{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ZHKKQO2XESWUV475PYLA2QCPFX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535"},"schema_version":"1.0","source":{"id":"2201.07649","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"arxiv_version","alias_value":"2201.07649v1","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.07649","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_12","alias_value":"ZHKKQO2XESWU","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_16","alias_value":"ZHKKQO2XESWUV475","created_at":"2026-07-05T03:49:49Z"},{"alias_kind":"pith_short_8","alias_value":"ZHKKQO2X","created_at":"2026-07-05T03:49:49Z"}],"graph_snapshots":[{"event_id":"sha256:775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6","target":"graph","created_at":"2026-07-05T03:49:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.07649/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Network and system security are incredibly critical issues now. Due to the rapid proliferation of malware, traditional analysis methods struggle with enormous samples.\n  In this paper, we propose four easy-to-extract and small-scale features, including sizes and permissions of Windows PE sections, content complexity, and import libraries, to classify malware families, and use automatic machine learning to search for the best model and hyper-parameters for each feature and their combinations. Compared with detailed behavior-related features like API sequences, proposed features provide macrosco","authors_text":"Eoin Brophy, Tomas Ward, Zhenshuo Chen","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title":"Malware Classification Using Static Disassembly and Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.07649","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950","target":"record","created_at":"2026-07-05T03:49:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"70f1918e2dedecb1b73857d412e22e73794eaa21aaf980c022bdd89daf9d9870","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-10T18:14:47Z","title_canon_sha256":"a648d48cb8458ca3ff0abda8a49802b25ac74cda81fb5ba472a543382f0f9535"},"schema_version":"1.0","source":{"id":"2201.07649","kind":"arxiv","version":1}},"canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c9d4a83b5724ad4af3fd7e160d404f2dd38e8e86d14046c2ec62574c7ab4191d","first_computed_at":"2026-07-05T03:49:49.032804Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:49:49.032804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bGqGrDcWQije33QXN1erVB/jMFq4lYKxjltzuxJBOKANBLzujbNuF6ZEnaHj+Zs6BnkLnJHuAlRlZMTxju1eBw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:49:49.033164Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.07649","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dcf9a7a68cd984ae169f1a70322e030ad27f00033891f3906d00ea9c14889950","sha256:775a12d24138d07b7db3a1ecb3b6e1f2085297ea495ced6b3094d2583c6d87a6"],"state_sha256":"41c882231fb1bd63d66e08d2e1d5b01401cfadb1ddba67aeb5ba9b7e6a73aee2"}