{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:HSX3WJ5IW5KLV3MUCJUVCX36PP","short_pith_number":"pith:HSX3WJ5I","canonical_record":{"source":{"id":"1709.07102","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","cross_cats_sorted":[],"title_canon_sha256":"fb0b3a803f7fe124886edcf23e0e20c53eef98a3fd267cbec75f4416d018506d","abstract_canon_sha256":"78b22902929a1a86311b8caafb7cb29fd72ad1be374e4f85f871fc2dd137e103"},"schema_version":"1.0"},"canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","source":{"kind":"arxiv","id":"1709.07102","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.07102","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"arxiv_version","alias_value":"1709.07102v1","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.07102","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"pith_short_12","alias_value":"HSX3WJ5IW5KL","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HSX3WJ5IW5KLV3MU","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HSX3WJ5I","created_at":"2026-05-18T12:31:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:HSX3WJ5IW5KLV3MUCJUVCX36PP","target":"record","payload":{"canonical_record":{"source":{"id":"1709.07102","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","cross_cats_sorted":[],"title_canon_sha256":"fb0b3a803f7fe124886edcf23e0e20c53eef98a3fd267cbec75f4416d018506d","abstract_canon_sha256":"78b22902929a1a86311b8caafb7cb29fd72ad1be374e4f85f871fc2dd137e103"},"schema_version":"1.0"},"canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:34:36.560217Z","signature_b64":"2a/gTMnRxTvUAaIVkXLevGFCCAEMaIp2fiJE3vVi1Ul9E72lAZUrJ6T5jAnXlCDOFBygq3HNX4XBRM3zUEryAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","last_reissued_at":"2026-05-18T00:34:36.559631Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:34:36.559631Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.07102","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:34:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y1Bpkac6+E8WW1g5aqqjrmpuakjkzIf6GJGEn/vDsdIfOAvuQb6Rqf0pxpyZEeQZwzRmkd7wKm6gyJkMJgmXDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T21:20:02.374143Z"},"content_sha256":"42c993eccca5a1e50abec770582efe30a175827572884423bc5c311af56f65a5","schema_version":"1.0","event_id":"sha256:42c993eccca5a1e50abec770582efe30a175827572884423bc5c311af56f65a5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:HSX3WJ5IW5KLV3MUCJUVCX36PP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Automatic Detection of Malware-Generated Domains with Recurrent Neural Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Pierre Lison, Vasileios Mavroeidis","submitted_at":"2017-09-20T23:35:54Z","abstract_excerpt":"Modern malware families often rely on domain-generation algorithms (DGAs) to determine rendezvous points to their command-and-control server. Traditional defence strategies (such as blacklisting domains or IP addresses) are inadequate against such techniques due to the large and continuously changing list of domains produced by these algorithms. This paper demonstrates that a machine learning approach based on recurrent neural networks is able to detect domain names generated by DGAs with high precision. The neural models are estimated on a large training set of domains generated by various ma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.07102","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:34:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WMoK5WHQZRAmbYjHGxR9fIZwAahCjBjEf1ib9oyTKRHP9l/O2mAcCNX26qsYzS0lo5WwV4Leqgv0jphCoXaBBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T21:20:02.374531Z"},"content_sha256":"6d2b861d2fb6696a4930ae27bde795dede49a580cab7ab67adba3d7123ab5a8e","schema_version":"1.0","event_id":"sha256:6d2b861d2fb6696a4930ae27bde795dede49a580cab7ab67adba3d7123ab5a8e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/bundle.json","state_url":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T21:20:02Z","links":{"resolver":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP","bundle":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/bundle.json","state":"https://pith.science/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HSX3WJ5IW5KLV3MUCJUVCX36PP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:HSX3WJ5IW5KLV3MUCJUVCX36PP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"78b22902929a1a86311b8caafb7cb29fd72ad1be374e4f85f871fc2dd137e103","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","title_canon_sha256":"fb0b3a803f7fe124886edcf23e0e20c53eef98a3fd267cbec75f4416d018506d"},"schema_version":"1.0","source":{"id":"1709.07102","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.07102","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"arxiv_version","alias_value":"1709.07102v1","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.07102","created_at":"2026-05-18T00:34:36Z"},{"alias_kind":"pith_short_12","alias_value":"HSX3WJ5IW5KL","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"HSX3WJ5IW5KLV3MU","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"HSX3WJ5I","created_at":"2026-05-18T12:31:18Z"}],"graph_snapshots":[{"event_id":"sha256:6d2b861d2fb6696a4930ae27bde795dede49a580cab7ab67adba3d7123ab5a8e","target":"graph","created_at":"2026-05-18T00:34:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Modern malware families often rely on domain-generation algorithms (DGAs) to determine rendezvous points to their command-and-control server. Traditional defence strategies (such as blacklisting domains or IP addresses) are inadequate against such techniques due to the large and continuously changing list of domains produced by these algorithms. This paper demonstrates that a machine learning approach based on recurrent neural networks is able to detect domain names generated by DGAs with high precision. The neural models are estimated on a large training set of domains generated by various ma","authors_text":"Pierre Lison, Vasileios Mavroeidis","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","title":"Automatic Detection of Malware-Generated Domains with Recurrent Neural Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.07102","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:42c993eccca5a1e50abec770582efe30a175827572884423bc5c311af56f65a5","target":"record","created_at":"2026-05-18T00:34:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"78b22902929a1a86311b8caafb7cb29fd72ad1be374e4f85f871fc2dd137e103","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-20T23:35:54Z","title_canon_sha256":"fb0b3a803f7fe124886edcf23e0e20c53eef98a3fd267cbec75f4416d018506d"},"schema_version":"1.0","source":{"id":"1709.07102","kind":"arxiv","version":1}},"canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3cafbb27a8b754baed941269515f7e7bf8a8c918248442c9145ee5e272641cce","first_computed_at":"2026-05-18T00:34:36.559631Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:34:36.559631Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2a/gTMnRxTvUAaIVkXLevGFCCAEMaIp2fiJE3vVi1Ul9E72lAZUrJ6T5jAnXlCDOFBygq3HNX4XBRM3zUEryAg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:34:36.560217Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.07102","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:42c993eccca5a1e50abec770582efe30a175827572884423bc5c311af56f65a5","sha256:6d2b861d2fb6696a4930ae27bde795dede49a580cab7ab67adba3d7123ab5a8e"],"state_sha256":"37fc2e440fc6110d36cdb88f1c6f3d355c643b2dc85cb72fe8f14f0daf407019"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UzDJamxBm7OHSiqgeHFwBwend7Nq6fjlW0XKuMxe8PxRnQPzxrwj7ocu/UrR2jSJRl8ySGZps5fFUcBV0qlZCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T21:20:02.376556Z","bundle_sha256":"c259020f8d56bb79ac0a1a83b8202cc6577a4440d7ba0ed5d128c7e87f34dff6"}}