{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:VPTICRERSIDSAWAH6IED6GV5PZ","short_pith_number":"pith:VPTICRER","canonical_record":{"source":{"id":"2504.14886","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T06:30:21Z","cross_cats_sorted":[],"title_canon_sha256":"5bf113218b9d0ce49b2c283ce6462038797cbacab5a005c25624c6935ec58791","abstract_canon_sha256":"3e8a4f5d4d081a076c03cc677cd35a6de11aa4efa2649366c1db42b23455b3fc"},"schema_version":"1.0"},"canonical_sha256":"abe68144919207205807f2083f1abd7e65070888df4122255139bbe3f5205021","source":{"kind":"arxiv","id":"2504.14886","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.14886","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"arxiv_version","alias_value":"2504.14886v1","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.14886","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_12","alias_value":"VPTICRERSIDS","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_16","alias_value":"VPTICRERSIDSAWAH","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_8","alias_value":"VPTICRER","created_at":"2026-07-05T10:51:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:VPTICRERSIDSAWAH6IED6GV5PZ","target":"record","payload":{"canonical_record":{"source":{"id":"2504.14886","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T06:30:21Z","cross_cats_sorted":[],"title_canon_sha256":"5bf113218b9d0ce49b2c283ce6462038797cbacab5a005c25624c6935ec58791","abstract_canon_sha256":"3e8a4f5d4d081a076c03cc677cd35a6de11aa4efa2649366c1db42b23455b3fc"},"schema_version":"1.0"},"canonical_sha256":"abe68144919207205807f2083f1abd7e65070888df4122255139bbe3f5205021","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:51:52.249933Z","signature_b64":"Pc1pe/AKhni7oykx1jqWQ5/wGfgY6tlWyrsHjak9pC7XUtKLCvukA9zJ13CAGD891aCiQtg9vl6Mgvc25pOqCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"abe68144919207205807f2083f1abd7e65070888df4122255139bbe3f5205021","last_reissued_at":"2026-07-05T10:51:52.249397Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:51:52.249397Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2504.14886","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:51:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/PBwrj1ZjX5Suqz//BaCJ5lVYGGLzxGi+KRAn048XLPgcJDHyzGuFliKSEBlFZbm2Pqx0hE0sFufyJDfot13Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T12:41:15.160177Z"},"content_sha256":"5e79fe1d48eb32a3ae3f00c297e639b3e089f197987117c3f5bf4da53debd5af","schema_version":"1.0","event_id":"sha256:5e79fe1d48eb32a3ae3f00c297e639b3e089f197987117c3f5bf4da53debd5af"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:VPTICRERSIDSAWAH6IED6GV5PZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Zero Day Malware Detection with Alpha: Fast DBI with Transformer Models for Real World Application","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Helge Janicke, Matthew Gaber, Mohiuddin Ahmed","submitted_at":"2025-04-21T06:30:21Z","abstract_excerpt":"The effectiveness of an AI model in accurately classifying novel malware hinges on the quality of the features it is trained on, which in turn depends on the effectiveness of the analysis tool used. Peekaboo, a Dynamic Binary Instrumentation (DBI) tool, defeats malware evasion techniques to capture authentic behavior at the Assembly (ASM) instruction level. This behavior exhibits patterns consistent with Zipf's law, a distribution commonly seen in natural languages, making Transformer models particularly effective for binary classification tasks. We introduce Alpha, a framework for zero day ma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.14886","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2504.14886/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:51:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rUQ68uHe7qxdlk+LoCNP81lF6aAQ/ibNQNQVzTeX/3+R+dNyK6mKBtzeFJkFI8mP6QNwCPOFPzxCtTUI3/9SBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T12:41:15.160682Z"},"content_sha256":"734648d82e621dc89cfc3bd917ba4d4f70ffde1b99d703010949accdb1696aa2","schema_version":"1.0","event_id":"sha256:734648d82e621dc89cfc3bd917ba4d4f70ffde1b99d703010949accdb1696aa2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VPTICRERSIDSAWAH6IED6GV5PZ/bundle.json","state_url":"https://pith.science