{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:7T477GSHLBQ2Y6NJGADD2CA3BA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9f8d10c94e5f4ad4c4c338675c257dd5f45275ced31e85756c9ce94487894843","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-06T11:33:09Z","title_canon_sha256":"6fe128148a3cf87d8262e312ba1529a8a4a21391d99851fe6b54e123a77e4b6d"},"schema_version":"1.0","source":{"id":"1711.02088","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.02088","created_at":"2026-05-18T00:31:10Z"},{"alias_kind":"arxiv_version","alias_value":"1711.02088v1","created_at":"2026-05-18T00:31:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.02088","created_at":"2026-05-18T00:31:10Z"},{"alias_kind":"pith_short_12","alias_value":"7T477GSHLBQ2","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_16","alias_value":"7T477GSHLBQ2Y6NJ","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_8","alias_value":"7T477GSH","created_at":"2026-05-18T12:31:05Z"}],"graph_snapshots":[{"event_id":"sha256:9843303a62a2eb3009f479009f905acab2274378df11f51b0bbc59a9252d889e","target":"graph","created_at":"2026-05-18T00:31:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Using a previously introduced similarity function for the stream of system calls generated by a computer, we engineer a program-in-execution classifier using deep learning methods. Tested on malware classification, it significantly outperforms current state of the art. We provide a series of performance measures and tests to demonstrate the capabilities, including measurements from production use. We show how the system scales linearly with the number of endpoints. With the system we estimate the total number of malware families created over the last 10 years as 3450, in line with reasonable e","authors_text":"Curt Hastings, Ronnie Mainieri","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-06T11:33:09Z","title":"Computer activity learning from system call time series"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.02088","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:48c38300bfeec68157b5a8ec265c2dd7eae3443ed2a1e2d93c2e2c53b19c419b","target":"record","created_at":"2026-05-18T00:31:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9f8d10c94e5f4ad4c4c338675c257dd5f45275ced31e85756c9ce94487894843","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-06T11:33:09Z","title_canon_sha256":"6fe128148a3cf87d8262e312ba1529a8a4a21391d99851fe6b54e123a77e4b6d"},"schema_version":"1.0","source":{"id":"1711.02088","kind":"arxiv","version":1}},"canonical_sha256":"fcf9ff9a475861ac79a930063d081b0814fb862571ab447ab21312fdf9869b78","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fcf9ff9a475861ac79a930063d081b0814fb862571ab447ab21312fdf9869b78","first_computed_at":"2026-05-18T00:31:10.953006Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:31:10.953006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DlP9t8mxeE7GgDA8f63XMMAwkEcrbGZU7l//KKcDdz3WBdXau918NX5ImM5xu3Vh6Rjtw3KXPnXhUGFyI+wgDA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:31:10.953665Z","signed_message":"canonical_sha256_bytes"},"source_id":"1711.02088","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:48c38300bfeec68157b5a8ec265c2dd7eae3443ed2a1e2d93c2e2c53b19c419b","sha256:9843303a62a2eb3009f479009f905acab2274378df11f51b0bbc59a9252d889e"],"state_sha256":"0e881162e82601bfc424fc776ea6fa2bd22f8c0fa2421984d954ca51935d4f61"}