{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:AINE447AECCVFPBFLY5LU4NH3A","short_pith_number":"pith:AINE447A","canonical_record":{"source":{"id":"1909.09735","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-20T22:40:33Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b79b65934c2de73f2f491b86c8be6fbacb696553784c5cd9c7cfc0da226ccd10","abstract_canon_sha256":"852bc28cd27644602b95a23350a0b574b744f9b028497bcd91893a29f83e968a"},"schema_version":"1.0"},"canonical_sha256":"021a4e73e0208552bc255e3aba71a7d80476d685380b4aa943bd9ec1bf489999","source":{"kind":"arxiv","id":"1909.09735","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.09735","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"arxiv_version","alias_value":"1909.09735v1","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.09735","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_12","alias_value":"AINE447AECCV","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_16","alias_value":"AINE447AECCVFPBF","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_8","alias_value":"AINE447A","created_at":"2026-07-05T00:06:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:AINE447AECCVFPBFLY5LU4NH3A","target":"record","payload":{"canonical_record":{"source":{"id":"1909.09735","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-20T22:40:33Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b79b65934c2de73f2f491b86c8be6fbacb696553784c5cd9c7cfc0da226ccd10","abstract_canon_sha256":"852bc28cd27644602b95a23350a0b574b744f9b028497bcd91893a29f83e968a"},"schema_version":"1.0"},"canonical_sha256":"021a4e73e0208552bc255e3aba71a7d80476d685380b4aa943bd9ec1bf489999","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:06:13.802427Z","signature_b64":"L/G/pMHcj4wMg2BV/4OB0bHPlPqJk5MLD3afoItweXwyHwzRvrTZHPFzGzP/39mKaQk58R6ppdnAoamVhCQ8Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"021a4e73e0208552bc255e3aba71a7d80476d685380b4aa943bd9ec1bf489999","last_reissued_at":"2026-07-05T00:06:13.802016Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:06:13.802016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.09735","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:06:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"URpHDnHv1eLb6ZxhIF2FVKKsdRSynyesvA1hGfoD8+70sK9ATYwb6p/T5xx/oRGEKcEmgpiNs/Vb/r1gRkiFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T05:48:35.911182Z"},"content_sha256":"6d10a7e43e3e3fa68844ae998269108b78766d6babbf6d7495bc91b352acbf6c","schema_version":"1.0","event_id":"sha256:6d10a7e43e3e3fa68844ae998269108b78766d6babbf6d7495bc91b352acbf6c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:AINE447AECCVFPBFLY5LU4NH3A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmed Abusnaina, Aminollah Khormali, Aziz Mohaisen, DaeHun Nyang, Songqing Chen","submitted_at":"2019-09-20T22:40:33Z","abstract_excerpt":"Despite many attempts, the state-of-the-art of adversarial machine learning on malware detection systems generally yield unexecutable samples. In this work, we set out to examine the robustness of visualization-based malware detection system against adversarial examples (AEs) that not only are able to fool the model, but also maintain the executability of the original input. As such, we first investigate the application of existing off-the-shelf adversarial attack approaches on malware detection systems through which we found that those approaches do not necessarily maintain the functionality "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.09735","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.09735/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:06:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jKDGDiEwCHdo5NO6UQzdAUtbbuJZc61E0Mg5syNIbahfXifnko6WpaJA5bINVuAEdIsXg1en8349dD+4GtfSBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T05:48:35.912120Z"},"content_sha256":"bc0c219c69b3bb7e80d2c76b2a860cc11823843f00b1e4482b9033a3b03f103c","schema_version":"1.0","event_id":"sha256:bc0c219c69b3bb7e80d2c76b2a860cc11823843f00b1e4482b9033a3b03f103c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AINE447AECCVFPBFLY5LU4NH3A/bundle.json","state_url":"https://pith.science/pith/AINE447AECCVFPBFLY5LU4NH3A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AINE447AECCVFPBFLY5LU4NH3A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T05:48:35Z","links":{"resolver":"https://pith.science/pith/AINE447AECCVFPBFLY5LU4NH3A","bundle":"https://pith.science/pith/AINE447AECCVFPBFLY5LU4NH3A/bundle.json","state":"https://pith.science/pith/AINE447AECCVFPBFLY5LU4NH3A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AINE447AECCVFPBFLY5LU4NH3A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:AINE447AECCVFPBFLY5LU4NH3A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"852bc28cd27644602b95a23350a0b574b744f9b028497bcd91893a29f83e968a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-20T22:40:33Z","title_canon_sha256":"b79b65934c2de73f2f491b86c8be6fbacb696553784c5cd9c7cfc0da226ccd10"},"schema_version":"1.0","source":{"id":"1909.09735","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.09735","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"arxiv_version","alias_value":"1909.09735v1","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.09735","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_12","alias_value":"AINE447AECCV","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_16","alias_value":"AINE447AECCVFPBF","created_at":"2026-07-05T00:06:13Z"},{"alias_kind":"pith_short_8","alias_value":"AINE447A","created_at":"2026-07-05T00:06:13Z"}],"graph_snapshots":[{"event_id":"sha256:bc0c219c69b3bb7e80d2c76b2a860cc11823843f00b1e4482b9033a3b03f103c","target":"graph","created_at":"2026-07-05T00:06:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.09735/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Despite many attempts, the state-of-the-art of adversarial machine learning on malware detection systems generally yield unexecutable samples. In this work, we set out to examine the robustness of visualization-based malware detection system against adversarial examples (AEs) that not only are able to fool the model, but also maintain the executability of the original input. As such, we first investigate the application of existing off-the-shelf adversarial attack approaches on malware detection systems through which we found that those approaches do not necessarily maintain the functionality ","authors_text":"Ahmed Abusnaina, Aminollah Khormali, Aziz Mohaisen, DaeHun Nyang, Songqing Chen","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-20T22:40:33Z","title":"COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.09735","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6d10a7e43e3e3fa68844ae998269108b78766d6babbf6d7495bc91b352acbf6c","target":"record","created_at":"2026-07-05T00:06:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"852bc28cd27644602b95a23350a0b574b744f9b028497bcd91893a29f83e968a","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-20T22:40:33Z","title_canon_sha256":"b79b65934c2de73f2f491b86c8be6fbacb696553784c5cd9c7cfc0da226ccd10"},"schema_version":"1.0","source":{"id":"1909.09735","kind":"arxiv","version":1}},"canonical_sha256":"021a4e73e0208552bc255e3aba71a7d80476d685380b4aa943bd9ec1bf489999","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"021a4e73e0208552bc255e3aba71a7d80476d685380b4aa943bd9ec1bf489999","first_computed_at":"2026-07-05T00:06:13.802016Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:06:13.802016Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L/G/pMHcj4wMg2BV/4OB0bHPlPqJk5MLD3afoItweXwyHwzRvrTZHPFzGzP/39mKaQk58R6ppdnAoamVhCQ8Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:06:13.802427Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.09735","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6d10a7e43e3e3fa68844ae998269108b78766d6babbf6d7495bc91b352acbf6c","sha256:bc0c219c69b3bb7e80d2c76b2a860cc11823843f00b1e4482b9033a3b03f103c"],"state_sha256":"670d4ee4b3e59a98d43ddc8acf55ab3a21a41e093ea1c7092417355022f9d6d0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uk0ibg5yU/vyFBdt42ozu0NFXgSkXH6fw/7F1DRso0+bzs9EFECCt8YA/r1g41eOYSkHx394jjRd2/H6429eBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T05:48:35.918781Z","bundle_sha256":"6d68ec2a85d095bdc1dbf4b13f3df87886f5c6c91734d68f73887e3658a21cf0"}}