{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:7YSYLYULFJDKEXB4FJRTXQGUNC","short_pith_number":"pith:7YSYLYUL","canonical_record":{"source":{"id":"1705.08131","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-05-23T08:51:37Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"bdcef4af7eadddfa44bf1cb930a5e95e9349e03dcf804730036eea4c330c8869","abstract_canon_sha256":"aedc508fb0d11d1bf422ac5fd7866ae48076fa2d8a8bf500608fc2ef3fd9dac0"},"schema_version":"1.0"},"canonical_sha256":"fe2585e28b2a46a25c3c2a633bc0d468b26e29f27355e5fa6346068a75505fb7","source":{"kind":"arxiv","id":"1705.08131","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.08131","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"arxiv_version","alias_value":"1705.08131v1","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.08131","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"pith_short_12","alias_value":"7YSYLYULFJDK","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_16","alias_value":"7YSYLYULFJDKEXB4","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_8","alias_value":"7YSYLYUL","created_at":"2026-05-18T12:31:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:7YSYLYULFJDKEXB4FJRTXQGUNC","target":"record","payload":{"canonical_record":{"source":{"id":"1705.08131","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-05-23T08:51:37Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"bdcef4af7eadddfa44bf1cb930a5e95e9349e03dcf804730036eea4c330c8869","abstract_canon_sha256":"aedc508fb0d11d1bf422ac5fd7866ae48076fa2d8a8bf500608fc2ef3fd9dac0"},"schema_version":"1.0"},"canonical_sha256":"fe2585e28b2a46a25c3c2a633bc0d468b26e29f27355e5fa6346068a75505fb7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:43:49.270679Z","signature_b64":"kU+pnZCbdi52+Vpv4HD+Mgyw2zfhGzT2rYuDcVRny3NPo8zUXiBlFGFgK0jcJY9kASx0XX8aHhOzyHmt2jHGCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fe2585e28b2a46a25c3c2a633bc0d468b26e29f27355e5fa6346068a75505fb7","last_reissued_at":"2026-05-18T00:43:49.270135Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:43:49.270135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1705.08131","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:43:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5ain9Cl51n9bJQfp1bQSimI6cH1z/wuTVKEI4jGJbCQ2V6r2BhxIIAGXhdAa30Dgu8Pr9/ZIUu1MOMfKzMguBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:14:23.769938Z"},"content_sha256":"b7cb027a0448667a0e649005bc22388210e8bae31d48d78fb76ef25158740f48","schema_version":"1.0","event_id":"sha256:b7cb027a0448667a0e649005bc22388210e8bae31d48d78fb76ef25158740f48"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:7YSYLYULFJDKEXB4FJRTXQGUNC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Attacks against RNN based Malware Detection Algorithms","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Weiwei Hu, Ying Tan","submitted_at":"2017-05-23T08:51:37Z","abstract_excerpt":"Recent researches have shown that machine learning based malware detection algorithms are very vulnerable under the attacks of adversarial examples. These works mainly focused on the detection algorithms which use features with fixed dimension, while some researchers have begun to use recurrent neural networks (RNN) to detect malware based on sequential API features. This paper proposes a novel algorithm to generate sequential adversarial examples, which are used to attack a RNN based malware detection system. It is usually hard for malicious attackers to know the exact structures and weights "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.08131","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:43:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rX507yf7WZrk/FB1zl79OhcbFR6NDP2WHCtV6foUTPajaNjUsql1vZt6wGCTCaFAkIUIG26ImJFTxgPyS4JMBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:14:23.770380Z"},"content_sha256":"05c4081960cc419d7e688fb94a3105fb612b4db54a004205fc5c1ebdeddb39af","schema_version":"1.0","event_id":"sha256:05c4081960cc419d7e688fb94a3105fb612b4db54a004205fc5c1ebdeddb39af"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/bundle.json","state_url":"https://pith.science/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:14:23Z","links":{"resolver":"https://pith.science/pith/7YSYLYULFJDKEXB4FJRTXQGUNC","bundle":"https://pith.science/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/bundle.json","state":"https://pith.science/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7YSYLYULFJDKEXB4FJRTXQGUNC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:7YSYLYULFJDKEXB4FJRTXQGUNC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aedc508fb0d11d1bf422ac5fd7866ae48076fa2d8a8bf500608fc2ef3fd9dac0","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-05-23T08:51:37Z","title_canon_sha256":"bdcef4af7eadddfa44bf1cb930a5e95e9349e03dcf804730036eea4c330c8869"},"schema_version":"1.0","source":{"id":"1705.08131","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1705.08131","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"arxiv_version","alias_value":"1705.08131v1","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.08131","created_at":"2026-05-18T00:43:49Z"},{"alias_kind":"pith_short_12","alias_value":"7YSYLYULFJDK","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_16","alias_value":"7YSYLYULFJDKEXB4","created_at":"2026-05-18T12:31:05Z"},{"alias_kind":"pith_short_8","alias_value":"7YSYLYUL","created_at":"2026-05-18T12:31:05Z"}],"graph_snapshots":[{"event_id":"sha256:05c4081960cc419d7e688fb94a3105fb612b4db54a004205fc5c1ebdeddb39af","target":"graph","created_at":"2026-05-18T00:43:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recent researches have shown that machine learning based malware detection algorithms are very vulnerable under the attacks of adversarial examples. These works mainly focused on the detection algorithms which use features with fixed dimension, while some researchers have begun to use recurrent neural networks (RNN) to detect malware based on sequential API features. This paper proposes a novel algorithm to generate sequential adversarial examples, which are used to attack a RNN based malware detection system. It is usually hard for malicious attackers to know the exact structures and weights ","authors_text":"Weiwei Hu, Ying Tan","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-05-23T08:51:37Z","title":"Black-Box Attacks against RNN based Malware Detection Algorithms"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.08131","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b7cb027a0448667a0e649005bc22388210e8bae31d48d78fb76ef25158740f48","target":"record","created_at":"2026-05-18T00:43:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aedc508fb0d11d1bf422ac5fd7866ae48076fa2d8a8bf500608fc2ef3fd9dac0","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2017-05-23T08:51:37Z","title_canon_sha256":"bdcef4af7eadddfa44bf1cb930a5e95e9349e03dcf804730036eea4c330c8869"},"schema_version":"1.0","source":{"id":"1705.08131","kind":"arxiv","version":1}},"canonical_sha256":"fe2585e28b2a46a25c3c2a633bc0d468b26e29f27355e5fa6346068a75505fb7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fe2585e28b2a46a25c3c2a633bc0d468b26e29f27355e5fa6346068a75505fb7","first_computed_at":"2026-05-18T00:43:49.270135Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:43:49.270135Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kU+pnZCbdi52+Vpv4HD+Mgyw2zfhGzT2rYuDcVRny3NPo8zUXiBlFGFgK0jcJY9kASx0XX8aHhOzyHmt2jHGCA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:43:49.270679Z","signed_message":"canonical_sha256_bytes"},"source_id":"1705.08131","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b7cb027a0448667a0e649005bc22388210e8bae31d48d78fb76ef25158740f48","sha256:05c4081960cc419d7e688fb94a3105fb612b4db54a004205fc5c1ebdeddb39af"],"state_sha256":"185effb04e08c92741f0297a139fa52a0adec22dbc1e0be1f5e250b5e8b10626"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H8N9QvlMnThnyalPqGUvE4uVC0ujDZbyaygB2WFMlTHWpO60lnfsVX0dgLWeRa5Lh57+L0pFBsrOk/HC1KBXDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:14:23.774617Z","bundle_sha256":"49ebb5d70c6a5cf780221f0f730dca6841654dcf3c6e6c5b1289389cbf2e09cd"}}