{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:BK4QWMMAANDT2ZFCMSAFJ5LXVG","short_pith_number":"pith:BK4QWMMA","schema_version":"1.0","canonical_sha256":"0ab90b318003473d64a2648054f577a9a3a637a2586147d1bafa269a68982319","source":{"kind":"arxiv","id":"1710.05202","version":1},"attestation_state":"computed","paper":{"title":"Malware Lineage in the Wild","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Irfan Ul Haq, Juan Caballero, Sergio Chica, Somesh Jha","submitted_at":"2017-10-14T16:02:02Z","abstract_excerpt":"Malware lineage studies the evolutionary relationships among malware and has important applications for malware analysis. A persistent limitation of prior malware lineage approaches is to consider every input sample a separate malware version. This is problematic since a majority of malware are packed and the packing process produces many polymorphic variants (i.e., executables with different file hash) of the same malware version. Thus, many samples correspond to the same malware version and it is challenging to identify distinct malware versions from polymorphic variants. This problem does n"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1710.05202","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-10-14T16:02:02Z","cross_cats_sorted":[],"title_canon_sha256":"cc4721f52e284386fb441426a3ef4dd059925ed363605365383d9589442620df","abstract_canon_sha256":"f1b79cb6247043b9fc000aa9847f5d7543599bf9528b9f4995bf4d651c4387cc"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:32:54.072256Z","signature_b64":"YxYCq6NfUDhL7Wm06SwcjnXQ5a0/fQW8ZPDuGUcra2Q/iKaYwhvnYZqLdwNoA0i1YWow2jFaYGlpIyChWM06BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0ab90b318003473d64a2648054f577a9a3a637a2586147d1bafa269a68982319","last_reissued_at":"2026-05-18T00:32:54.071552Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:32:54.071552Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Malware Lineage in the Wild","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Irfan Ul Haq, Juan Caballero, Sergio Chica, Somesh Jha","submitted_at":"2017-10-14T16:02:02Z","abstract_excerpt":"Malware lineage studies the evolutionary relationships among malware and has important applications for malware analysis. A persistent limitation of prior malware lineage approaches is to consider every input sample a separate malware version. This is problematic since a majority of malware are packed and the packing process produces many polymorphic variants (i.e., executables with different file hash) of the same malware version. Thus, many samples correspond to the same malware version and it is challenging to identify distinct malware versions from polymorphic variants. This problem does n"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.05202","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1710.05202","created_at":"2026-05-18T00:32:54.071680+00:00"},{"alias_kind":"arxiv_version","alias_value":"1710.05202v1","created_at":"2026-05-18T00:32:54.071680+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.05202","created_at":"2026-05-18T00:32:54.071680+00:00"},{"alias_kind":"pith_short_12","alias_value":"BK4QWMMAANDT","created_at":"2026-05-18T12:31:08.081275+00:00"},{"alias_kind":"pith_short_16","alias_value":"BK4QWMMAANDT2ZFC","created_at":"2026-05-18T12:31:08.081275+00:00"},{"alias_kind":"pith_short_8","alias_value":"BK4QWMMA","created_at":"2026-05-18T12:31:08.081275+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG","json":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG.json","graph_json":"https://pith.science/api/pith-number/BK4QWMMAANDT2ZFCMSAFJ5LXVG/graph.json","events_json":"https://pith.science/api/pith-number/BK4QWMMAANDT2ZFCMSAFJ5LXVG/events.json","paper":"https://pith.science/paper/BK4QWMMA"},"agent_actions":{"view_html":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG","download_json":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG.json","view_paper":"https://pith.science/paper/BK4QWMMA","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1710.05202&json=true","fetch_graph":"https://pith.science/api/pith-number/BK4QWMMAANDT2ZFCMSAFJ5LXVG/graph.json","fetch_events":"https://pith.science/api/pith-number/BK4QWMMAANDT2ZFCMSAFJ5LXVG/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG/action/storage_attestation","attest_author":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG/action/author_attestation","sign_citation":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG/action/citation_signature","submit_replication":"https://pith.science/pith/BK4QWMMAANDT2ZFCMSAFJ5LXVG/action/replication_record"}},"created_at":"2026-05-18T00:32:54.071680+00:00","updated_at":"2026-05-18T00:32:54.071680+00:00"}