{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:XT3HRS2WBFMNOPSHFCAQ5FRX6X","short_pith_number":"pith:XT3HRS2W","canonical_record":{"source":{"id":"2502.07492","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-11T11:51:12Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"808b9185b34fe5d6c1c88fdec79a89da4e3eb473d4c1d3076838d79468f4a29a","abstract_canon_sha256":"2485816f6a76ec86ffbb87a1f3ba16a5348ff6600048f068b421f073d378900b"},"schema_version":"1.0"},"canonical_sha256":"bcf678cb560958d73e4728810e9637f5c6f42e56d1926d01c7f62776aecad428","source":{"kind":"arxiv","id":"2502.07492","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.07492","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"arxiv_version","alias_value":"2502.07492v2","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.07492","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_12","alias_value":"XT3HRS2WBFMN","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_16","alias_value":"XT3HRS2WBFMNOPSH","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_8","alias_value":"XT3HRS2W","created_at":"2026-07-05T10:14:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:XT3HRS2WBFMNOPSHFCAQ5FRX6X","target":"record","payload":{"canonical_record":{"source":{"id":"2502.07492","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-11T11:51:12Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"808b9185b34fe5d6c1c88fdec79a89da4e3eb473d4c1d3076838d79468f4a29a","abstract_canon_sha256":"2485816f6a76ec86ffbb87a1f3ba16a5348ff6600048f068b421f073d378900b"},"schema_version":"1.0"},"canonical_sha256":"bcf678cb560958d73e4728810e9637f5c6f42e56d1926d01c7f62776aecad428","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:14:51.094736Z","signature_b64":"0/jOQJ7rB6ownJ2BASr9awOIyEdnf5PDYDfGWoQR7ZAXT7+38HXqOV9gs0H2AwQOt8v2CgLQt6AGtOXTQiSWAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bcf678cb560958d73e4728810e9637f5c6f42e56d1926d01c7f62776aecad428","last_reissued_at":"2026-07-05T10:14:51.094235Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:14:51.094235Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.07492","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZuPpDBQTpjL9aFwbKV0jhaXV5rK+CHqSzqx5RqHKk9NztDVyaBKmkJV+4SAqXSVfzG/KtMXHIP0Q78ByTPFwCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:34:00.245280Z"},"content_sha256":"c4b15be5bdbc5e57eb611d239502703849dba9c7d66e6bfa980cb1f13442c749","schema_version":"1.0","event_id":"sha256:c4b15be5bdbc5e57eb611d239502703849dba9c7d66e6bfa980cb1f13442c749"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:XT3HRS2WBFMNOPSHFCAQ5FRX6X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RoMA: Robust Malware Attribution via Byte-level Adversarial Training with Global Perturbations and Adversarial Consistency Regularization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Aoxiang Sun, Haolin Liu, Huihong Chen, Jingcai Guo, Yuxia Sun, Zhetao Li","submitted_at":"2025-02-11T11:51:12Z","abstract_excerpt":"Attributing APT (Advanced Persistent Threat) malware to their respective groups is crucial for threat intelligence and cybersecurity. However, APT adversaries often conceal their identities, rendering attribution inherently adversarial. Existing machine learning-based attribution models, while effective, remain highly vulnerable to adversarial attacks. For example, the state-of-the-art byte-level model MalConv sees its accuracy drop from over 90% to below 2% under PGD (projected gradient descent) attacks. Existing gradient-based adversarial training techniques for malware detection or image pr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.07492","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.07492/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FIBEXafmrxYXBzNHz4NBX1kaviiwmkz7Zqkr5TDjxWTsmzulNBRG3DCjl/13JcsteIS7yaiHlY6YWzr0XIvyBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T19:34:00.245774Z"},"content_sha256":"b51e598ba4a45cf88cee49d1bab0ef36816f522b6b395a1e789266cf0de91d7c","schema_version":"1.0","event_id":"sha256:b51e598ba4a45cf88cee49d1bab0ef36816f522b6b395a1e789266cf0de91d7c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/bundle.json","state_url":"https://pith.science/