{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:X7K5KITD2HEH3J3HQRA5FVQBJN","short_pith_number":"pith:X7K5KITD","canonical_record":{"source":{"id":"2506.01412","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T08:11:27Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b60ab1221676998a3f7e462318cfebfc621300aefc7dc3eb30b73449fd151981","abstract_canon_sha256":"9133c38550542f14b4a5b81197627f8e153c045f10c89dbd1633c2b93f278bb0"},"schema_version":"1.0"},"canonical_sha256":"bfd5d52263d1c87da7678441d2d6014b4171f00d407c109786604576882a0336","source":{"kind":"arxiv","id":"2506.01412","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01412","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01412v1","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01412","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_12","alias_value":"X7K5KITD2HEH","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_16","alias_value":"X7K5KITD2HEH3J3H","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_8","alias_value":"X7K5KITD","created_at":"2026-07-05T11:14:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:X7K5KITD2HEH3J3HQRA5FVQBJN","target":"record","payload":{"canonical_record":{"source":{"id":"2506.01412","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T08:11:27Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"b60ab1221676998a3f7e462318cfebfc621300aefc7dc3eb30b73449fd151981","abstract_canon_sha256":"9133c38550542f14b4a5b81197627f8e153c045f10c89dbd1633c2b93f278bb0"},"schema_version":"1.0"},"canonical_sha256":"bfd5d52263d1c87da7678441d2d6014b4171f00d407c109786604576882a0336","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:12.818637Z","signature_b64":"GquoVtf20GnToJD0/T9adfGp/q4qYN8gsMlftcpC1oFUo9hUGxai1mLA1XW6csqPV9dtHm6/RuJJZwdefTeGCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bfd5d52263d1c87da7678441d2d6014b4171f00d407c109786604576882a0336","last_reissued_at":"2026-07-05T11:14:12.818186Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:12.818186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.01412","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wK2Wj6adZJnZg0jJRvtfKkww+TxVdXBpSLrb2EDHXikMk4YhCdOOOi3e9a/LZZryxt8vnLeywqSQ/KQ06bf4AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:13:11.166723Z"},"content_sha256":"8f2f8af07e6febe24fa9370a9056639b0b856071f1e1af4c49c74613d7d4c7ee","schema_version":"1.0","event_id":"sha256:8f2f8af07e6febe24fa9370a9056639b0b856071f1e1af4c49c74613d7d4c7ee"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:X7K5KITD2HEH3J3HQRA5FVQBJN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"System Calls for Malware Detection and Classification: Methodologies and Applications","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Bishwajit Prasad Gond, Durga Prasad Mohapatra","submitted_at":"2025-06-02T08:11:27Z","abstract_excerpt":"As malware continues to become more complex and harder to detect, Malware Analysis needs to continue to evolve to stay one step ahead. One promising key area approach focuses on using system calls and API Calls, the core communication between user applications and the operating system and their kernels. These calls provide valuable insight into how software or programs behaves, making them an useful tool for spotting suspicious or harmful activity of programs and software. This chapter takes a deep down look at how system calls are used in malware detection and classification, covering techniq"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01412","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.01412/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:14:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RMHP0/DQuBl2omcL2tfrc1Cm1Mtkic7xpYuEUFN74v0DqRJoBxMZqePMDHtqiY13c3M6d3QOHn3XnmifjNZsBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T13:13:11.167229Z"},"content_sha256":"d73920fce983c77a8d47ca96378dc4afabb047faf584bbb47532af066374ed3e","schema_version":"1.0","event_id":"sha256:d73920fce983c77a8d47ca96378dc4afabb047faf584bbb47532af066374ed3e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/bundle.json","state_url":"https://pith.science/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T13:13:11Z","links":{"resolver":"https://pith.science/pith/X7K5KITD2HEH3J3HQRA5FVQBJN","bundle":"https://pith.science/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/bundle.json","state":"https://pith.science/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/X7K5KITD2HEH3J3HQRA5FVQBJN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:X7K5KITD2HEH3J3HQRA5FVQBJN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9133c38550542f14b4a5b81197627f8e153c045f10c89dbd1633c2b93f278bb0","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T08:11:27Z","title_canon_sha256":"b60ab1221676998a3f7e462318cfebfc621300aefc7dc3eb30b73449fd151981"},"schema_version":"1.0","source":{"id":"2506.01412","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.01412","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"arxiv_version","alias_value":"2506.01412v1","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.01412","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_12","alias_value":"X7K5KITD2HEH","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_16","alias_value":"X7K5KITD2HEH3J3H","created_at":"2026-07-05T11:14:12Z"},{"alias_kind":"pith_short_8","alias_value":"X7K5KITD","created_at":"2026-07-05T11:14:12Z"}],"graph_snapshots":[{"event_id":"sha256:d73920fce983c77a8d47ca96378dc4afabb047faf584bbb47532af066374ed3e","target":"graph","created_at":"2026-07-05T11:14:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.01412/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As malware continues to become more complex and harder to detect, Malware Analysis needs to continue to evolve to stay one step ahead. One promising key area approach focuses on using system calls and API Calls, the core communication between user applications and the operating system and their kernels. These calls provide valuable insight into how software or programs behaves, making them an useful tool for spotting suspicious or harmful activity of programs and software. This chapter takes a deep down look at how system calls are used in malware detection and classification, covering techniq","authors_text":"Bishwajit Prasad Gond, Durga Prasad Mohapatra","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T08:11:27Z","title":"System Calls for Malware Detection and Classification: Methodologies and Applications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.01412","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8f2f8af07e6febe24fa9370a9056639b0b856071f1e1af4c49c74613d7d4c7ee","target":"record","created_at":"2026-07-05T11:14:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9133c38550542f14b4a5b81197627f8e153c045f10c89dbd1633c2b93f278bb0","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-02T08:11:27Z","title_canon_sha256":"b60ab1221676998a3f7e462318cfebfc621300aefc7dc3eb30b73449fd151981"},"schema_version":"1.0","source":{"id":"2506.01412","kind":"arxiv","version":1}},"canonical_sha256":"bfd5d52263d1c87da7678441d2d6014b4171f00d407c109786604576882a0336","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bfd5d52263d1c87da7678441d2d6014b4171f00d407c109786604576882a0336","first_computed_at":"2026-07-05T11:14:12.818186Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:14:12.818186Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GquoVtf20GnToJD0/T9adfGp/q4qYN8gsMlftcpC1oFUo9hUGxai1mLA1XW6csqPV9dtHm6/RuJJZwdefTeGCA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:14:12.818637Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.01412","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8f2f8af07e6febe24fa9370a9056639b0b856071f1e1af4c49c74613d7d4c7ee","sha256:d73920fce983c77a8d47ca96378dc4afabb047faf584bbb47532af066374ed3e"],"state_sha256":"0418cb3e4fb75e768acc31294f9c35d7d26a9e7fadfebb61e829c493b101d0a5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jRwDkbrCVWlOZPBMEp+9OYXuZejuNqNEyYRDkRjcpfWWi/kQeXV2c4EvgZSfooAqsfy9TIscWzCDoHaBZ9eZCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T13:13:11.171876Z","bundle_sha256":"9bfda48b2c237d101f25e5f3e02c628549cac83eb3e5226f3a7ae139ab1749d0"}}