{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:WATU5RCREWVYLUDEF5TD4PHURG","short_pith_number":"pith:WATU5RCR","canonical_record":{"source":{"id":"1710.08189","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-10-23T10:35:35Z","cross_cats_sorted":[],"title_canon_sha256":"5ee55c05647faef2142b490df570f1d12897b441f081baf020d10ea6d8aee735","abstract_canon_sha256":"e53ef54923bc2189fcdd824da5be2dd62abdf305f50db60523abc88e0ae21d97"},"schema_version":"1.0"},"canonical_sha256":"b0274ec45125ab85d0642f663e3cf489b670db7be444029f84a10acf3b888778","source":{"kind":"arxiv","id":"1710.08189","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1710.08189","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"arxiv_version","alias_value":"1710.08189v3","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.08189","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"pith_short_12","alias_value":"WATU5RCREWVY","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_16","alias_value":"WATU5RCREWVYLUDE","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_8","alias_value":"WATU5RCR","created_at":"2026-05-18T12:31:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:WATU5RCREWVYLUDEF5TD4PHURG","target":"record","payload":{"canonical_record":{"source":{"id":"1710.08189","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-10-23T10:35:35Z","cross_cats_sorted":[],"title_canon_sha256":"5ee55c05647faef2142b490df570f1d12897b441f081baf020d10ea6d8aee735","abstract_canon_sha256":"e53ef54923bc2189fcdd824da5be2dd62abdf305f50db60523abc88e0ae21d97"},"schema_version":"1.0"},"canonical_sha256":"b0274ec45125ab85d0642f663e3cf489b670db7be444029f84a10acf3b888778","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:59:58.255433Z","signature_b64":"KtCsfeuRj4dWthAUl7JdYR5fb9HRm76cInfx5JhErSjDZ7mxkh/Fr7hiLnURkBhSvGh7PBo6rsSGnCvv0QrmDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0274ec45125ab85d0642f663e3cf489b670db7be444029f84a10acf3b888778","last_reissued_at":"2026-05-17T23:59:58.254767Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:59:58.254767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1710.08189","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CbmmfEoWtMQThi5kF94SmQ2/HzndCaTF6LmZHzqSwBu5bLZj6j+MCDK5bZcIrEV77vpop5i8EvAmB7tPk3Y0CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T03:12:24.321653Z"},"content_sha256":"1af483db73e513ad68f0b7bb7b8fb5f99260e274d885c2052f1097a9391431df","schema_version":"1.0","event_id":"sha256:1af483db73e513ad68f0b7bb7b8fb5f99260e274d885c2052f1097a9391431df"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:WATU5RCREWVYLUDEF5TD4PHURG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Survey of Machine Learning Techniques for Malware Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniele Ucci, Leonardo Aniello, Roberto Baldoni","submitted_at":"2017-10-23T10:35:35Z","abstract_excerpt":"Coping with malware is getting more and more challenging, given their relentless growth in complexity and volume. One of the most common approaches in literature is using machine learning techniques, to automatically learn models and patterns behind such complexity, and to develop technologies to keep pace with malware evolution. This survey aims at providing an overview on the way machine learning has been used so far in the context of malware analysis in Windows environments, i.e. for the analysis of Portable Executables. We systematize surveyed papers according to their objectives (i.e., th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.08189","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6L3y3zfcdwLvu4H+BRO8QlDZdsBo6bd/qdeY+wjxIBSOgu7OTnADRS+b9rzEIlAfLpw+mSx88QF9a0phfAv0DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T03:12:24.322592Z"},"content_sha256":"2decfd0b1b7282d10fd9f97e0940df2257dffffe6566459adf0a4fd64dc34070","schema_version":"1.0","event_id":"sha256:2decfd0b1b7282d10fd9f97e0940df2257dffffe6566459adf0a4fd64dc34070"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WATU5RCREWVYLUDEF5TD4PHURG/bundle.json","state_url":"https://pith.science/pith/WATU5RCREWVYLUDEF5TD4PHURG