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T19:34:00Z","links":{"resolver":"https://pith.science/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X","bundle":"https://pith.science/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/bundle.json","state":"https://pith.science/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XT3HRS2WBFMNOPSHFCAQ5FRX6X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:XT3HRS2WBFMNOPSHFCAQ5FRX6X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2485816f6a76ec86ffbb87a1f3ba16a5348ff6600048f068b421f073d378900b","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-11T11:51:12Z","title_canon_sha256":"808b9185b34fe5d6c1c88fdec79a89da4e3eb473d4c1d3076838d79468f4a29a"},"schema_version":"1.0","source":{"id":"2502.07492","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.07492","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"arxiv_version","alias_value":"2502.07492v2","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.07492","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_12","alias_value":"XT3HRS2WBFMN","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_16","alias_value":"XT3HRS2WBFMNOPSH","created_at":"2026-07-05T10:14:51Z"},{"alias_kind":"pith_short_8","alias_value":"XT3HRS2W","created_at":"2026-07-05T10:14:51Z"}],"graph_snapshots":[{"event_id":"sha256:b51e598ba4a45cf88cee49d1bab0ef36816f522b6b395a1e789266cf0de91d7c","target":"graph","created_at":"2026-07-05T10:14:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.07492/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Attributing APT (Advanced Persistent Threat) malware to their respective groups is crucial for threat intelligence and cybersecurity. However, APT adversaries often conceal their identities, rendering attribution inherently adversarial. Existing machine learning-based attribution models, while effective, remain highly vulnerable to adversarial attacks. For example, the state-of-the-art byte-level model MalConv sees its accuracy drop from over 90% to below 2% under PGD (projected gradient descent) attacks. Existing gradient-based adversarial training techniques for malware detection or image pr","authors_text":"Aoxiang Sun, Haolin Liu, Huihong Chen, Jingcai Guo, Yuxia Sun, Zhetao Li","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-11T11:51:12Z","title":"RoMA: Robust Malware Attribution via Byte-level Adversarial Training with Global Perturbations and Adversarial Consistency Regularization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.07492","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c4b15be5bdbc5e57eb611d239502703849dba9c7d66e6bfa980cb1f13442c749","target":"record","created_at":"2026-07-05T10:14:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2485816f6a76ec86ffbb87a1f3ba16a5348ff6600048f068b421f073d378900b","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-11T11:51:12Z","title_canon_sha256":"808b9185b34fe5d6c1c88fdec79a89da4e3eb473d4c1d3076838d79468f4a29a"},"schema_version":"1.0","source":{"id":"2502.07492","kind":"arxiv","version":2}},"canonical_sha256":"bcf678cb560958d73e4728810e9637f5c6f42e56d1926d01c7f62776aecad428","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bcf678cb560958d73e4728810e9637f5c6f42e56d1926d01c7f62776aecad428","first_computed_at":"2026-07-05T10:14:51.094235Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:14:51.094235Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"0/jOQJ7rB6ownJ2BASr9awOIyEdnf5PDYDfGWoQR7ZAXT7+38HXqOV9gs0H2AwQOt8v2CgLQt6AGtOXTQiSWAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:14:51.094736Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.07492","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c4b15be5bdbc5e57eb611d239502703849dba9c7d66e6bfa980cb1f13442c749","sha256:b51e598ba4a45cf88cee49d1bab0ef36816f522b6b395a1e789266cf0de91d7c"],"state_sha256":"9fcbc819216437e8a2685998d5002bcf5e99be2435950bb4dda80085811cd2b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ulC6SmqQyIGo/E2vRxNOUUWfwRnYaV+HSUuXQ5D0I2cAFlNuymWBgmyL1OXeQas/4QH12Uvy6l15JQyXJvUzCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T19:34:00.250247Z","bundle_sha256":"d04c1a8353793a8e975e6fad02d532c48272792bbc45e0ef82bd89c61e0c549e"}}