{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:JLSBV2437BJDFWAHRM33UZDCLM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df4011b85324f8f0beb7d2dcd6d2d40beca187689b965676af945c2a427c8ebd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-30T02:17:48Z","title_canon_sha256":"49dcd5fcf8e4db73803b63c1d726295ce011e268ed6593c2868364e73acc22ee"},"schema_version":"1.0","source":{"id":"1810.12490","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1810.12490","created_at":"2026-05-18T00:01:56Z"},{"alias_kind":"arxiv_version","alias_value":"1810.12490v1","created_at":"2026-05-18T00:01:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1810.12490","created_at":"2026-05-18T00:01:56Z"},{"alias_kind":"pith_short_12","alias_value":"JLSBV2437BJD","created_at":"2026-05-18T12:32:31Z"},{"alias_kind":"pith_short_16","alias_value":"JLSBV2437BJDFWAH","created_at":"2026-05-18T12:32:31Z"},{"alias_kind":"pith_short_8","alias_value":"JLSBV243","created_at":"2026-05-18T12:32:31Z"}],"graph_snapshots":[{"event_id":"sha256:82aa216ac5123d0de0959ce6733b6c119581fec8d5f237e858b01e8a179a208f","target":"graph","created_at":"2026-05-18T00:01:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"The popularity of the PDF format and the rich JavaScript environment that PDF viewers offer make PDF documents an attractive attack vector for malware developers. PDF documents present a serious threat to the security of organizations because most users are unsuspecting of them and thus likely to open documents from untrusted sources. We propose to identify malicious PDFs by using conservative abstract interpretation to statically reason about the behavior of the embedded JavaScript code. Currently, state-of-the-art tools either: (1) statically identify PDF malware based on structural similari","authors_text":"Alexander Jordan, Behnaz Hassanshahi, David Zhao, Fran\\c{c}ois Gauthier","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-30T02:17:48Z","title":"SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1810.12490","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:67a047d60114321eb2020806d9589b43af2a43118e3cb1a3f3cc15fde5d0c8b7","target":"record","created_at":"2026-05-18T00:01:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df4011b85324f8f0beb7d2dcd6d2d40beca187689b965676af945c2a427c8ebd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-10-30T02:17:48Z","title_canon_sha256":"49dcd5fcf8e4db73803b63c1d726295ce011e268ed6593c2868364e73acc22ee"},"schema_version":"1.0","source":{"id":"1810.12490","kind":"arxiv","version":1}},"canonical_sha256":"4ae41aeb9bf85232d8078b37ba64625b37fbd2e98fb71ef2a480f00181428c80","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4ae41aeb9bf85232d8078b37ba64625b37fbd2e98fb71ef2a480f00181428c80","first_computed_at":"2026-05-18T00:01:56.952290Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:01:56.952290Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5NC7Zn33AT+ahZr0WMv7Qr7866F8heXGJYYuwW2gX7vx6kfNCSqmnAL7OTdFbYaet5odCEQrCEEfA7jkFUwqDA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:01:56.952969Z","signed_message":"canonical_sha256_bytes"},"source_id":"1810.12490","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:67a047d60114321eb2020806d9589b43af2a43118e3cb1a3f3cc15fde5d0c8b7","sha256:82aa216ac5123d0de0959ce6733b6c119581fec8d5f237e858b01e8a179a208f"],"state_sha256":"da3036df1f352e561deba575593fadc836373e3ce5b5b9ab330001c0e3c1f1a3"}