{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:ZYQIPOMOZTCGFGRWS2GRJHPFNV","short_pith_number":"pith:ZYQIPOMO","schema_version":"1.0","canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","source":{"kind":"arxiv","id":"2501.01089","version":1},"attestation_state":"computed","paper":{"title":"A Sysmon Incremental Learning System for Ransomware Analysis and Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jamil Ispahany, M. Arif Khan, Md Rafiqul Islam, Md Zahidul Islam","submitted_at":"2025-01-02T06:22:58Z","abstract_excerpt":"In the face of increasing cyber threats, particularly ransomware attacks, there is a pressing need for advanced detection and analysis systems that adapt to evolving malware behaviours. Throughout the literature, using machine learning (ML) to obviate ransomware attacks has increased in popularity. Unfortunately, most of these proposals leverage non-incremental learning approaches that require the underlying models to be updated from scratch to detect new ransomware, wasting time and resources. This approach is problematic because it leaves sensitive data vulnerable to attack during retraining"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2501.01089","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","cross_cats_sorted":[],"title_canon_sha256":"a81ec31b9bae33b28bf1161d12b7157aed9b2a20d76665e52a56c06825969148","abstract_canon_sha256":"daa1bef092a8b5083209de95b87d42db28b2fe37aa571dafefba084a071ba8b1"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:56:14.501771Z","signature_b64":"bWSmSi+51Ch1JopxtWlCgIaIuMsEGWDyCxJAS1CtZ6Y9/kn1fEMCyZxjA2VMo15NRaTbk/NLKSXm4QX3F3XWDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","last_reissued_at":"2026-07-05T09:56:14.501275Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:56:14.501275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"A Sysmon Incremental Learning System for Ransomware Analysis and Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jamil Ispahany, M. Arif Khan, Md Rafiqul Islam, Md Zahidul Islam","submitted_at":"2025-01-02T06:22:58Z","abstract_excerpt":"In the face of increasing cyber threats, particularly ransomware attacks, there is a pressing need for advanced detection and analysis systems that adapt to evolving malware behaviours. Throughout the literature, using machine learning (ML) to obviate ransomware attacks has increased in popularity. Unfortunately, most of these proposals leverage non-incremental learning approaches that require the underlying models to be updated from scratch to detect new ransomware, wasting time and resources. This approach is problematic because it leaves sensitive data vulnerable to attack during retraining"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.01089","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.01089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2501.01089","created_at":"2026-07-05T09:56:14.501342+00:00"},{"alias_kind":"arxiv_version","alias_value":"2501.01089v1","created_at":"2026-07-05T09:56:14.501342+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.01089","created_at":"2026-07-05T09:56:14.501342+00:00"},{"alias_kind":"pith_short_12","alias_value":"ZYQIPOMOZTCG","created_at":"2026-07-05T09:56:14.501342+00:00"},{"alias_kind":"pith_short_16","alias_value":"ZYQIPOMOZTCGFGRW","created_at":"2026-07-05T09:56:14.501342+00:00"},{"alias_kind":"pith_short_8","alias_value":"ZYQIPOMO","created_at":"2026-07-05T09:56:14.501342+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV","json":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV.json","graph_json":"https://pith.science/api/pith-number/ZYQIPOMOZTCGFGRWS2GRJHPFNV/graph.json","events_json":"https://pith.science/api/pith-number/ZYQIPOMOZTCGFGRWS2GRJHPFNV/events.json","paper":"https://pith.science/paper/ZYQIPOMO"},"agent_actions":{"view_html":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV","download_json":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV.json","view_paper":"https://pith.science/paper/ZYQIPOMO","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2501.01089&json=true","fetch_graph":"https://pith.science/api/pith-number/ZYQIPOMOZTCGFGRWS2GRJHPFNV/graph.json","fetch_events":"https://pith.science/api/pith-number/ZYQIPOMOZTCGFGRWS2GRJHPFNV/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/action/storage_attestation","attest_author":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/action/author_attestation","sign_citation":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/action/citation_signature","submit_replication":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/action/replication_record"}},"created_at":"2026-07-05T09:56:14.501342+00:00","updated_at":"2026-07-05T09:56:14.501342+00:00"}