{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:D3I4W2KMMZPLTZPSCK3ZPTLP3F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9ffcaba29a654fd9b690ba86031c8906a2e03cd1232abf119c6c40dd363ed129","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-03-24T22:38:22Z","title_canon_sha256":"8dcef28cb6622709b393ac1fffe0b47e70c499d92586768aa95cd2bd4e6c5214"},"schema_version":"1.0","source":{"id":"1803.09171","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1803.09171","created_at":"2026-05-18T00:20:12Z"},{"alias_kind":"arxiv_version","alias_value":"1803.09171v1","created_at":"2026-05-18T00:20:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1803.09171","created_at":"2026-05-18T00:20:12Z"},{"alias_kind":"pith_short_12","alias_value":"D3I4W2KMMZPL","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_16","alias_value":"D3I4W2KMMZPLTZPS","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_8","alias_value":"D3I4W2KM","created_at":"2026-05-18T12:32:19Z"}],"graph_snapshots":[{"event_id":"sha256:3540dcee9c48a81b20843c88067af64753ac466acfc7f2f3b88dee6e10b6d31e","target":"graph","created_at":"2026-05-18T00:20:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In the software design, protecting a computer system from a plethora of software attacks or malware in the wild has been increasingly important. One branch of research to detect the existence of attacks or malware, there has been much work focused on modeling the runtime behavior of a program. Stemming from the seminal work of Forrest et al., one of the main tools to model program behavior is system call sequences. Unfortunately, however, since mimicry attacks were proposed, program behavior models based solely on system call sequences could no longer ensure the security of systems and require","authors_text":"Gyuwan Kim, Hayoon Yi, Jangho Lee, Sungroh Yoon, Sunwoo Ahn, Younghan Lee, Yunheung Paek","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-03-24T22:38:22Z","title":"Extended Abstract: Mimicry Resilient Program Behavior Modeling with LSTM based Branch Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1803.09171","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6c49f395a12e39dab4e2ab23a6f5bc526449e330ec46f87f8043d616266d5a8a","target":"record","created_at":"2026-05-18T00:20:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9ffcaba29a654fd9b690ba86031c8906a2e03cd1232abf119c6c40dd363ed129","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-03-24T22:38:22Z","title_canon_sha256":"8dcef28cb6622709b393ac1fffe0b47e70c499d92586768aa95cd2bd4e6c5214"},"schema_version":"1.0","source":{"id":"1803.09171","kind":"arxiv","version":1}},"canonical_sha256":"1ed1cb694c665eb9e5f212b797cd6fd97505c24717a2519b6c121e0e6ed11723","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1ed1cb694c665eb9e5f212b797cd6fd97505c24717a2519b6c121e0e6ed11723","first_computed_at":"2026-05-18T00:20:12.424365Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:20:12.424365Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vaa82wokyPsS9qo4YduKSv8NRBDa2RrRet+XjTzBESiDtkorETXjDxy4FhdDlXoR2jxBiUc6Q0sQ3zeSbBZ1AQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:20:12.424992Z","signed_message":"canonical_sha256_bytes"},"source_id":"1803.09171","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6c49f395a12e39dab4e2ab23a6f5bc526449e330ec46f87f8043d616266d5a8a","sha256:3540dcee9c48a81b20843c88067af64753ac466acfc7f2f3b88dee6e10b6d31e"],"state_sha256":"df302e537be2daaed466d9bc508bbf10fd0e03f1e3a8a394a27df0a86b3d04a3"}