/pith/VPTICRERSIDSAWAH6IED6GV5PZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VPTICRERSIDSAWAH6IED6GV5PZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T12:41:15Z","links":{"resolver":"https://pith.science/pith/VPTICRERSIDSAWAH6IED6GV5PZ","bundle":"https://pith.science/pith/VPTICRERSIDSAWAH6IED6GV5PZ/bundle.json","state":"https://pith.science/pith/VPTICRERSIDSAWAH6IED6GV5PZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VPTICRERSIDSAWAH6IED6GV5PZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:VPTICRERSIDSAWAH6IED6GV5PZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3e8a4f5d4d081a076c03cc677cd35a6de11aa4efa2649366c1db42b23455b3fc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T06:30:21Z","title_canon_sha256":"5bf113218b9d0ce49b2c283ce6462038797cbacab5a005c25624c6935ec58791"},"schema_version":"1.0","source":{"id":"2504.14886","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2504.14886","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"arxiv_version","alias_value":"2504.14886v1","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2504.14886","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_12","alias_value":"VPTICRERSIDS","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_16","alias_value":"VPTICRERSIDSAWAH","created_at":"2026-07-05T10:51:52Z"},{"alias_kind":"pith_short_8","alias_value":"VPTICRER","created_at":"2026-07-05T10:51:52Z"}],"graph_snapshots":[{"event_id":"sha256:734648d82e621dc89cfc3bd917ba4d4f70ffde1b99d703010949accdb1696aa2","target":"graph","created_at":"2026-07-05T10:51:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2504.14886/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The effectiveness of an AI model in accurately classifying novel malware hinges on the quality of the features it is trained on, which in turn depends on the effectiveness of the analysis tool used. Peekaboo, a Dynamic Binary Instrumentation (DBI) tool, defeats malware evasion techniques to capture authentic behavior at the Assembly (ASM) instruction level. This behavior exhibits patterns consistent with Zipf's law, a distribution commonly seen in natural languages, making Transformer models particularly effective for binary classification tasks. We introduce Alpha, a framework for zero day ma","authors_text":"Helge Janicke, Matthew Gaber, Mohiuddin Ahmed","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T06:30:21Z","title":"Zero Day Malware Detection with Alpha: Fast DBI with Transformer Models for Real World Application"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2504.14886","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5e79fe1d48eb32a3ae3f00c297e639b3e089f197987117c3f5bf4da53debd5af","target":"record","created_at":"2026-07-05T10:51:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3e8a4f5d4d081a076c03cc677cd35a6de11aa4efa2649366c1db42b23455b3fc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-04-21T06:30:21Z","title_canon_sha256":"5bf113218b9d0ce49b2c283ce6462038797cbacab5a005c25624c6935ec58791"},"schema_version":"1.0","source":{"id":"2504.14886","kind":"arxiv","version":1}},"canonical_sha256":"abe68144919207205807f2083f1abd7e65070888df4122255139bbe3f5205021","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"abe68144919207205807f2083f1abd7e65070888df4122255139bbe3f5205021","first_computed_at":"2026-07-05T10:51:52.249397Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:51:52.249397Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Pc1pe/AKhni7oykx1jqWQ5/wGfgY6tlWyrsHjak9pC7XUtKLCvukA9zJ13CAGD891aCiQtg9vl6Mgvc25pOqCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:51:52.249933Z","signed_message":"canonical_sha256_bytes"},"source_id":"2504.14886","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5e79fe1d48eb32a3ae3f00c297e639b3e089f197987117c3f5bf4da53debd5af","sha256:734648d82e621dc89cfc3bd917ba4d4f70ffde1b99d703010949accdb1696aa2"],"state_sha256":"ba65d92e91b0e11341fe2b18b5ff11cde5a37205f4aa827c644bdfca25d7983d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1O6bw67o7a0IGAtBS9Jxq6aS01btjqYC3A0i6CGIt0N2IYq1KFfh3eN2S4RRx0GrIQ9Rjsb1vPVDrBg/4gNSAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T12:41:15.165728Z","bundle_sha256":"075104237e33806742cbbc09712beea4443ab5a40be71cdccc01337f85420be1"}}