{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:U4U4TDCKR5MS3N36KLKD3ZPHNO","short_pith_number":"pith:U4U4TDCK","canonical_record":{"source":{"id":"1708.03513","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-11T12:11:23Z","cross_cats_sorted":[],"title_canon_sha256":"328af05f0e9967430ceac880c6b45d4fb1e62cd263466439f1fe8d4835a77a1a","abstract_canon_sha256":"63208fcaf3f8af3ab69161af93fc525ed640a6f816feff9d978c8dcab89c7562"},"schema_version":"1.0"},"canonical_sha256":"a729c98c4a8f592db77e52d43de5e76b8f94018690e53cd192ab93c658a80e0b","source":{"kind":"arxiv","id":"1708.03513","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.03513","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"arxiv_version","alias_value":"1708.03513v3","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.03513","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"pith_short_12","alias_value":"U4U4TDCKR5MS","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_16","alias_value":"U4U4TDCKR5MS3N36","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_8","alias_value":"U4U4TDCK","created_at":"2026-05-18T12:31:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:U4U4TDCKR5MS3N36KLKD3ZPHNO","target":"record","payload":{"canonical_record":{"source":{"id":"1708.03513","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-11T12:11:23Z","cross_cats_sorted":[],"title_canon_sha256":"328af05f0e9967430ceac880c6b45d4fb1e62cd263466439f1fe8d4835a77a1a","abstract_canon_sha256":"63208fcaf3f8af3ab69161af93fc525ed640a6f816feff9d978c8dcab89c7562"},"schema_version":"1.0"},"canonical_sha256":"a729c98c4a8f592db77e52d43de5e76b8f94018690e53cd192ab93c658a80e0b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:13:07.502348Z","signature_b64":"a+cZceEDai32+IyF0RoIivRxQcLLnoWTZeFt0pCKgwOvS4WupuCm02aIOTl17ME3UthWNh4tLGg0lxBlozz0BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a729c98c4a8f592db77e52d43de5e76b8f94018690e53cd192ab93c658a80e0b","last_reissued_at":"2026-05-18T00:13:07.501610Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:13:07.501610Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1708.03513","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bk7uFpwNnN5AkRnAu36vPTBYVu7dc7zcUZGWE7IJq1oMYxgXXy9Yeoc8l+YoNT6cgceOBc7Hc1h2BgKAqqwDBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T19:48:27.736462Z"},"content_sha256":"be5ff9009f7dff2daa152d3f3a6258a3f5e15b1e77a6d232287ce5de559ec7ab","schema_version":"1.0","event_id":"sha256:be5ff9009f7dff2daa152d3f3a6258a3f5e15b1e77a6d232287ce5de559ec7ab"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:U4U4TDCKR5MS3N36KLKD3ZPHNO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Early Stage Malware Prediction Using Recurrent Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Kevin Jones, Matilda Rhode, Pete Burnap","submitted_at":"2017-08-11T12:11:23Z","abstract_excerpt":"Static malware analysis is well-suited to endpoint anti-virus systems as it can be conducted quickly by examining the features of an executable piece of code and matching it to previously observed malicious code. However, static code analysis can be vulnerable to code obfuscation techniques. Behavioural data collected during file execution is more difficult to obfuscate, but takes a relatively long time to capture - typically up to 5 minutes, meaning the malicious payload has likely already been delivered by the time it is detected.\n  In this paper we investigate the possibility of predicting "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.03513","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W0hpnluQSqDawFBGG2lQj1q4nWhAX6Ug7ompnUpVAFJy+kO4UGKlcWbQVrl3WNTcO/1SSLoFloHeDRDtNB5NAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T19:48:27.737196Z"},"content_sha256":"60f4c5600394622e8e18ae02e56741e9f42fe45ecdb3865604c3b3122f0e286d","schema_version":"1.0","event_id":"sha256:60f4c5600394622e8e18ae02e56741e9f42fe45ecdb3865604c3b3122f0e286d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/bundle.json","state_url":"https://pith.science/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T19:48:27Z","links":{"resolver":"https://pith.science/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO","bundle":"https://pith.science/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/bundle.json","state":"https://pith.science/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U4U4TDCKR5MS3N36KLKD3ZPHNO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:U4U4TDCKR5MS3N36KLKD3ZPHNO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63208fcaf3f8af3ab69161af93fc525ed640a6f816feff9d978c8dcab89c7562","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-11T12:11:23Z","title_canon_sha256":"328af05f0e9967430ceac880c6b45d4fb1e62cd263466439f1fe8d4835a77a1a"},"schema_version":"1.0","source":{"id":"1708.03513","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.03513","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"arxiv_version","alias_value":"1708.03513v3","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.03513","created_at":"2026-05-18T00:13:07Z"},{"alias_kind":"pith_short_12","alias_value":"U4U4TDCKR5MS","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_16","alias_value":"U4U4TDCKR5MS3N36","created_at":"2026-05-18T12:31:46Z"},{"alias_kind":"pith_short_8","alias_value":"U4U4TDCK","created_at":"2026-05-18T12:31:46Z"}],"graph_snapshots":[{"event_id":"sha256:60f4c5600394622e8e18ae02e56741e9f42fe45ecdb3865604c3b3122f0e286d","target":"graph","created_at":"2026-05-18T00:13:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Static malware analysis is well-suited to endpoint anti-virus systems as it can be conducted quickly by examining the features of an executable piece of code and matching it to previously observed malicious code. However, static code analysis can be vulnerable to code obfuscation techniques. Behavioural data collected during file execution is more difficult to obfuscate, but takes a relatively long time to capture - typically up to 5 minutes, meaning the malicious payload has likely already been delivered by the time it is detected.\n  In this paper we investigate the possibility of predicting ","authors_text":"Kevin Jones, Matilda Rhode, Pete Burnap","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-11T12:11:23Z","title":"Early Stage Malware Prediction Using Recurrent Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.03513","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:be5ff9009f7dff2daa152d3f3a6258a3f5e15b1e77a6d232287ce5de559ec7ab","target":"record","created_at":"2026-05-18T00:13:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63208fcaf3f8af3ab69161af93fc525ed640a6f816feff9d978c8dcab89c7562","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-11T12:11:23Z","title_canon_sha256":"328af05f0e9967430ceac880c6b45d4fb1e62cd263466439f1fe8d4835a77a1a"},"schema_version":"1.0","source":{"id":"1708.03513","kind":"arxiv","version":3}},"canonical_sha256":"a729c98c4a8f592db77e52d43de5e76b8f94018690e53cd192ab93c658a80e0b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a729c98c4a8f592db77e52d43de5e76b8f94018690e53cd192ab93c658a80e0b","first_computed_at":"2026-05-18T00:13:07.501610Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:13:07.501610Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"a+cZceEDai32+IyF0RoIivRxQcLLnoWTZeFt0pCKgwOvS4WupuCm02aIOTl17ME3UthWNh4tLGg0lxBlozz0BA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:13:07.502348Z","signed_message":"canonical_sha256_bytes"},"source_id":"1708.03513","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:be5ff9009f7dff2daa152d3f3a6258a3f5e15b1e77a6d232287ce5de559ec7ab","sha256:60f4c5600394622e8e18ae02e56741e9f42fe45ecdb3865604c3b3122f0e286d"],"state_sha256":"ffa744fadf3d7302ff90e05aa528956e766b6af1a8e762c24071e34ac55de7af"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"znYsB/C7k6d1xzadgitJFRW2F729s8j1kWtiAh3jZVXlOxPR9T160Quy+VB0APQxXCQZx+YidoWqKBWXflquBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T19:48:27.741280Z","bundle_sha256":"75b1970a5d7b0a9c437f9c075d245e6d2cc2dea45fb9908990978d3cc9748e67"}}