{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:WN7ZRTWGWHHCXD6JXJYUWO7BWE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dab296863f9a000d7d580341a695c17fa335d7fe3c31fdf98ce3cc5631f87bf7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-01-15T14:07:18Z","title_canon_sha256":"7da1756b9bde826bae257a2d7f574c66101688cfc73eba4229933ff8821ed945"},"schema_version":"1.0","source":{"id":"2101.06124","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2101.06124","created_at":"2026-07-05T02:07:34Z"},{"alias_kind":"arxiv_version","alias_value":"2101.06124v2","created_at":"2026-07-05T02:07:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2101.06124","created_at":"2026-07-05T02:07:34Z"},{"alias_kind":"pith_short_12","alias_value":"WN7ZRTWGWHHC","created_at":"2026-07-05T02:07:34Z"},{"alias_kind":"pith_short_16","alias_value":"WN7ZRTWGWHHCXD6J","created_at":"2026-07-05T02:07:34Z"},{"alias_kind":"pith_short_8","alias_value":"WN7ZRTWG","created_at":"2026-07-05T02:07:34Z"}],"graph_snapshots":[{"event_id":"sha256:0c645b689cc57ddf9df7e0eb5399539575e398f98923895e16c89ab7221396f6","target":"graph","created_at":"2026-07-05T02:07:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2101.06124/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Attributing a piece of malware to its creator typically requires threat intelligence. Binary attribution increases the level of difficulty as it mostly relies upon the ability to disassemble binaries to identify authorship style. Our survey explores malicious author style and the adversarial techniques used by them to remain anonymous. We examine the adversarial impact on the state-of-the-art methods. We identify key findings and explore the open research challenges. To mitigate the lack of ground truth datasets in this domain, we publish alongside this survey the largest and most diverse meta","authors_text":"Daniele Sgandurra, Jason Gray, Lorenzo Cavallaro","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-01-15T14:07:18Z","title":"Identifying Authorship Style in Malicious Binaries: Techniques, Challenges & Datasets"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2101.06124","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:358e6709ac19e8863d8ed3d7870a338ff340d0ef8052c8b0f22d55e23c9cf525","target":"record","created_at":"2026-07-05T02:07:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dab296863f9a000d7d580341a695c17fa335d7fe3c31fdf98ce3cc5631f87bf7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-01-15T14:07:18Z","title_canon_sha256":"7da1756b9bde826bae257a2d7f574c66101688cfc73eba4229933ff8821ed945"},"schema_version":"1.0","source":{"id":"2101.06124","kind":"arxiv","version":2}},"canonical_sha256":"b37f98cec6b1ce2b8fc9ba714b3be1b13a913e8c19b21488f6a28e919220cca8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b37f98cec6b1ce2b8fc9ba714b3be1b13a913e8c19b21488f6a28e919220cca8","first_computed_at":"2026-07-05T02:07:34.022161Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:07:34.022161Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RXuUHgLbqRSrpdD1dk+5hNPBSp2RTB8DPZIdcwNvSpKNK+WqT5PwLTMK4KC1F/bRyPMV5lJfiw1umKCCBu+MCA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:07:34.022571Z","signed_message":"canonical_sha256_bytes"},"source_id":"2101.06124","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:358e6709ac19e8863d8ed3d7870a338ff340d0ef8052c8b0f22d55e23c9cf525","sha256:0c645b689cc57ddf9df7e0eb5399539575e398f98923895e16c89ab7221396f6"],"state_sha256":"05bca14c4de1a0629804c49979a8733d5d2606a2af390a9fad7c03598f70210d"}