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WATU5RCREWVYLUDEF5TD4PHURG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T03:12:24Z","links":{"resolver":"https://pith.science/pith/WATU5RCREWVYLUDEF5TD4PHURG","bundle":"https://pith.science/pith/WATU5RCREWVYLUDEF5TD4PHURG/bundle.json","state":"https://pith.science/pith/WATU5RCREWVYLUDEF5TD4PHURG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WATU5RCREWVYLUDEF5TD4PHURG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:WATU5RCREWVYLUDEF5TD4PHURG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e53ef54923bc2189fcdd824da5be2dd62abdf305f50db60523abc88e0ae21d97","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-10-23T10:35:35Z","title_canon_sha256":"5ee55c05647faef2142b490df570f1d12897b441f081baf020d10ea6d8aee735"},"schema_version":"1.0","source":{"id":"1710.08189","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1710.08189","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"arxiv_version","alias_value":"1710.08189v3","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1710.08189","created_at":"2026-05-17T23:59:58Z"},{"alias_kind":"pith_short_12","alias_value":"WATU5RCREWVY","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_16","alias_value":"WATU5RCREWVYLUDE","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_8","alias_value":"WATU5RCR","created_at":"2026-05-18T12:31:53Z"}],"graph_snapshots":[{"event_id":"sha256:2decfd0b1b7282d10fd9f97e0940df2257dffffe6566459adf0a4fd64dc34070","target":"graph","created_at":"2026-05-17T23:59:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Coping with malware is getting more and more challenging, given their relentless growth in complexity and volume. One of the most common approaches in literature is using machine learning techniques, to automatically learn models and patterns behind such complexity, and to develop technologies to keep pace with malware evolution. This survey aims at providing an overview on the way machine learning has been used so far in the context of malware analysis in Windows environments, i.e. for the analysis of Portable Executables. We systematize surveyed papers according to their objectives (i.e., th","authors_text":"Daniele Ucci, Leonardo Aniello, Roberto Baldoni","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-10-23T10:35:35Z","title":"Survey of Machine Learning Techniques for Malware Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1710.08189","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1af483db73e513ad68f0b7bb7b8fb5f99260e274d885c2052f1097a9391431df","target":"record","created_at":"2026-05-17T23:59:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e53ef54923bc2189fcdd824da5be2dd62abdf305f50db60523abc88e0ae21d97","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-10-23T10:35:35Z","title_canon_sha256":"5ee55c05647faef2142b490df570f1d12897b441f081baf020d10ea6d8aee735"},"schema_version":"1.0","source":{"id":"1710.08189","kind":"arxiv","version":3}},"canonical_sha256":"b0274ec45125ab85d0642f663e3cf489b670db7be444029f84a10acf3b888778","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0274ec45125ab85d0642f663e3cf489b670db7be444029f84a10acf3b888778","first_computed_at":"2026-05-17T23:59:58.254767Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:59:58.254767Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KtCsfeuRj4dWthAUl7JdYR5fb9HRm76cInfx5JhErSjDZ7mxkh/Fr7hiLnURkBhSvGh7PBo6rsSGnCvv0QrmDw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:59:58.255433Z","signed_message":"canonical_sha256_bytes"},"source_id":"1710.08189","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1af483db73e513ad68f0b7bb7b8fb5f99260e274d885c2052f1097a9391431df","sha256:2decfd0b1b7282d10fd9f97e0940df2257dffffe6566459adf0a4fd64dc34070"],"state_sha256":"f6b3dcfadea583a041c0a6c089b1b81e3ce4a4a009d3954538581526f6f333c6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DP/WXth/vAjwsZfCwV/Xp41r/gO0SEoLZ9w6QjAIrO/RKUwSd4nJstizMz+aQnheK1eILvlbSQJJp+9Z8u03Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T03:12:24.326842Z","bundle_sha256":"a88058765f66dc86555ff87a28f155726252e475fdc14b91ecdd3155c80d4157"}}