{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:I66TDMEUUWUTGFAZG2EKMIKY4G","short_pith_number":"pith:I66TDMEU","canonical_record":{"source":{"id":"2411.01273","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-02T14:52:04Z","cross_cats_sorted":[],"title_canon_sha256":"9fd7e1f093944578fead8f17dae0b4cda9b5a6c545601a597cb5b83ed7e406cc","abstract_canon_sha256":"cad565d873b901bf9d3498df2aac1469a6ae64c0cbf7c9ca699cf2b99389d55b"},"schema_version":"1.0"},"canonical_sha256":"47bd31b094a5a93314193688a62158e1abcc670c103522496c1c2a568d3fcede","source":{"kind":"arxiv","id":"2411.01273","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.01273","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"arxiv_version","alias_value":"2411.01273v1","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.01273","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_12","alias_value":"I66TDMEUUWUT","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_16","alias_value":"I66TDMEUUWUTGFAZ","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_8","alias_value":"I66TDMEU","created_at":"2026-07-05T09:30:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:I66TDMEUUWUTGFAZG2EKMIKY4G","target":"record","payload":{"canonical_record":{"source":{"id":"2411.01273","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-02T14:52:04Z","cross_cats_sorted":[],"title_canon_sha256":"9fd7e1f093944578fead8f17dae0b4cda9b5a6c545601a597cb5b83ed7e406cc","abstract_canon_sha256":"cad565d873b901bf9d3498df2aac1469a6ae64c0cbf7c9ca699cf2b99389d55b"},"schema_version":"1.0"},"canonical_sha256":"47bd31b094a5a93314193688a62158e1abcc670c103522496c1c2a568d3fcede","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:30:27.816144Z","signature_b64":"mv1L3ANGZA1/e/4YRS8pu91f8+WQRGUaEyy73l/hJjfQHWCJgZQHXvhgG/qO/g3mJu64E+f99GtgQj8svNDLBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"47bd31b094a5a93314193688a62158e1abcc670c103522496c1c2a568d3fcede","last_reissued_at":"2026-07-05T09:30:27.815630Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:30:27.815630Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2411.01273","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bwk6NdJdxLigv2hpEu31YKFUF6dIh2aTPu8LndcfySrYH26crpv2xJwteyBBGy22W0HOepEUjLxsRmKCD/cVDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:27:20.470823Z"},"content_sha256":"9898efa3c5abb5adc4ca4598374f02b832ed7da28b47093a65c951e604394980","schema_version":"1.0","event_id":"sha256:9898efa3c5abb5adc4ca4598374f02b832ed7da28b47093a65c951e604394980"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:I66TDMEUUWUTGFAZG2EKMIKY4G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PARIS: A Practical, Adaptive Trace-Fetching and Real-Time Malicious Behavior Detection System","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Husheng Yu, Jian Wang, Lingzhi Wang, Xiangmin Shen, Yan Chen","submitted_at":"2024-11-02T14:52:04Z","abstract_excerpt":"The escalating sophistication of cyber-attacks and the widespread utilization of stealth tactics have led to significant security threats globally. Nevertheless, the existing static detection methods exhibit limited coverage, and traditional dynamic monitoring approaches encounter challenges in bypassing evasion techniques. Thus, it has become imperative to implement nuanced and dynamic analysis to achieve precise behavior detection in real time. There are two pressing concerns associated with current dynamic malware behavior detection solutions. Firstly, the collection and processing of data "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.01273","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.01273/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:30:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SKNMgg4+E1SSDDzB/p0FEKjP0+nNBRHM8GgQsbV2DdWuLgvIyuIxy0Oy/GCuNXHlvFZg/YsR3zRjOwkRyFz8Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:27:20.471239Z"},"content_sha256":"7bcea1d22c708439131e2f1c51e283d320edeff8c3fe1dcca815bfaf354835bc","schema_version":"1.0","event_id":"sha256:7bcea1d22c708439131e2f1c51e283d320edeff8c3fe1dcca815bfaf354835bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/bundle.json","state_url