{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KTLEAREUEPAXCOKST642AKPGRA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f7c6d1fc3a8f3b5c5b593981d609620a90b28621ef6c0284f1de403f188641db","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-02T15:00:41Z","title_canon_sha256":"0aacb3cf451d05f8cb642abe8036852fb575351a01ecaa5148b73b1b4cdaee79"},"schema_version":"1.0","source":{"id":"2009.01122","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.01122","created_at":"2026-07-05T01:49:54Z"},{"alias_kind":"arxiv_version","alias_value":"2009.01122v1","created_at":"2026-07-05T01:49:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.01122","created_at":"2026-07-05T01:49:54Z"},{"alias_kind":"pith_short_12","alias_value":"KTLEAREUEPAX","created_at":"2026-07-05T01:49:54Z"},{"alias_kind":"pith_short_16","alias_value":"KTLEAREUEPAXCOKS","created_at":"2026-07-05T01:49:54Z"},{"alias_kind":"pith_short_8","alias_value":"KTLEAREU","created_at":"2026-07-05T01:49:54Z"}],"graph_snapshots":[{"event_id":"sha256:e147e0ee221c64a8cf40e0fee5d2620d24c07c8241d4cab2e80596c4fddf57ac","target":"graph","created_at":"2026-07-05T01:49:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.01122/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"State of the art deep learning techniques are known to be vulnerable to evasion attacks where an adversarial sample is generated from a malign sample and misclassified as benign. Detection of encrypted malware command and control traffic based on TCP/IP flow features can be framed as a learning task and is thus vulnerable to evasion attacks. However, unlike e.g. in image processing where generated adversarial samples can be directly mapped to images, going from flow features to actual TCP/IP packets requires crafting the sequence of packets, with no established approach for such crafting and a","authors_text":"Carlos Novo, INESC TEC), Ricardo Morla (University of Porto","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-02T15:00:41Z","title":"Flow-based detection and proxy-based evasion of encrypted malware C2 traffic"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.01122","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:68bc79f914ea523269b5e530fdf25bc9253fb31488c96d5ac1d87b22b557f7f8","target":"record","created_at":"2026-07-05T01:49:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f7c6d1fc3a8f3b5c5b593981d609620a90b28621ef6c0284f1de403f188641db","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-02T15:00:41Z","title_canon_sha256":"0aacb3cf451d05f8cb642abe8036852fb575351a01ecaa5148b73b1b4cdaee79"},"schema_version":"1.0","source":{"id":"2009.01122","kind":"arxiv","version":1}},"canonical_sha256":"54d640449423c17139529fb9a029e6881ffa303b2cafe7d5bc90754b175216ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"54d640449423c17139529fb9a029e6881ffa303b2cafe7d5bc90754b175216ae","first_computed_at":"2026-07-05T01:49:54.702632Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:49:54.702632Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l/8ysjGmf49o8KnFJYTDbjVhLVtqPpYg4YLGyLgD0aXCTc9Q+RYhzMsK0M6u1dy2mRv52KCiXC1fNPDF7ke9DA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:49:54.703053Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.01122","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:68bc79f914ea523269b5e530fdf25bc9253fb31488c96d5ac1d87b22b557f7f8","sha256:e147e0ee221c64a8cf40e0fee5d2620d24c07c8241d4cab2e80596c4fddf57ac"],"state_sha256":"a55864200a65bef266441eed6d8c939165aed03c18a2a1c1b8e8ec93b3bbf879"}