{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:JWD7MYEW2JGC2DSK7THAJ65D6Q","short_pith_number":"pith:JWD7MYEW","schema_version":"1.0","canonical_sha256":"4d87f66096d24c2d0e4afcce04fba3f409febbc20be318e58e752231377898cf","source":{"kind":"arxiv","id":"1708.01864","version":1},"attestation_state":"computed","paper":{"title":"Exploiting Latent Attack Semantics for Intelligent Malware Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Constantine Caramanis, Mkhail Kazdagli, Mohit Tiwari, Sanjay Shakkottai","submitted_at":"2017-08-06T09:01:32Z","abstract_excerpt":"Behavioral malware detectors promise to expose previously unknown malware and are an important security primitive. However, even the best behavioral detectors suffer from high false positives and negatives. In this paper, we address the challenge of aggregating weak per-device behavioral detectors in noisy communities (i.e., ones that produce alerts at unpredictable rates) into an accurate and robust global anomaly detector (GD).\n  Our system - Shape GD - combines two insights: Structural: actions such as visiting a website (waterhole attack) or membership in a shared email thread (phishing at"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1708.01864","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-06T09:01:32Z","cross_cats_sorted":[],"title_canon_sha256":"37a24327fb052bf3eba9c187b4fc40475ce43a9f0c12b007418c4babd68679ad","abstract_canon_sha256":"d64eefe0767f5c5c20672945d9e4cd0342e260769c2c3c8c582f826b0917b4c0"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:38:32.916439Z","signature_b64":"zaDAsRwEOSNHjfDlupFkqYXJ7gmmhueX/m9ueB0WIp1hRS7GM3KB1bMRtRPwvyY1EcDAPGnd+/b4q+Th5vk+AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d87f66096d24c2d0e4afcce04fba3f409febbc20be318e58e752231377898cf","last_reissued_at":"2026-05-18T00:38:32.915906Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:38:32.915906Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Exploiting Latent Attack Semantics for Intelligent Malware Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Constantine Caramanis, Mkhail Kazdagli, Mohit Tiwari, Sanjay Shakkottai","submitted_at":"2017-08-06T09:01:32Z","abstract_excerpt":"Behavioral malware detectors promise to expose previously unknown malware and are an important security primitive. However, even the best behavioral detectors suffer from high false positives and negatives. In this paper, we address the challenge of aggregating weak per-device behavioral detectors in noisy communities (i.e., ones that produce alerts at unpredictable rates) into an accurate and robust global anomaly detector (GD).\n  Our system - Shape GD - combines two insights: Structural: actions such as visiting a website (waterhole attack) or membership in a shared email thread (phishing at"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.01864","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1708.01864","created_at":"2026-05-18T00:38:32.915982+00:00"},{"alias_kind":"arxiv_version","alias_value":"1708.01864v1","created_at":"2026-05-18T00:38:32.915982+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.01864","created_at":"2026-05-18T00:38:32.915982+00:00"},{"alias_kind":"pith_short_12","alias_value":"JWD7MYEW2JGC","created_at":"2026-05-18T12:31:24.725408+00:00"},{"alias_kind":"pith_short_16","alias_value":"JWD7MYEW2JGC2DSK","created_at":"2026-05-18T12:31:24.725408+00:00"},{"alias_kind":"pith_short_8","alias_value":"JWD7MYEW","created_at":"2026-05-18T12:31:24.725408+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q","json":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q.json","graph_json":"https://pith.science/api/pith-number/JWD7MYEW2JGC2DSK7THAJ65D6Q/graph.json","events_json":"https://pith.science/api/pith-number/JWD7MYEW2JGC2DSK7THAJ65D6Q/events.json","paper":"https://pith.science/paper/JWD7MYEW"},"agent_actions":{"view_html":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q","download_json":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q.json","view_paper":"https://pith.science/paper/JWD7MYEW","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1708.01864&json=true","fetch_graph":"https://pith.science/api/pith-number/JWD7MYEW2JGC2DSK7THAJ65D6Q/graph.json","fetch_events":"https://pith.science/api/pith-number/JWD7MYEW2JGC2DSK7THAJ65D6Q/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q/action/timestamp_anchor","attest_storage":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q/action/storage_attestation","attest_author":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q/action/author_attestation","sign_citation":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q/action/citation_signature","submit_replication":"https://pith.science/pith/JWD7MYEW2JGC2DSK7THAJ65D6Q/action/replication_record"}},"created_at":"2026-05-18T00:38:32.915982+00:00","updated_at":"2026-05-18T00:38:32.915982+00:00"}