{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:KYL2EPE4K3CGAS2KKEG6ESUVCE","short_pith_number":"pith:KYL2EPE4","canonical_record":{"source":{"id":"2212.02663","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T23:49:04Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"88820e7188a20f5fdb1a2f6b3863e07d199a95a5c5757d07fb66ac7028a5c1e0","abstract_canon_sha256":"5c23c18cf612986b158a7213e1f4d42b41dad0a88f4d460cb49a9c7e9b80c5c3"},"schema_version":"1.0"},"canonical_sha256":"5617a23c9c56c4604b4a510de24a95111e0e6ec8ff7848d9bb5b57fec5641205","source":{"kind":"arxiv","id":"2212.02663","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.02663","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"arxiv_version","alias_value":"2212.02663v1","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.02663","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_12","alias_value":"KYL2EPE4K3CG","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_16","alias_value":"KYL2EPE4K3CGAS2K","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_8","alias_value":"KYL2EPE4","created_at":"2026-07-05T05:22:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:KYL2EPE4K3CGAS2KKEG6ESUVCE","target":"record","payload":{"canonical_record":{"source":{"id":"2212.02663","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T23:49:04Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"88820e7188a20f5fdb1a2f6b3863e07d199a95a5c5757d07fb66ac7028a5c1e0","abstract_canon_sha256":"5c23c18cf612986b158a7213e1f4d42b41dad0a88f4d460cb49a9c7e9b80c5c3"},"schema_version":"1.0"},"canonical_sha256":"5617a23c9c56c4604b4a510de24a95111e0e6ec8ff7848d9bb5b57fec5641205","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:22:33.041353Z","signature_b64":"QasnVx1D9k0xNgSzCGM5ZofvMUT3UuvCTmGCfzlLS2tA/Kg/d8a66JpZH9hNERkqXvf5d1ilYrYZm1Q6/dR/Bw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5617a23c9c56c4604b4a510de24a95111e0e6ec8ff7848d9bb5b57fec5641205","last_reissued_at":"2026-07-05T05:22:33.040935Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:22:33.040935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.02663","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:22:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tON9uhV4JBPVymxFM3cPyFZlDtOEtWAf4vxTys05IQ4ZMicxS3OQvqsSglj6HKkqfwKZAOLzqi73rwW8NE3IAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T21:58:46.836567Z"},"content_sha256":"688315cc404d0b5db08089ef097832e4df307f3b4b070043d302fbcc745bb220","schema_version":"1.0","event_id":"sha256:688315cc404d0b5db08089ef097832e4df307f3b4b070043d302fbcc745bb220"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:KYL2EPE4K3CGAS2KKEG6ESUVCE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Efficient Malware Analysis Using Metric Embeddings","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Daniel Olszewski, David Krisiloff, Edward Raff, Ethan M. Rudd, James Holt, Scott Coull","submitted_at":"2022-12-05T23:49:04Z","abstract_excerpt":"In this paper, we explore the use of metric learning to embed Windows PE files in a low-dimensional vector space for downstream use in a variety of applications, including malware detection, family classification, and malware attribute tagging. Specifically, we enrich labeling on malicious and benign PE files using computationally expensive, disassembly-based malicious capabilities. Using these capabilities, we derive several different types of metric embeddings utilizing an embedding neural network trained via contrastive loss, Spearman rank correlation, and combinations thereof. We then exam"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.02663","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.02663/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:22:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZnKPa8KHRYkT42hifOouTE+l7h4y2cMD0cowAGBZA8D9Q2gzKMJpBTVM+Afzsermu5zOO3a8fwBgSyfJKKkrCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-11T21:58:46.837188Z"},"content_sha256":"20b1b15ba78a420f338a823d2c177fe431358dc732b5de6e94e83c663c91c243","schema_version":"1.0","event_id":"sha256:20b1b15ba78a420f338a823d2c177fe431358dc732b5de6e94e83c663c91c243"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/bundle.json","state_url":"https://pith.science/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-11T21:58:46Z","links":{"resolver":"https://pith.science/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE","bundle":"https://pith.science/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/bundle.json","state":"https://pith.science/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KYL2EPE4K3CGAS2KKEG6ESUVCE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:KYL2EPE4K3CGAS2KKEG6ESUVCE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5c23c18cf612986b158a7213e1f4d42b41dad0a88f4d460cb49a9c7e9b80c5c3","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T23:49:04Z","title_canon_sha256":"88820e7188a20f5fdb1a2f6b3863e07d199a95a5c5757d07fb66ac7028a5c1e0"},"schema_version":"1.0","source":{"id":"2212.02663","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.02663","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"arxiv_version","alias_value":"2212.02663v1","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.02663","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_12","alias_value":"KYL2EPE4K3CG","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_16","alias_value":"KYL2EPE4K3CGAS2K","created_at":"2026-07-05T05:22:33Z"},{"alias_kind":"pith_short_8","alias_value":"KYL2EPE4","created_at":"2026-07-05T05:22:33Z"}],"graph_snapshots":[{"event_id":"sha256:20b1b15ba78a420f338a823d2c177fe431358dc732b5de6e94e83c663c91c243","target":"graph","created_at":"2026-07-05T05:22:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.02663/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we explore the use of metric learning to embed Windows PE files in a low-dimensional vector space for downstream use in a variety of applications, including malware detection, family classification, and malware attribute tagging. Specifically, we enrich labeling on malicious and benign PE files using computationally expensive, disassembly-based malicious capabilities. Using these capabilities, we derive several different types of metric embeddings utilizing an embedding neural network trained via contrastive loss, Spearman rank correlation, and combinations thereof. We then exam","authors_text":"Daniel Olszewski, David Krisiloff, Edward Raff, Ethan M. Rudd, James Holt, Scott Coull","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T23:49:04Z","title":"Efficient Malware Analysis Using Metric Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.02663","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:688315cc404d0b5db08089ef097832e4df307f3b4b070043d302fbcc745bb220","target":"record","created_at":"2026-07-05T05:22:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5c23c18cf612986b158a7213e1f4d42b41dad0a88f4d460cb49a9c7e9b80c5c3","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-12-05T23:49:04Z","title_canon_sha256":"88820e7188a20f5fdb1a2f6b3863e07d199a95a5c5757d07fb66ac7028a5c1e0"},"schema_version":"1.0","source":{"id":"2212.02663","kind":"arxiv","version":1}},"canonical_sha256":"5617a23c9c56c4604b4a510de24a95111e0e6ec8ff7848d9bb5b57fec5641205","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5617a23c9c56c4604b4a510de24a95111e0e6ec8ff7848d9bb5b57fec5641205","first_computed_at":"2026-07-05T05:22:33.040935Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:22:33.040935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QasnVx1D9k0xNgSzCGM5ZofvMUT3UuvCTmGCfzlLS2tA/Kg/d8a66JpZH9hNERkqXvf5d1ilYrYZm1Q6/dR/Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:22:33.041353Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.02663","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:688315cc404d0b5db08089ef097832e4df307f3b4b070043d302fbcc745bb220","sha256:20b1b15ba78a420f338a823d2c177fe431358dc732b5de6e94e83c663c91c243"],"state_sha256":"f2195952240fda3ed8581277c03e8ad4b5a2e7dea8edd80efe04db74801281db"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"42ZJn7K1u0nRbq30hWWgF49InReDBrrH4l7iKLjlfD/JUpGf3AZJi6bkSyPG+Nq12wHbJt3efMXQfnNwvROpCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-11T21:58:46.840705Z","bundle_sha256":"e82510d85dd962033ac78968135b8dfd505e21d84b105e3d8040975cb05ca048"}}