{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:JOKG76QYTEOQMEGMPQJUH67IFN","short_pith_number":"pith:JOKG76QY","schema_version":"1.0","canonical_sha256":"4b946ffa18991d0610cc7c1343fbe82b408571d3747f2002e5e7cf2a87fff756","source":{"kind":"arxiv","id":"1705.02268","version":1},"attestation_state":"computed","paper":{"title":"Multiple Instance Learning for Malware Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jan Stiborek, Martin Reh\\'ak, Tom\\'a\\v{s} Pevn\\'y","submitted_at":"2017-05-05T15:35:44Z","abstract_excerpt":"This work addresses classification of unknown binaries executed in sandbox by modeling their interaction with system resources (files, mutexes, registry keys and communication with servers over the network) and error messages provided by the operating system, using vocabulary-based method from the multiple instance learning paradigm. It introduces similarities suitable for individual resource types that combined with an approximative clustering method efficiently group the system resources and define features directly from data. This approach effectively removes randomization often employed by"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1705.02268","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-05-05T15:35:44Z","cross_cats_sorted":[],"title_canon_sha256":"9d7ba05d899788be42efd23a4684e94c0092c7730165dccab9bab382c9c43e88","abstract_canon_sha256":"92471f53ef44823aedaf6a517bb93b39d1e19ae82544a65ab261c421fc82dc84"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:45:00.293566Z","signature_b64":"pS8idJLO+a873P6SSjlL9ZJL3wQqf1b5a2wSv6hmi9zT+rXyvT3QbXO/rzotDu9E1sK2RF8HQTvWd2mIDnBaAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4b946ffa18991d0610cc7c1343fbe82b408571d3747f2002e5e7cf2a87fff756","last_reissued_at":"2026-05-18T00:45:00.292995Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:45:00.292995Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Multiple Instance Learning for Malware Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jan Stiborek, Martin Reh\\'ak, Tom\\'a\\v{s} Pevn\\'y","submitted_at":"2017-05-05T15:35:44Z","abstract_excerpt":"This work addresses classification of unknown binaries executed in sandbox by modeling their interaction with system resources (files, mutexes, registry keys and communication with servers over the network) and error messages provided by the operating system, using vocabulary-based method from the multiple instance learning paradigm. It introduces similarities suitable for individual resource types that combined with an approximative clustering method efficiently group the system resources and define features directly from data. This approach effectively removes randomization often employed by"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1705.02268","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1705.02268","created_at":"2026-05-18T00:45:00.293088+00:00"},{"alias_kind":"arxiv_version","alias_value":"1705.02268v1","created_at":"2026-05-18T00:45:00.293088+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1705.02268","created_at":"2026-05-18T00:45:00.293088+00:00"},{"alias_kind":"pith_short_12","alias_value":"JOKG76QYTEOQ","created_at":"2026-05-18T12:31:24.725408+00:00"},{"alias_kind":"pith_short_16","alias_value":"JOKG76QYTEOQMEGM","created_at":"2026-05-18T12:31:24.725408+00:00"},{"alias_kind":"pith_short_8","alias_value":"JOKG76QY","created_at":"2026-05-18T12:31:24.725408+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN","json":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN.json","graph_json":"https://pith.science/api/pith-number/JOKG76QYTEOQMEGMPQJUH67IFN/graph.json","events_json":"https://pith.science/api/pith-number/JOKG76QYTEOQMEGMPQJUH67IFN/events.json","paper":"https://pith.science/paper/JOKG76QY"},"agent_actions":{"view_html":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN","download_json":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN.json","view_paper":"https://pith.science/paper/JOKG76QY","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1705.02268&json=true","fetch_graph":"https://pith.science/api/pith-number/JOKG76QYTEOQMEGMPQJUH67IFN/graph.json","fetch_events":"https://pith.science/api/pith-number/JOKG76QYTEOQMEGMPQJUH67IFN/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN/action/timestamp_anchor","attest_storage":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN/action/storage_attestation","attest_author":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN/action/author_attestation","sign_citation":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN/action/citation_signature","submit_replication":"https://pith.science/pith/JOKG76QYTEOQMEGMPQJUH67IFN/action/replication_record"}},"created_at":"2026-05-18T00:45:00.293088+00:00","updated_at":"2026-05-18T00:45:00.293088+00:00"}