{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:HSX3WJ5IW5KLV3MUCJUVCX36PP","short_pith_number":"pith:HSX3WJ5I","schema_version":"1.0","canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","source":{"kind":"arxiv","id":"1709.07102","version":1},"attestation_state":"computed","paper":{"title":"Automatic Detection of Malware-Generated Domains with Recurrent Neural Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Pierre Lison, Vasileios Mavroeidis","submitted_at":"2017-09-20T23:35:54Z","abstract_excerpt":"Modern malware families often rely on domain-generation algorithms (DGAs) to determine rendezvous points to their command-and-control server. Traditional defence strategies (such as blacklisting domains or IP addresses) are inadequate against such techniques due to the large and continuously changing list of domains produced by these algorithms. This paper demonstrates that a machine learning approach based on recurrent neural networks is able to detect domain names generated by DGAs with high precision. The neural models are estimated on a large training set of domains generated by various ma"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1709.07102","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","cross_cats_sorted":[],"title_canon_sha256":"fb0b3a803f7fe124886edcf23e0e20c53eef98a3fd267cbec75f4416d018506d","abstract_canon_sha256":"78b22902929a1a86311b8caafb7cb29fd72ad1be374e4f85f871fc2dd137e103"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:34:36.560217Z","signature_b64":"2a/gTMnRxTvUAaIVkXLevGFCCAEMaIp2fiJE3vVi1Ul9E72lAZUrJ6T5jAnXlCDOFBygq3HNX4XBRM3zUEryAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","last_reissued_at":"2026-05-18T00:34:36.559631Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:34:36.559631Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Automatic Detection of Malware-Generated Domains with Recurrent Neural Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Pierre Lison, Vasileios Mavroeidis","submitted_at":"2017-09-20T23:35:54Z","abstract_excerpt":"Modern malware families often rely on domain-generation algorithms (DGAs) to determine rendezvous points to their command-and-control server. Traditional defence strategies (such as blacklisting domains or IP addresses) are inadequate against such techniques due to the large and continuously changing list of domains produced by these algorithms. This paper demonstrates that a machine learning approach based on recurrent neural networks is able to detect domain names generated by DGAs with high precision. The neural models are estimated on a large training set of domains generated by various ma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.07102","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1709.07102","created_at":"2026-05-18T00:34:36.559720+00:00"},{"alias_kind":"arxiv_version","alias_value":"1709.07102v1","created_at":"2026-05-18T00:34:36.559720+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.07102","created_at":"2026-05-18T00:34:36.559720+00:00"},{"alias_kind":"pith_short_12","alias_value":"HSX3WJ5IW5KL","created_at":"2026-05-18T12:31:18.294218+00:00"},{"alias_kind":"pith_short_16","alias_value":"HSX3WJ5IW5KLV3MU","created_at":"2026-05-18T12:31:18.294218+00:00"},{"alias_kind":"pith_short_8","alias_value":"HSX3WJ5I","created_at":"2026-05-18T12:31:18.294218+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP","json":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP.json","graph_json":"https://pith.science/api/pith-number/HSX3WJ5IW5KLV3MUCJUVCX36PP/graph.json","events_json":"https://pith.science/api/pith-number/HSX3WJ5IW5KLV3MUCJUVCX36PP/events.json","paper":"https://pith.science/paper/HSX3WJ5I"},"agent_actions":{"view_html":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP","download_json":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP.json","view_paper":"https://pith.science/paper/HSX3WJ5I","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1709.07102&json=true","fetch_graph":"https://pith.science/api/pith-number/HSX3WJ5IW5KLV3MUCJUVCX36PP/graph.json","fetch_events":"https://pith.science/api/pith-number/HSX3WJ5IW5KLV3MUCJUVCX36PP/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/action/timestamp_anchor","attest_storage":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/action/storage_attestation","attest_author":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/action/author_attestation","sign_citation":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/action/citation_signature","submit_replication":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/action/replication_record"}},"created_at":"2026-05-18T00:34:36.559720+00:00","updated_at":"2026-05-18T00:34:36.559720+00:00"}