{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2014:TB6EL6XIFGEXT64ZCIH75P2X2Y","short_pith_number":"pith:TB6EL6XI","canonical_record":{"source":{"id":"1409.7760","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-09-27T04:00:59Z","cross_cats_sorted":["cs.PL","cs.SE","cs.SY"],"title_canon_sha256":"090b69d82947ea1b497662d3e1f5f29a601cabba0f394e5eae09681367716728","abstract_canon_sha256":"b4cd6836da8f84288e9dcde33ce204e82c46889f076f28093689f75ba6dbbc73"},"schema_version":"1.0"},"canonical_sha256":"987c45fae8298979fb99120ffebf57d6381549aa02e074a4443ef0a3e549ae81","source":{"kind":"arxiv","id":"1409.7760","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1409.7760","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"arxiv_version","alias_value":"1409.7760v1","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1409.7760","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"pith_short_12","alias_value":"TB6EL6XIFGEX","created_at":"2026-05-18T12:28:49Z"},{"alias_kind":"pith_short_16","alias_value":"TB6EL6XIFGEXT64Z","created_at":"2026-05-18T12:28:49Z"},{"alias_kind":"pith_short_8","alias_value":"TB6EL6XI","created_at":"2026-05-18T12:28:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2014:TB6EL6XIFGEXT64ZCIH75P2X2Y","target":"record","payload":{"canonical_record":{"source":{"id":"1409.7760","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-09-27T04:00:59Z","cross_cats_sorted":["cs.PL","cs.SE","cs.SY"],"title_canon_sha256":"090b69d82947ea1b497662d3e1f5f29a601cabba0f394e5eae09681367716728","abstract_canon_sha256":"b4cd6836da8f84288e9dcde33ce204e82c46889f076f28093689f75ba6dbbc73"},"schema_version":"1.0"},"canonical_sha256":"987c45fae8298979fb99120ffebf57d6381549aa02e074a4443ef0a3e549ae81","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:41:40.697446Z","signature_b64":"PUjPS1H3ayoaPJs6pS7htSIOTZHXc0gTMlySxmty+dgD4jtJJoJqD0jXbP0J0le3HdDvoZdAWFcYpeWi1OeaDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"987c45fae8298979fb99120ffebf57d6381549aa02e074a4443ef0a3e549ae81","last_reissued_at":"2026-05-18T02:41:40.696913Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:41:40.696913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1409.7760","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:41:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hAQx+tv9q91JGZCwt62CAqanP/d0m3rn9iHOE48lzTpEpCtsh9OXCUuLo6Nufi/oqNfTAUh4QRqoUzLpcTUSDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T22:53:58.286872Z"},"content_sha256":"02f04faa7eb4422aabab1befac26fe96ae2981727f871a2bb3c846752f3a0806","schema_version":"1.0","event_id":"sha256:02f04faa7eb4422aabab1befac26fe96ae2981727f871a2bb3c846752f3a0806"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2014:TB6EL6XIFGEXT64ZCIH75P2X2Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Similarity-based matching meets Malware Diversity","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.PL","cs.SE","cs.SY"],"primary_cat":"cs.CR","authors_text":"Mathias Payer, Michael Franz, Per Larsen, Richard Wartell, Stefan Brunthaler, Stephen Crane","submitted_at":"2014-09-27T04:00:59Z","abstract_excerpt":"Similarity metrics, e.g., signatures as used by anti-virus products, are the dominant technique to detect if a given binary is malware. The underlying assumption of this approach is that all instances of a malware (or even malware family) will be similar to each other.\n  Software diversification is a probabilistic technique that uses code and data randomization and expressiveness in the target instruction set to generate large amounts of functionally equivalent but different binaries. Malware diversity builds on software diversity and ensures that any two diversified instances of the same