{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:W3FZODD4DTQKK57EQSZDJGS7YS","short_pith_number":"pith:W3FZODD4","schema_version":"1.0","canonical_sha256":"b6cb970c7c1ce0a577e484b2349a5fc49de522d8c21c412f14aa104b8909c328","source":{"kind":"arxiv","id":"2606.03218","version":1},"attestation_state":"computed","paper":{"title":"The Role of Domain-Specific Features in Malware Detection: A macOS Case Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andrea Oliveri, Biagio Montaruli, Davide Balzarotti, Savino Dambra","submitted_at":"2026-06-02T06:25:31Z","abstract_excerpt":"Despite the growing popularity of macOS among end users and enterprise systems, malware research has primarily focused on Windows and Android operating systems, leaving the problem of macOS malware detection relatively unexplored. Indeed, the specificity of the operating system and the unique characteristics of the Mach-O file format can play a fundamental role in the classification of unknown samples, drastically increasing the detection rate. In this work, for the first time in the literature, we employ new domain-specific features, i.e., static features specific to macOS binaries, such as e"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.03218","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-02T06:25:31Z","cross_cats_sorted":[],"title_canon_sha256":"f41aba8f50d0b741fe186a0a9f492c9b294bfc7ec8c1c8af9751f09d1f9eefe1","abstract_canon_sha256":"a23b5503add37265700491ac5ddfed6e853dd1ca0f63982724a2ba6f3303bb68"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-03T01:05:35.175757Z","signature_b64":"kf7xAT1Fw5ALKt5ci8PY62sqx5m9Ld+oCsFPG/1pCMVxErLiBDu++BQjSOPR9NHGkAARnfXlt24S1okrF0XAAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b6cb970c7c1ce0a577e484b2349a5fc49de522d8c21c412f14aa104b8909c328","last_reissued_at":"2026-06-03T01:05:35.175343Z","signature_status":"signed_v1","first_computed_at":"2026-06-03T01:05:35.175343Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"The Role of Domain-Specific Features in Malware Detection: A macOS Case Study","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andrea Oliveri, Biagio Montaruli, Davide Balzarotti, Savino Dambra","submitted_at":"2026-06-02T06:25:31Z","abstract_excerpt":"Despite the growing popularity of macOS among end users and enterprise systems, malware research has primarily focused on Windows and Android operating systems, leaving the problem of macOS malware detection relatively unexplored. Indeed, the specificity of the operating system and the unique characteristics of the Mach-O file format can play a fundamental role in the classification of unknown samples, drastically increasing the detection rate. In this work, for the first time in the literature, we employ new domain-specific features, i.e., static features specific to macOS binaries, such as e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.03218","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.03218/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.03218","created_at":"2026-06-03T01:05:35.175402+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.03218v1","created_at":"2026-06-03T01:05:35.175402+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.03218","created_at":"2026-06-03T01:05:35.175402+00:00"},{"alias_kind":"pith_short_12","alias_value":"W3FZODD4DTQK","created_at":"2026-06-03T01:05:35.175402+00:00"},{"alias_kind":"pith_short_16","alias_value":"W3FZODD4DTQKK57E","created_at":"2026-06-03T01:05:35.175402+00:00"},{"alias_kind":"pith_short_8","alias_value":"W3FZODD4","created_at":"2026-06-03T01:05:35.175402+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS","json":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS.json","graph_json":"https://pith.science/api/pith-number/W3FZODD4DTQKK57EQSZDJGS7YS/graph.json","events_json":"https://pith.science/api/pith-number/W3FZODD4DTQKK57EQSZDJGS7YS/events.json","paper":"https://pith.science/paper/W3FZODD4"},"agent_actions":{"view_html":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS","download_json":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS.json","view_paper":"https://pith.science/paper/W3FZODD4","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.03218&json=true","fetch_graph":"https://pith.science/api/pith-number/W3FZODD4DTQKK57EQSZDJGS7YS/graph.json","fetch_events":"https://pith.science/api/pith-number/W3FZODD4DTQKK57EQSZDJGS7YS/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS/action/timestamp_anchor","attest_storage":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS/action/storage_attestation","attest_author":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS/action/author_attestation","sign_citation":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS/action/citation_signature","submit_replication":"https://pith.science/pith/W3FZODD4DTQKK57EQSZDJGS7YS/action/replication_record"}},"created_at":"2026-06-03T01:05:35.175402+00:00","updated_at":"2026-06-03T01:05:35.175402+00:00"}