e8e476b"},"schema_version":"1.0"},"canonical_sha256":"f884ac37a26ef7adef38337cdc5389ef51bc0b7c3be8baa9028d86151f01c363","source":{"kind":"arxiv","id":"1810.07321","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.07321","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"arxiv_version","alias_value":"1810.07321v1","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.07321","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"pith_short_12","alias_value":"7CCKYN5CN332","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7CCKYN5CN33233ZY","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7CCKYN5C","created_at":"2026-05-18T12:32:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:7CCKYN5CN33233ZYGN6NYU4J55","target":"record","payload":{"canonical_record":{"source":{"id":"1810.07321","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T12:28:55Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"78d3d0c2cf75137a744f7bdb9896a0c0d083e9540cf72c23ff948c2114d15cc0","abstract_canon_sha256":"af40be51dccf7e9d11b4e981f4e2bf9c52aa97c660e9942cab1a145c1e8e476b"},"schema_version":"1.0"},"canonical_sha256":"f884ac37a26ef7adef38337cdc5389ef51bc0b7c3be8baa9028d86151f01c363","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:02:58.831252Z","signature_b64":"SFEprEBkRgmUJkBru9rk0vC5Ds7e+UuMBz3t3WM70G8Wc4mSpRhI4t3KbO3MAi3dr+4ft/FzLMWl5qlgg11bBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f884ac37a26ef7adef38337cdc5389ef51bc0b7c3be8baa9028d86151f01c363","last_reissued_at":"2026-05-18T00:02:58.830785Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:02:58.830785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1810.07321","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yS3SRwcJpBZqxUz+7zroBxwhBicM/1fuG4lfGjGDWyX6g9QIMh1paG83fVEB09je1AjZfRCxCjta0j2/R4pXCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T16:08:49.600210Z"},"content_sha256":"8172f6c236f293138b6c202375cd03dfbf57341ff7e06ef7af1c0497073c4ff7","schema_version":"1.0","event_id":"sha256:8172f6c236f293138b6c202375cd03dfbf57341ff7e06ef7af1c0497073c4ff7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:7CCKYN5CN33233ZYGN6NYU4J55","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Malware triage for early identification of Advanced Persistent Threat activities","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Giuseppe Laurenza, Luca Mazzotti, Riccardo Lazzeretti","submitted_at":"2018-10-16T12:28:55Z","abstract_excerpt":"In the last decade, a new class of cyber-threats has emerged. This new cybersecurity adversary is known with the name of \"Advanced Persistent Threat\" (APT) and is referred to different organizations that in the last years have been \"in the center of the eye\" due to multiple dangerous and effective attacks targeting financial and politic, news headlines, embassies, critical infrastructures, TV programs, etc. In order to early identify APT related malware, a semi-automatic approach for malware samples analysis is needed. In our previous work we introduced a \"malware triage\" step for a semi-autom"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.07321","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mxe3nxamElHsggku6TAoKGpqf28PtDw+BjsA/wWyZ4czDszKToLTNwQYvUZoJ8fzlPxHq4GEIIYTVAy0QuQcBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T16:08:49.600909Z"},"content_sha256":"d8c78069a9676b3d3f68685f2b0c9d8f9c9993d70854084417e9df3ba72777c7","schema_version":"1.0","event_id":"sha256:d8c78069a9676b3d3f68685f2b0c9d8f9c9993d70854084417e9df3ba72777c7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7CCKYN5CN33233ZYGN6NYU4J55/bundle.json","state_url":"https://pith.science/pith/7CCKYN5CN33233ZYGN6NYU4J55/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7CCKYN5CN33233ZYGN6NYU4J55/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T16:08:49Z","links":{"resolver":"https://pith.science/pith/7CCKYN5CN33233ZYGN6NYU4J55","bundle":"https://pith.science/pith/7CCKYN5CN33233ZYGN6NYU4J55/bundle.json","state":"https://pith.science/pith/7CCKYN5CN33233ZYGN6NYU4J55/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7CCKYN5CN33233ZYGN6NYU4J55/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:7CCKYN5CN33233ZYGN6NYU4J55","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"af40be51dccf7e9d11b4e981f4e2bf9c52aa97c660e9942cab1a145c1e8e476b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T12:28:55Z","title_canon_sha256":"78d3d0c2cf75137a744f7bdb9896a0c0d083e9540cf72c23ff948c2114d15cc0"},"schema_version":"1.0","source":{"id":"1810.07321","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.07321","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"arxiv_version","alias_value":"1810.07321v1","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.07321","created_at":"2026-05-18T00:02:58Z"},{"alias_kind":"pith_short_12","alias_value":"7CCKYN5CN332","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7CCKYN5CN33233ZY","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7CCKYN5C","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:d8c78069a9676b3d3f68685f2b0c9d8f9c9993d70854084417e9df3ba72777c7","target":"graph","created_at":"2026-05-18T00:02:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In the last decade, a new class of cyber-threats has emerged. This new cybersecurity adversary is known with the name of \"Advanced Persistent Threat\" (APT) and is referred to different organizations that in the last years have been \"in the center of the eye\" due to multiple dangerous and effective attacks targeting financial and politic, news headlines, embassies, critical infrastructures, TV programs, etc. In order to early identify APT related malware, a semi-automatic approach for malware samples analysis is needed. In our previous work we introduced a \"malware triage\" step for a semi-autom","authors_text":"Giuseppe Laurenza, Luca Mazzotti, Riccardo Lazzeretti","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T12:28:55Z","title":"Malware triage for early identification of Advanced Persistent Threat activities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.07321","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8172f6c236f293138b6c202375cd03dfbf57341ff7e06ef7af1c0497073c4ff7","target":"record","created_at":"2026-05-18T00:02:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"af40be51dccf7e9d11b4e981f4e2bf9c52aa97c660e9942cab1a145c1e8e476b","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-16T12:28:55Z","title_canon_sha256":"78d3d0c2cf75137a744f7bdb9896a0c0d083e9540cf72c23ff948c2114d15cc0"},"schema_version":"1.0","source":{"id":"1810.07321","kind":"arxiv","version":1}},"canonical_sha256":"f884ac37a26ef7adef38337cdc5389ef51bc0b7c3be8baa9028d86151f01c363","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f884ac37a26ef7adef38337cdc5389ef51bc0b7c3be8baa9028d86151f01c363","first_computed_at":"2026-05-18T00:02:58.830785Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:02:58.830785Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SFEprEBkRgmUJkBru9rk0vC5Ds7e+UuMBz3t3WM70G8Wc4mSpRhI4t3KbO3MAi3dr+4ft/FzLMWl5qlgg11bBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:02:58.831252Z","signed_message":"canonical_sha256_bytes"},"source_id":"1810.07321","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8172f6c236f293138b6c202375cd03dfbf57341ff7e06ef7af1c0497073c4ff7","sha256:d8c78069a9676b3d3f68685f2b0c9d8f9c9993d70854084417e9df3ba72777c7"],"state_sha256":"5bfb9129ad027f92a44f2a8a41862d16f03fda7b48b37be78d530a2441b8285e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6WoAbJ0DKMFMZZCcPsd2eCNfw1ElQXxcfYir+0meQvNppFYVqRvPqo9J36pauI/7Efx+tiR5WGQvygoOi0beDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T16:08:49.604562Z","bundle_sha256":"9c07e901e24b64cccc1d2348d443fba707ab72256830c9dfb00fe6a547029e65"}}