{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ZHKKQO2XESWUV475PYLA2QCPFX","short_pith_number":"pith:ZHKKQO2X","canonical_record":{"source":{"id":"2201.07649","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535","abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870"},"schema_version":"1.0"},"canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","source":{"kind":"arxiv","id":"2201.07649","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"arxiv_version","alias_value":"2201.07649v1","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_12","alias_value":"ZHKKQO2XESWU","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_16","alias_value":"ZHKKQO2XESWUV475","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_8","alias_value":"ZHKKQO2X","created_at":"2026-07-05T03:49:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ZHKKQO2XESWUV475PYLA2QCPFX","target":"record","payload":{"canonical_record":{"source":{"id":"2201.07649","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535","abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870"},"schema_version":"1.0"},"canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:49:49.033164Z","signature_b64":"bGqGrDcWQije33QXN1erVB/jMFq4lYKxjltzuxJBOKANBLzujbNuF6ZEnaHj+Zs6BnkLnJHuAlRlZMTxju1eBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","last_reissued_at":"2026-07-05T03:49:49.032804Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:49:49.032804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.07649","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:49:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uVreYv17N8Wzd+m0Kcohm8qqCO/sHD1eWMmQih+l0G5qp04yyLBX2lc7L+31HSrrIEojg+ODeJdr/FpmJ0sEBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T01:33:27.245692Z"},"content_sha256":"dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950","schema_version":"1.0","event_id":"sha256:dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ZHKKQO2XESWUV475PYLA2QCPFX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Malware Classification Using Static Disassembly and Machine Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Eoin Brophy, Tomas Ward, Zhenshuo Chen","submitted_at":"2021-12-10T18:14:47Z","abstract_excerpt":"Network and system security are incredibly critical issues now. Due to the rapid proliferation of malware, traditional analysis methods struggle with enormous samples.\n  In this paper, we propose four easy-to-extract and small-scale features, including sizes and permissions of Windows PE sections, content complexity, and import libraries, to classify malware families, and use automatic machine learning to search for the best model and hyper-parameters for each feature and their combinations. Compared with detailed behavior-related features like API sequences, proposed features provide macrosco"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.07649","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.07649/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:49:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SL5fho/Wyu8JMAPBv0JdlMMpofDE7hWj3rS4W6fVE05n8f1oGaQemjwM1n5A9drvMDFLP4t3xjwIdt63aMBEBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T01:33:27.246233Z"},"content_sha256":"775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6","schema_version":"1.0","event_id":"sha256:775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZHKKQO2XESWUV475PYLA2QCPFX/bundle.json","state_url":"https://pith.science/pith/ZHKKQO2XESWUV475PYLA2QCPFX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZHKKQO2XESWUV475PYLA2QCPFX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T01:33:27Z","links":{"resolver":"https://pith.science/pith/ZHKKQO2XESWUV475PYLA2QCPFX","bundle":"https://pith.science/pith/ZHKKQO2XESWUV475PYLA2QCPFX/bundle.json","state":"https://pith.science/pith/ZHKKQO2XESWUV475PYLA2QCPFX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZHKKQO2XESWUV475PYLA2QCPFX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZHKKQO2XESWUV475PYLA2QCPFX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535"},"schema_version":"1.0","source":{"id":"2201.07649","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"arxiv_version","alias_value":"2201.07649v1","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_12","alias_value":"ZHKKQO2XESWU","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_16","alias_value":"ZHKKQO2XESWUV475","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_8","alias_value":"ZHKKQO2X","created_at":"2026-07-05T03:49:49Z"}],"graph_snapshots":[{"event_id":"sha256:775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6","target":"graph","created_at":"2026-07-05T03:49:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.07649/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Network and system security are incredibly critical issues now. Due to the rapid proliferation of malware, traditional analysis methods struggle with enormous samples.\n  In this paper, we propose four easy-to-extract and small-scale features, including sizes and permissions of Windows PE sections, content complexity, and import libraries, to classify malware families, and use automatic machine learning to search for the best model and hyper-parameters for each feature and their combinations. Compared with detailed behavior-related features like API sequences, proposed features provide macrosco","authors_text":"Eoin Brophy, Tomas Ward, Zhenshuo Chen","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title":"Malware Classification Using Static Disassembly and Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.07649","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950","target":"record","created_at":"2026-07-05T03:49:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535"},"schema_version":"1.0","source":{"id":"2201.07649","kind":"arxiv","version":1}},"canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","first_computed_at":"2026-07-05T03:49:49.032804Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:49:49.032804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bGqGrDcWQije33QXN1erVB/jMFq4lYKxjltzuxJBOKANBLzujbNuF6ZEnaHj+Zs6BnkLnJHuAlRlZMTxju1eBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:49:49.033164Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.07649","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950","sha256:775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6"],"state_sha256":"41c882231fb1bd63d66e08d2e1d5b01401cfadb1ddba67aeb5ba9b7e6a73aee2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BHHLFsagxWk5yMFsiz6M7wEkUvkoGpDjP25IkTO1+csn9UQKTdjZilT3LPBGYQpp9MWpwpKx9tGaXN/XfAIRCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T01:33:27.250947Z","bundle_sha256":"9788eac4ded4cfed4bbbea011861cc621126205ca6bb15218f95bf74899d0194"}}