{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:T5CVWRWTJCOV4S7RTG35BRGXRU","short_pith_number":"pith:T5CVWRWT","canonical_record":{"source":{"id":"2407.13918","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T22:06:20Z","cross_cats_sorted":[],"title_canon_sha256":"81a2af7b02fe42fd7567921537732044ee61b150e30fb24d1457297fa7f73134","abstract_canon_sha256":"14296e3e8386df33c211c0b7dec082cdf9f7392f3c498dd7151380163beb4c3b"},"schema_version":"1.0"},"canonical_sha256":"9f455b46d3489d5e4bf199b7d0c4d78d1d56aa054cfd343928fb346f30144489","source":{"kind":"arxiv","id":"2407.13918","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13918","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13918v2","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13918","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_12","alias_value":"T5CVWRWTJCOV","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_16","alias_value":"T5CVWRWTJCOV4S7R","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_8","alias_value":"T5CVWRWT","created_at":"2026-07-05T09:52:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:T5CVWRWTJCOV4S7RTG35BRGXRU","target":"record","payload":{"canonical_record":{"source":{"id":"2407.13918","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T22:06:20Z","cross_cats_sorted":[],"title_canon_sha256":"81a2af7b02fe42fd7567921537732044ee61b150e30fb24d1457297fa7f73134","abstract_canon_sha256":"14296e3e8386df33c211c0b7dec082cdf9f7392f3c498dd7151380163beb4c3b"},"schema_version":"1.0"},"canonical_sha256":"9f455b46d3489d5e4bf199b7d0c4d78d1d56aa054cfd343928fb346f30144489","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:52:13.842327Z","signature_b64":"i6Mr5TKEA1uCRrNRCKylUbrGSVlfnBg/S+CS+RNDYOtfWWD4MJL9G4VlP3rjlWDXmw8hodrkKr5957WQxlXJBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9f455b46d3489d5e4bf199b7d0c4d78d1d56aa054cfd343928fb346f30144489","last_reissued_at":"2026-07-05T09:52:13.841830Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:52:13.841830Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.13918","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kMI1M3ctA3TlnXuJIYSRS37aCa6AMWwAxSxgGEoDBaAys12eXqHT19ZRGEpPK68v+mrkQw8lNvPaVeMf5XRFAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:22:40.680036Z"},"content_sha256":"c264c67bd3251f36f81e85e395337f163583127e5b95cc83c33a59cd096eb285","schema_version":"1.0","event_id":"sha256:c264c67bd3251f36f81e85e395337f163583127e5b95cc83c33a59cd096eb285"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:T5CVWRWTJCOV4S7RTG35BRGXRU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Revisiting Concept Drift in Windows Malware Detection: Adaptation to Real Drifted Malware with Minimal Samples","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Adrian Shuai Li, Arun Iyengar, Ashish Kundu, Elisa Bertino","submitted_at":"2024-07-18T22:06:20Z","abstract_excerpt":"In applying deep learning for malware classification, it is crucial to account for the prevalence of malware evolution, which can cause trained classifiers to fail on drifted malware. Existing solutions to address concept drift use active learning. They select new samples for analysts to label and then retrain the classifier with the new labels. Our key finding is that the current retraining techniques do not achieve optimal results. These techniques overlook that updating the model with scarce drifted samples requires learning features that remain consistent across pre-drift and post-drift da"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13918","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.13918/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:52:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xPaVUZoNxobijfBDunR/gzwmlYzwtrBvZn4y2sLp5QX7WM2AhI/gmCmg5ve5efN2OXb7tko4qm8Om93EszvgBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T16:22:40.680926Z"},"content_sha256":"89e0d13bc328d2b127920859d91a2e91c133eef31001b1dd04084e08caa83aad","schema_version":"1.0","event_id":"sha256:89e0d13bc328d2b127920859d91a2e91c133eef31001b1dd04084e08caa83aad"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/bundle.json","state_url":"https://pith.science/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T16:22:40Z","links":{"resolver":"https://pith.science/pith/T5CVWRWTJCOV4S7RTG35BRGXRU","bundle":"https://pith.science/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/bundle.json","state":"https://pith.science/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T5CVWRWTJCOV4S7RTG35BRGXRU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:T5CVWRWTJCOV4S7RTG35BRGXRU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"14296e3e8386df33c211c0b7dec082cdf9f7392f3c498dd7151380163beb4c3b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T22:06:20Z","title_canon_sha256":"81a2af7b02fe42fd7567921537732044ee61b150e30fb24d1457297fa7f73134"},"schema_version":"1.0","source":{"id":"2407.13918","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.13918","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"arxiv_version","alias_value":"2407.13918v2","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.13918","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_12","alias_value":"T5CVWRWTJCOV","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_16","alias_value":"T5CVWRWTJCOV4S7R","created_at":"2026-07-05T09:52:13Z"},{"alias_kind":"pith_short_8","alias_value":"T5CVWRWT","created_at":"2026-07-05T09:52:13Z"}],"graph_snapshots":[{"event_id":"sha256:89e0d13bc328d2b127920859d91a2e91c133eef31001b1dd04084e08caa83aad","target":"graph","created_at":"2026-07-05T09:52:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.13918/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In applying deep learning for malware classification, it is crucial to account for the prevalence of malware evolution, which can cause trained classifiers to fail on drifted malware. Existing solutions to address concept drift use active learning. They select new samples for analysts to label and then retrain the classifier with the new labels. Our key finding is that the current retraining techniques do not achieve optimal results. These techniques overlook that updating the model with scarce drifted samples requires learning features that remain consistent across pre-drift and post-drift da","authors_text":"Adrian Shuai Li, Arun Iyengar, Ashish Kundu, Elisa Bertino","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T22:06:20Z","title":"Revisiting Concept Drift in Windows Malware Detection: Adaptation to Real Drifted Malware with Minimal Samples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.13918","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c264c67bd3251f36f81e85e395337f163583127e5b95cc83c33a59cd096eb285","target":"record","created_at":"2026-07-05T09:52:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"14296e3e8386df33c211c0b7dec082cdf9f7392f3c498dd7151380163beb4c3b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-07-18T22:06:20Z","title_canon_sha256":"81a2af7b02fe42fd7567921537732044ee61b150e30fb24d1457297fa7f73134"},"schema_version":"1.0","source":{"id":"2407.13918","kind":"arxiv","version":2}},"canonical_sha256":"9f455b46d3489d5e4bf199b7d0c4d78d1d56aa054cfd343928fb346f30144489","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9f455b46d3489d5e4bf199b7d0c4d78d1d56aa054cfd343928fb346f30144489","first_computed_at":"2026-07-05T09:52:13.841830Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:52:13.841830Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i6Mr5TKEA1uCRrNRCKylUbrGSVlfnBg/S+CS+RNDYOtfWWD4MJL9G4VlP3rjlWDXmw8hodrkKr5957WQxlXJBw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:52:13.842327Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.13918","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c264c67bd3251f36f81e85e395337f163583127e5b95cc83c33a59cd096eb285","sha256:89e0d13bc328d2b127920859d91a2e91c133eef31001b1dd04084e08caa83aad"],"state_sha256":"df56faf285bedc48bf5122edade6f898e554d79e167e99a46c93563a6ca69c2f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bre3vQ0oz8s5u7XqxJYDm2IQg6ZM3WKWrkCTRZdvkolPJoAAkpUx8Y79m3XhJjCRzvNShQDrUZZGqvklKmNrBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T16:22:40.687614Z","bundle_sha256":"8c7fd205ca30884d535c9338ba7bff5425f16d43e8cbd25f04e6a2bb94c3f87d"}}