malw"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1409.7760","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:41:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Uu+FIqrwbVHl4EdSJACR3azKWGkKIr7Si4zbYHU3364HewplzTZADR4R9I868z23l/TTjQ4boKx9cY8Ru3E3BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-26T22:53:58.287238Z"},"content_sha256":"a8c3a7ade1b6a88d88ccdb6618c97915563a822feeefddc497698acfe549ea33","schema_version":"1.0","event_id":"sha256:a8c3a7ade1b6a88d88ccdb6618c97915563a822feeefddc497698acfe549ea33"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/bundle.json","state_url":"https://pith.science/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-26T22:53:58Z","links":{"resolver":"https://pith.science/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y","bundle":"https://pith.science/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/bundle.json","state":"https://pith.science/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TB6EL6XIFGEXT64ZCIH75P2X2Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:TB6EL6XIFGEXT64ZCIH75P2X2Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b4cd6836da8f84288e9dcde33ce204e82c46889f076f28093689f75ba6dbbc73","cross_cats_sorted":["cs.PL","cs.SE","cs.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-09-27T04:00:59Z","title_canon_sha256":"090b69d82947ea1b497662d3e1f5f29a601cabba0f394e5eae09681367716728"},"schema_version":"1.0","source":{"id":"1409.7760","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1409.7760","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"arxiv_version","alias_value":"1409.7760v1","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1409.7760","created_at":"2026-05-18T02:41:40Z"},{"alias_kind":"pith_short_12","alias_value":"TB6EL6XIFGEX","created_at":"2026-05-18T12:28:49Z"},{"alias_kind":"pith_short_16","alias_value":"TB6EL6XIFGEXT64Z","created_at":"2026-05-18T12:28:49Z"},{"alias_kind":"pith_short_8","alias_value":"TB6EL6XI","created_at":"2026-05-18T12:28:49Z"}],"graph_snapshots":[{"event_id":"sha256:a8c3a7ade1b6a88d88ccdb6618c97915563a822feeefddc497698acfe549ea33","target":"graph","created_at":"2026-05-18T02:41:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Similarity metrics, e.g., signatures as used by anti-virus products, are the dominant technique to detect if a given binary is malware. The underlying assumption of this approach is that all instances of a malware (or even malware family) will be similar to each other.\n  Software diversification is a probabilistic technique that uses code and data randomization and expressiveness in the target instruction set to generate large amounts of functionally equivalent but different binaries. Malware diversity builds on software diversity and ensures that any two diversified instances of the same malw","authors_text":"Mathias Payer, Michael Franz, Per Larsen, Richard Wartell, Stefan Brunthaler, Stephen Crane","cross_cats":["cs.PL","cs.SE","cs.SY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-09-27T04:00:59Z","title":"Similarity-based matching meets Malware Diversity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1409.7760","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:02f04faa7eb4422aabab1befac26fe96ae2981727f871a2bb3c846752f3a0806","target":"record","created_at":"2026-05-18T02:41:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b4cd6836da8f84288e9dcde33ce204e82c46889f076f28093689f75ba6dbbc73","cross_cats_sorted":["cs.PL","cs.SE","cs.SY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-09-27T04:00:59Z","title_canon_sha256":"090b69d82947ea1b497662d3e1f5f29a601cabba0f394e5eae09681367716728"},"schema_version":"1.0","source":{"id":"1409.7760","kind":"arxiv","version":1}},"canonical_sha256":"987c45fae8298979fb99120ffebf57d6381549aa02e074a4443ef0a3e549ae81","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"987c45fae8298979fb99120ffebf57d6381549aa02e074a4443ef0a3e549ae81","first_computed_at":"2026-05-18T02:41:40.696913Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:41:40.696913Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PUjPS1H3ayoaPJs6pS7htSIOTZHXc0gTMlySxmty+dgD4jtJJoJqD0jXbP0J0le3HdDvoZdAWFcYpeWi1OeaDQ==","signature_status":"signed_v1","signed_at":"2026-05-18T02:41:40.697446Z","signed_message":"canonical_sha256_bytes"},"source_id":"1409.7760","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:02f04faa7eb4422aabab1befac26fe96ae2981727f871a2bb3c846752f3a0806","sha256:a8c3a7ade1b6a88d88ccdb6618c97915563a822feeefddc497698acfe549ea33"],"state_sha256":"4708c7288192cecf6f78e9bbdf89df8bf982180cc277fce0f119dbc7b0c3e81e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VBRZ0l2mu9hP9XV6ryJcgzsPJNnDIFIEhjbc0iQz6RI5C46ErXFKNF+jfiAeGymEwr/G/OIlE001aGs8pj4uBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-26T22:53:58.290079Z","bundle_sha256":"b18fb9846a37208c63c716f300532b628e6c10dc55477e5703ba8fd0436c635e"}}