":"https://pith.science/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T14:27:20Z","links":{"resolver":"https://pith.science/pith/I66TDMEUUWUTGFAZG2EKMIKY4G","bundle":"https://pith.science/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/bundle.json","state":"https://pith.science/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I66TDMEUUWUTGFAZG2EKMIKY4G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:I66TDMEUUWUTGFAZG2EKMIKY4G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cad565d873b901bf9d3498df2aac1469a6ae64c0cbf7c9ca699cf2b99389d55b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-02T14:52:04Z","title_canon_sha256":"9fd7e1f093944578fead8f17dae0b4cda9b5a6c545601a597cb5b83ed7e406cc"},"schema_version":"1.0","source":{"id":"2411.01273","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2411.01273","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"arxiv_version","alias_value":"2411.01273v1","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.01273","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_12","alias_value":"I66TDMEUUWUT","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_16","alias_value":"I66TDMEUUWUTGFAZ","created_at":"2026-07-05T09:30:27Z"},{"alias_kind":"pith_short_8","alias_value":"I66TDMEU","created_at":"2026-07-05T09:30:27Z"}],"graph_snapshots":[{"event_id":"sha256:7bcea1d22c708439131e2f1c51e283d320edeff8c3fe1dcca815bfaf354835bc","target":"graph","created_at":"2026-07-05T09:30:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2411.01273/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The escalating sophistication of cyber-attacks and the widespread utilization of stealth tactics have led to significant security threats globally. Nevertheless, the existing static detection methods exhibit limited coverage, and traditional dynamic monitoring approaches encounter challenges in bypassing evasion techniques. Thus, it has become imperative to implement nuanced and dynamic analysis to achieve precise behavior detection in real time. There are two pressing concerns associated with current dynamic malware behavior detection solutions. Firstly, the collection and processing of data ","authors_text":"Husheng Yu, Jian Wang, Lingzhi Wang, Xiangmin Shen, Yan Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-02T14:52:04Z","title":"PARIS: A Practical, Adaptive Trace-Fetching and Real-Time Malicious Behavior Detection System"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.01273","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9898efa3c5abb5adc4ca4598374f02b832ed7da28b47093a65c951e604394980","target":"record","created_at":"2026-07-05T09:30:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cad565d873b901bf9d3498df2aac1469a6ae64c0cbf7c9ca699cf2b99389d55b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-02T14:52:04Z","title_canon_sha256":"9fd7e1f093944578fead8f17dae0b4cda9b5a6c545601a597cb5b83ed7e406cc"},"schema_version":"1.0","source":{"id":"2411.01273","kind":"arxiv","version":1}},"canonical_sha256":"47bd31b094a5a93314193688a62158e1abcc670c103522496c1c2a568d3fcede","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"47bd31b094a5a93314193688a62158e1abcc670c103522496c1c2a568d3fcede","first_computed_at":"2026-07-05T09:30:27.815630Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:30:27.815630Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mv1L3ANGZA1/e/4YRS8pu91f8+WQRGUaEyy73l/hJjfQHWCJgZQHXvhgG/qO/g3mJu64E+f99GtgQj8svNDLBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:30:27.816144Z","signed_message":"canonical_sha256_bytes"},"source_id":"2411.01273","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9898efa3c5abb5adc4ca4598374f02b832ed7da28b47093a65c951e604394980","sha256:7bcea1d22c708439131e2f1c51e283d320edeff8c3fe1dcca815bfaf354835bc"],"state_sha256":"01dc14011070a8e7a84cfff2107b6205a9480b1a8538738fc40d02ae0fe9280c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XbIrsqIEzf6fFTo7jkGgQvVOCNtkMmgJMy8sj4H8IA1OK+cDZY/SbceWFLz9aAhFt2wTxxtXf5tWe3j3SdTsDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T14:27:20.474838Z","bundle_sha256":"a8883bcc4b51301f3efbe197e31d686b191f85ba0017ecefbbfcdfd75ae28619"}}