{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:BCD2AWB5NGD4O2PFG7GDAXJ5VP","short_pith_number":"pith:BCD2AWB5","canonical_record":{"source":{"id":"1904.07118","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-15T15:26:38Z","cross_cats_sorted":[],"title_canon_sha256":"0b8feb16d8781b4029f85bdef62e97444d9b99fc603cd433af957a69cdffbeaa","abstract_canon_sha256":"295004082963577570ff6688c5ce081a8b9f20fc4592fd3b363fa048c203427d"},"schema_version":"1.0"},"canonical_sha256":"0887a0583d6987c769e537cc305d3dabf9e04dc15c563f3678f5d099932f684a","source":{"kind":"arxiv","id":"1904.07118","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.07118","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"arxiv_version","alias_value":"1904.07118v2","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.07118","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"pith_short_12","alias_value":"BCD2AWB5NGD4","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"BCD2AWB5NGD4O2PF","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"BCD2AWB5","created_at":"2026-05-18T12:33:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:BCD2AWB5NGD4O2PFG7GDAXJ5VP","target":"record","payload":{"canonical_record":{"source":{"id":"1904.07118","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-15T15:26:38Z","cross_cats_sorted":[],"title_canon_sha256":"0b8feb16d8781b4029f85bdef62e97444d9b99fc603cd433af957a69cdffbeaa","abstract_canon_sha256":"295004082963577570ff6688c5ce081a8b9f20fc4592fd3b363fa048c203427d"},"schema_version":"1.0"},"canonical_sha256":"0887a0583d6987c769e537cc305d3dabf9e04dc15c563f3678f5d099932f684a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:44:54.351883Z","signature_b64":"xLAh7aJsgyoXMuOcRZSi8INBxrJnRA83PTpcST7oK+5EraYYdA4nF3F17jgNxEcmJLBDb3vkJKxqNIhYXtO3AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0887a0583d6987c769e537cc305d3dabf9e04dc15c563f3678f5d099932f684a","last_reissued_at":"2026-05-17T23:44:54.351260Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:44:54.351260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.07118","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:44:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BVNeaXEbfuqhVBQ/kioVKomoyo0/T4kcWE7TDL1o2GeJ/V6hOZjKpoAgQWkYvXJv60o2UK/ua4ZGcfvDnB61CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T23:54:31.796678Z"},"content_sha256":"59662c2c62c2ba142a30e1cbe8907650cfcde5d7949d93979f342bf800cd75a0","schema_version":"1.0","event_id":"sha256:59662c2c62c2ba142a30e1cbe8907650cfcde5d7949d93979f342bf800cd75a0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:BCD2AWB5NGD4O2PFG7GDAXJ5VP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Comparison of System Call Representations for Intrusion Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andreas Hotho, Dieter Landes, Markus Ring, Sarah Wunderlich","submitted_at":"2019-04-15T15:26:38Z","abstract_excerpt":"Over the years, artificial neural networks have been applied successfully in many areas including IT security. Yet, neural networks can only process continuous input data. This is particularly challenging for security-related non-continuous data like system calls. This work focuses on four different options to preprocess sequences of system calls so that they can be processed by neural networks. These input options are based on one-hot encoding and learning word2vec or GloVe representations of system calls. As an additional option, we analyze if the mapping of system calls to their respective "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.07118","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:44:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GeOnNzlGL8IcRYQUfOPGWSWryRvxY2mwbcwqFQpy5X+hiHnzBMaoHMZlWJ3MF5yJfIzxcHKr4aGoh3P1VXZPDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T23:54:31.797358Z"},"content_sha256":"216b677377fd7805fc2fd0fbb70c5e5ab5c9e57517851419ecd22f2e49a4205e","schema_version":"1.0","event_id":"sha256:216b677377fd7805fc2fd0fbb70c5e5ab5c9e57517851419ecd22f2e49a4205e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/bundle.json","state_url":"https://pith.science/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-29T23:54:31Z","links":{"resolver":"https://pith.science/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP","bundle":"https://pith.science/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/bundle.json","state":"https://pith.science/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BCD2AWB5NGD4O2PFG7GDAXJ5VP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:BCD2AWB5NGD4O2PFG7GDAXJ5VP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"295004082963577570ff6688c5ce081a8b9f20fc4592fd3b363fa048c203427d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-15T15:26:38Z","title_canon_sha256":"0b8feb16d8781b4029f85bdef62e97444d9b99fc603cd433af957a69cdffbeaa"},"schema_version":"1.0","source":{"id":"1904.07118","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.07118","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"arxiv_version","alias_value":"1904.07118v2","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.07118","created_at":"2026-05-17T23:44:54Z"},{"alias_kind":"pith_short_12","alias_value":"BCD2AWB5NGD4","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"BCD2AWB5NGD4O2PF","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"BCD2AWB5","created_at":"2026-05-18T12:33:12Z"}],"graph_snapshots":[{"event_id":"sha256:216b677377fd7805fc2fd0fbb70c5e5ab5c9e57517851419ecd22f2e49a4205e","target":"graph","created_at":"2026-05-17T23:44:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Over the years, artificial neural networks have been applied successfully in many areas including IT security. Yet, neural networks can only process continuous input data. This is particularly challenging for security-related non-continuous data like system calls. This work focuses on four different options to preprocess sequences of system calls so that they can be processed by neural networks. These input options are based on one-hot encoding and learning word2vec or GloVe representations of system calls. As an additional option, we analyze if the mapping of system calls to their respective ","authors_text":"Andreas Hotho, Dieter Landes, Markus Ring, Sarah Wunderlich","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-15T15:26:38Z","title":"Comparison of System Call Representations for Intrusion Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.07118","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:59662c2c62c2ba142a30e1cbe8907650cfcde5d7949d93979f342bf800cd75a0","target":"record","created_at":"2026-05-17T23:44:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"295004082963577570ff6688c5ce081a8b9f20fc4592fd3b363fa048c203427d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-04-15T15:26:38Z","title_canon_sha256":"0b8feb16d8781b4029f85bdef62e97444d9b99fc603cd433af957a69cdffbeaa"},"schema_version":"1.0","source":{"id":"1904.07118","kind":"arxiv","version":2}},"canonical_sha256":"0887a0583d6987c769e537cc305d3dabf9e04dc15c563f3678f5d099932f684a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0887a0583d6987c769e537cc305d3dabf9e04dc15c563f3678f5d099932f684a","first_computed_at":"2026-05-17T23:44:54.351260Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:44:54.351260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xLAh7aJsgyoXMuOcRZSi8INBxrJnRA83PTpcST7oK+5EraYYdA4nF3F17jgNxEcmJLBDb3vkJKxqNIhYXtO3AQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:44:54.351883Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.07118","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:59662c2c62c2ba142a30e1cbe8907650cfcde5d7949d93979f342bf800cd75a0","sha256:216b677377fd7805fc2fd0fbb70c5e5ab5c9e57517851419ecd22f2e49a4205e"],"state_sha256":"1ad85925c9b3e0f0481c8f85ac36d064ac78cc24e3b906c895c73a23e246897c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4F5Nxe8DGRGmPf0LJsI4x6DmcJ5cFd45WWQHeAAlbcK7XZoO9dNyov86mQFvKutRiX6dDG0sfbjz7eeRsLMuDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-29T23:54:31.801021Z","bundle_sha256":"71d47a3ed70383e3e2fdfa2c0416c461fc64583b79d8b03fa149f38465c892f3"}}