{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:XSZBSARAEJQIIJPHYQ5E6JXQSF","short_pith_number":"pith:XSZBSARA","canonical_record":{"source":{"id":"1511.04317","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-13T15:33:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5d67009bf140dc3ec2146bfa38122fc6bd5c7ccfedef90b856640a7889454dac","abstract_canon_sha256":"7ebc45bb05e9ce572d704518f30c7a6122c69f41b9608327247c05c42bf3abf7"},"schema_version":"1.0"},"canonical_sha256":"bcb219022022608425e7c43a4f26f0914badbfd35d346284b5720552a4ab22eb","source":{"kind":"arxiv","id":"1511.04317","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1511.04317","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"arxiv_version","alias_value":"1511.04317v2","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1511.04317","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"pith_short_12","alias_value":"XSZBSARAEJQI","created_at":"2026-05-18T12:29:50Z"},{"alias_kind":"pith_short_16","alias_value":"XSZBSARAEJQIIJPH","created_at":"2026-05-18T12:29:50Z"},{"alias_kind":"pith_short_8","alias_value":"XSZBSARA","created_at":"2026-05-18T12:29:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:XSZBSARAEJQIIJPHYQ5E6JXQSF","target":"record","payload":{"canonical_record":{"source":{"id":"1511.04317","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-13T15:33:02Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"5d67009bf140dc3ec2146bfa38122fc6bd5c7ccfedef90b856640a7889454dac","abstract_canon_sha256":"7ebc45bb05e9ce572d704518f30c7a6122c69f41b9608327247c05c42bf3abf7"},"schema_version":"1.0"},"canonical_sha256":"bcb219022022608425e7c43a4f26f0914badbfd35d346284b5720552a4ab22eb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:19:18.390337Z","signature_b64":"3Daie8U5ymx+BM81UxfucEn62Opg86/siThAjF2SgFvu4BQ5dPCBQQ3FaU4kJG2NGP+Ca8pNAwCSZiMLrCToBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bcb219022022608425e7c43a4f26f0914badbfd35d346284b5720552a4ab22eb","last_reissued_at":"2026-05-18T01:19:18.389748Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:19:18.389748Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1511.04317","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:19:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fmOTr1Frotvu9hXhjCOHk2BH38qLDmkLiu3NYW2Ko8Gw8rsjX2Og1NR/WU9ydHsOmFfufvYXVkn9ijI5c6cwDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T18:49:29.633817Z"},"content_sha256":"d24ae91318e27e3d1efe189a3f906648ea1f4b82b534951d3d8e6880fe96af80","schema_version":"1.0","event_id":"sha256:d24ae91318e27e3d1efe189a3f906648ea1f4b82b534951d3d8e6880fe96af80"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:XSZBSARAEJQIIJPHYQ5E6JXQSF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Novel Feature Extraction, Selection and Fusion for Effective Malware Family Classification","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Dmitry Ulyanov, Giorgio Giacinto, Mansour Ahmadi, Mikhail Trofimov, Stanislav Semenov","submitted_at":"2015-11-13T15:33:02Z","abstract_excerpt":"Modern malware is designed with mutation characteristics, namely polymorphism and metamorphism, which causes an enormous growth in the number of variants of malware samples. Categorization of malware samples on the basis of their behaviors is essential for the computer security community, because they receive huge number of malware everyday, and the signature extraction process is usually based on malicious parts characterizing malware families. Microsoft released a malware classification challenge in 2015 with a huge dataset of near 0.5 terabytes of data, containing more than 20K malware