{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:R6TUXCFZEBR3Z6EGGRMMOS5O4L","short_pith_number":"pith:R6TUXCFZ","schema_version":"1.0","canonical_sha256":"8fa74b88b92063bcf8863458c74baee2e6f12951f89603b7d82a1c1d450dfe20","source":{"kind":"arxiv","id":"2412.21084","version":1},"attestation_state":"computed","paper":{"title":"On the Generalizability of Machine Learning-based Ransomware Detection in Block Storage","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Dionysios Diamantopoulos, Nicolas Reategui, Roman Pletka","submitted_at":"2024-12-30T17:02:37Z","abstract_excerpt":"Ransomware represents a pervasive threat, traditionally countered at the operating system, file-system, or network levels. However, these approaches often introduce significant overhead and remain susceptible to circumvention by attackers. Recent research activity started looking into the detection of ransomware by observing block IO operations. However, this approach exhibits significant detection challenges. Recognizing these limitations, our research pivots towards enabling robust ransomware detection in storage systems keeping in mind their limited computational resources available. To per"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2412.21084","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-30T17:02:37Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"5e3fbd9a22fadb3d163f95e50ffcbaefe8bc693108450d572c5795b37591fdce","abstract_canon_sha256":"c078332d98b368629188bfdba1c4d65e19ab6c6ea34720a9ac019cb2e4b896de"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:55:27.199564Z","signature_b64":"Yt4NevokRSg90RBOlpPyMOFqfhzf+mR7j5w5A6XkKZFReDz7zYFP5p4teWQAhHc1hnpcg27IOjtYxC3N6mbzBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8fa74b88b92063bcf8863458c74baee2e6f12951f89603b7d82a1c1d450dfe20","last_reissued_at":"2026-07-05T09:55:27.199054Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:55:27.199054Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"On the Generalizability of Machine Learning-based Ransomware Detection in Block Storage","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Dionysios Diamantopoulos, Nicolas Reategui, Roman Pletka","submitted_at":"2024-12-30T17:02:37Z","abstract_excerpt":"Ransomware represents a pervasive threat, traditionally countered at the operating system, file-system, or network levels. However, these approaches often introduce significant overhead and remain susceptible to circumvention by attackers. Recent research activity started looking into the detection of ransomware by observing block IO operations. However, this approach exhibits significant detection challenges. Recognizing these limitations, our research pivots towards enabling robust ransomware detection in storage systems keeping in mind their limited computational resources available. To per"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.21084","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.21084/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2412.21084","created_at":"2026-07-05T09:55:27.199115+00:00"},{"alias_kind":"arxiv_version","alias_value":"2412.21084v1","created_at":"2026-07-05T09:55:27.199115+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.21084","created_at":"2026-07-05T09:55:27.199115+00:00"},{"alias_kind":"pith_short_12","alias_value":"R6TUXCFZEBR3","created_at":"2026-07-05T09:55:27.199115+00:00"},{"alias_kind":"pith_short_16","alias_value":"R6TUXCFZEBR3Z6EG","created_at":"2026-07-05T09:55:27.199115+00:00"},{"alias_kind":"pith_short_8","alias_value":"R6TUXCFZ","created_at":"2026-07-05T09:55:27.199115+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2502.05011","citing_title":"Learning the Language of NVMe Streams for Ransomware Detection","ref_index":8,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L","json":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L.json","graph_json":"https://pith.science/api/pith-number/R6TUXCFZEBR3Z6EGGRMMOS5O4L/graph.json","events_json":"https://pith.science/api/pith-number/R6TUXCFZEBR3Z6EGGRMMOS5O4L/events.json","paper":"https://pith.science/paper/R6TUXCFZ"},"agent_actions":{"view_html":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L","download_json":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L.json","view_paper":"https://pith.science/paper/R6TUXCFZ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2412.21084&json=true","fetch_graph":"https://pith.science/api/pith-number/R6TUXCFZEBR3Z6EGGRMMOS5O4L/graph.json","fetch_events":"https://pith.science/api/pith-number/R6TUXCFZEBR3Z6EGGRMMOS5O4L/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L/action/timestamp_anchor","attest_storage":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L/action/storage_attestation","attest_author":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L/action/author_attestation","sign_citation":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L/action/citation_signature","submit_replication":"https://pith.science/pith/R6TUXCFZEBR3Z6EGGRMMOS5O4L/action/replication_record"}},"created_at":"2026-07-05T09:55:27.199115+00:00","updated_at":"2026-07-05T09:55:27.199115+00:00"}