{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ZYQIPOMOZTCGFGRWS2GRJHPFNV","short_pith_number":"pith:ZYQIPOMO","canonical_record":{"source":{"id":"2501.01089","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","cross_cats_sorted":[],"title_canon_sha256":"a81ec31b9bae33b28bf1161d12b7157aed9b2a20d76665e52a56c06825969148","abstract_canon_sha256":"daa1bef092a8b5083209de95b87d42db28b2fe37aa571dafefba084a071ba8b1"},"schema_version":"1.0"},"canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","source":{"kind":"arxiv","id":"2501.01089","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.01089","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"arxiv_version","alias_value":"2501.01089v1","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.01089","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_12","alias_value":"ZYQIPOMOZTCG","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_16","alias_value":"ZYQIPOMOZTCGFGRW","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_8","alias_value":"ZYQIPOMO","created_at":"2026-07-05T09:56:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ZYQIPOMOZTCGFGRWS2GRJHPFNV","target":"record","payload":{"canonical_record":{"source":{"id":"2501.01089","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","cross_cats_sorted":[],"title_canon_sha256":"a81ec31b9bae33b28bf1161d12b7157aed9b2a20d76665e52a56c06825969148","abstract_canon_sha256":"daa1bef092a8b5083209de95b87d42db28b2fe37aa571dafefba084a071ba8b1"},"schema_version":"1.0"},"canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:56:14.501771Z","signature_b64":"bWSmSi+51Ch1JopxtWlCgIaIuMsEGWDyCxJAS1CtZ6Y9/kn1fEMCyZxjA2VMo15NRaTbk/NLKSXm4QX3F3XWDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","last_reissued_at":"2026-07-05T09:56:14.501275Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:56:14.501275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.01089","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mz8Okvnbt8tN0CmeL3pP9seqmEVspjRbJILDQdsEC+A5vI7lOnQ4n9IHEocnbNhUP0hxeQxussPMpkFuyvGLCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T12:03:40.691701Z"},"content_sha256":"846074a8dc5ccadb2fe3126e7e470a8fa37a921e384e05452e1e1583dfdbb54c","schema_version":"1.0","event_id":"sha256:846074a8dc5ccadb2fe3126e7e470a8fa37a921e384e05452e1e1583dfdbb54c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ZYQIPOMOZTCGFGRWS2GRJHPFNV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Sysmon Incremental Learning System for Ransomware Analysis and Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jamil Ispahany, M. Arif Khan, Md Rafiqul Islam, Md Zahidul Islam","submitted_at":"2025-01-02T06:22:58Z","abstract_excerpt":"In the face of increasing cyber threats, particularly ransomware attacks, there is a pressing need for advanced detection and analysis systems that adapt to evolving malware behaviours. Throughout the literature, using machine learning (ML) to obviate ransomware attacks has increased in popularity. Unfortunately, most of these proposals leverage non-incremental learning approaches that require the underlying models to be updated from scratch to detect new ransomware, wasting time and resources. This approach is problematic because it leaves sensitive data vulnerable to attack during retraining"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.01089","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.01089/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5nL0SaKRL1M9y+mTZs9IWqX7uF5Ls6YEiZcAn1M1U1SceqIWatmAgqr5QyzjVMTviKXKtfZ7LnSjfi9HCsxRCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T12:03:40.692264Z"},"content_sha256":"21e540ed69d40e2e27380741cb627c844ff9cfc747bd06c53b88780bcd1fedd1","schema_version":"1.0","event_id":"sha256:21e540ed69d40e2e27380741cb627c844ff9cfc747bd06c53b88780bcd1fedd1"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/bundle.json","state_url":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T12:03:40Z","links":{"resolver":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV","bundle":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/bundle.json","state":"https://pith.science/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZYQIPOMOZTCGFGRWS2GRJHPFNV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZYQIPOMOZTCGFGRWS2GRJHPFNV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"daa1bef092a8b5083209de95b87d42db28b2fe37aa571dafefba084a071ba8b1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","title_canon_sha256":"a81ec31b9bae33b28bf1161d12b7157aed9b2a20d76665e52a56c06825969148"},"schema_version":"1.0","source":{"id":"2501.01089","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.01089","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"arxiv_version","alias_value":"2501.01089v1","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.01089","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_12","alias_value":"ZYQIPOMOZTCG","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_16","alias_value":"ZYQIPOMOZTCGFGRW","created_at":"2026-07-05T09:56:14Z"},{"alias_kind":"pith_short_8","alias_value":"ZYQIPOMO","created_at":"2026-07-05T09:56:14Z"}],"graph_snapshots":[{"event_id":"sha256:21e540ed69d40e2e27380741cb627c844ff9cfc747bd06c53b88780bcd1fedd1","target":"graph","created_at":"2026-07-05T09:56:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.01089/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the face of increasing cyber threats, particularly ransomware attacks, there is a pressing need for advanced detection and analysis systems that adapt to evolving malware behaviours. Throughout the literature, using machine learning (ML) to obviate ransomware attacks has increased in popularity. Unfortunately, most of these proposals leverage non-incremental learning approaches that require the underlying models to be updated from scratch to detect new ransomware, wasting time and resources. This approach is problematic because it leaves sensitive data vulnerable to attack during retraining","authors_text":"Jamil Ispahany, M. Arif Khan, Md Rafiqul Islam, Md Zahidul Islam","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","title":"A Sysmon Incremental Learning System for Ransomware Analysis and Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.01089","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:846074a8dc5ccadb2fe3126e7e470a8fa37a921e384e05452e1e1583dfdbb54c","target":"record","created_at":"2026-07-05T09:56:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"daa1bef092a8b5083209de95b87d42db28b2fe37aa571dafefba084a071ba8b1","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-02T06:22:58Z","title_canon_sha256":"a81ec31b9bae33b28bf1161d12b7157aed9b2a20d76665e52a56c06825969148"},"schema_version":"1.0","source":{"id":"2501.01089","kind":"arxiv","version":1}},"canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce2087b98eccc4629a36968d149de56d7a7f92f965ad6f7d83875bc113678707","first_computed_at":"2026-07-05T09:56:14.501275Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:56:14.501275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bWSmSi+51Ch1JopxtWlCgIaIuMsEGWDyCxJAS1CtZ6Y9/kn1fEMCyZxjA2VMo15NRaTbk/NLKSXm4QX3F3XWDA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:56:14.501771Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.01089","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:846074a8dc5ccadb2fe3126e7e470a8fa37a921e384e05452e1e1583dfdbb54c","sha256:21e540ed69d40e2e27380741cb627c844ff9cfc747bd06c53b88780bcd1fedd1"],"state_sha256":"122fb7e5f1ad81c44aeaf93148f60639efc77ed1dc53477b1b1b243234892606"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Oh+QqQ9a7pYPhxEqy/1hIrLvnEEcqWksaTBX8sZrGuYq9M1e9uYDoQUNLlVfB17MscrRcPIRRDg/3shyarnGCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T12:03:40.699429Z","bundle_sha256":"16c449ab84abfd31d2068c0280826f45c07e1ced5321cc761855f33033d4b877"}}