samp"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1511.04317","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:19:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"atwFJUQ16rw2/KaA5HfkJeidk2enZcFuMj2zHeBkbiP46f8hy8GPiL6tvxsbBQPPH4Rd/r9yFS6pltKbvfU7AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-03T18:49:29.634159Z"},"content_sha256":"e88f201b527172fda36fa81dd686081389c944328ca075a7b3414707084aff52","schema_version":"1.0","event_id":"sha256:e88f201b527172fda36fa81dd686081389c944328ca075a7b3414707084aff52"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/bundle.json","state_url":"https://pith.science/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-03T18:49:29Z","links":{"resolver":"https://pith.science/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF","bundle":"https://pith.science/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/bundle.json","state":"https://pith.science/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XSZBSARAEJQIIJPHYQ5E6JXQSF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:XSZBSARAEJQIIJPHYQ5E6JXQSF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7ebc45bb05e9ce572d704518f30c7a6122c69f41b9608327247c05c42bf3abf7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-13T15:33:02Z","title_canon_sha256":"5d67009bf140dc3ec2146bfa38122fc6bd5c7ccfedef90b856640a7889454dac"},"schema_version":"1.0","source":{"id":"1511.04317","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1511.04317","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"arxiv_version","alias_value":"1511.04317v2","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1511.04317","created_at":"2026-05-18T01:19:18Z"},{"alias_kind":"pith_short_12","alias_value":"XSZBSARAEJQI","created_at":"2026-05-18T12:29:50Z"},{"alias_kind":"pith_short_16","alias_value":"XSZBSARAEJQIIJPH","created_at":"2026-05-18T12:29:50Z"},{"alias_kind":"pith_short_8","alias_value":"XSZBSARA","created_at":"2026-05-18T12:29:50Z"}],"graph_snapshots":[{"event_id":"sha256:e88f201b527172fda36fa81dd686081389c944328ca075a7b3414707084aff52","target":"graph","created_at":"2026-05-18T01:19:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Modern malware is designed with mutation characteristics, namely polymorphism and metamorphism, which causes an enormous growth in the number of variants of malware samples. Categorization of malware samples on the basis of their behaviors is essential for the computer security community, because they receive huge number of malware everyday, and the signature extraction process is usually based on malicious parts characterizing malware families. Microsoft released a malware classification challenge in 2015 with a huge dataset of near 0.5 terabytes of data, containing more than 20K malware samp","authors_text":"Dmitry Ulyanov, Giorgio Giacinto, Mansour Ahmadi, Mikhail Trofimov, Stanislav Semenov","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-13T15:33:02Z","title":"Novel Feature Extraction, Selection and Fusion for Effective Malware Family Classification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1511.04317","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d24ae91318e27e3d1efe189a3f906648ea1f4b82b534951d3d8e6880fe96af80","target":"record","created_at":"2026-05-18T01:19:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7ebc45bb05e9ce572d704518f30c7a6122c69f41b9608327247c05c42bf3abf7","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-11-13T15:33:02Z","title_canon_sha256":"5d67009bf140dc3ec2146bfa38122fc6bd5c7ccfedef90b856640a7889454dac"},"schema_version":"1.0","source":{"id":"1511.04317","kind":"arxiv","version":2}},"canonical_sha256":"bcb219022022608425e7c43a4f26f0914badbfd35d346284b5720552a4ab22eb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bcb219022022608425e7c43a4f26f0914badbfd35d346284b5720552a4ab22eb","first_computed_at":"2026-05-18T01:19:18.389748Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:19:18.389748Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3Daie8U5ymx+BM81UxfucEn62Opg86/siThAjF2SgFvu4BQ5dPCBQQ3FaU4kJG2NGP+Ca8pNAwCSZiMLrCToBg==","signature_status":"signed_v1","signed_at":"2026-05-18T01:19:18.390337Z","signed_message":"canonical_sha256_bytes"},"source_id":"1511.04317","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d24ae91318e27e3d1efe189a3f906648ea1f4b82b534951d3d8e6880fe96af80","sha256:e88f201b527172fda36fa81dd686081389c944328ca075a7b3414707084aff52"],"state_sha256":"b11bf9c36706c1ebb7abddd2a7683be1e01e897d5b6b565be6b9caec5f3700c2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9bAh6fFnYTST27vyJW1tj1oF0DfAVVDhZtxUKMw59hTcUqqtSYnB+GZQ+PHQDvvIR5lwjBBMZewFsyOsXLNoDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-03T18:49:29.636096Z","bundle_sha256":"1e0969fe15241901f54f17a05246bf873818a13069951da8cd19f5528ce3ace8"}}