{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:6VYALQRFAWLOG3DMH7V2CELQ24","short_pith_number":"pith:6VYALQRF","canonical_record":{"source":{"id":"2404.19715","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-30T17:06:27Z","cross_cats_sorted":[],"title_canon_sha256":"235d5e4ed80f363f855a98200d3aff67e2e65ed616775c1c697a9201d9a287bf","abstract_canon_sha256":"8233bd081b03269be4b01ede6d03ca008ddc3fb393d11538ed4c5e43b275cfb0"},"schema_version":"1.0"},"canonical_sha256":"f57005c2250596e36c6c3feba11170d723c79b92dbfc613b90072a91a75bc971","source":{"kind":"arxiv","id":"2404.19715","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.19715","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"arxiv_version","alias_value":"2404.19715v1","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.19715","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_12","alias_value":"6VYALQRFAWLO","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_16","alias_value":"6VYALQRFAWLOG3DM","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_8","alias_value":"6VYALQRF","created_at":"2026-07-05T08:13:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:6VYALQRFAWLOG3DMH7V2CELQ24","target":"record","payload":{"canonical_record":{"source":{"id":"2404.19715","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-30T17:06:27Z","cross_cats_sorted":[],"title_canon_sha256":"235d5e4ed80f363f855a98200d3aff67e2e65ed616775c1c697a9201d9a287bf","abstract_canon_sha256":"8233bd081b03269be4b01ede6d03ca008ddc3fb393d11538ed4c5e43b275cfb0"},"schema_version":"1.0"},"canonical_sha256":"f57005c2250596e36c6c3feba11170d723c79b92dbfc613b90072a91a75bc971","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:13:55.785565Z","signature_b64":"IP4HcLfke0oKGi3n8tYS1wq1KJzvubwklYpToIfFQUoW5Mgs4WFPwBdOrSIZiULJT9aQ/99i4LqFdcJpEMopAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f57005c2250596e36c6c3feba11170d723c79b92dbfc613b90072a91a75bc971","last_reissued_at":"2026-07-05T08:13:55.785162Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:13:55.785162Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.19715","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7awKcwcVIEXbkNpQnB3c/oiTbvbIptl3jNBUk1+t9lb0YMaV3M2KgS6+2heQ9wWRs7UFt/B33NT8TdsE1Uy3Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:50:38.191162Z"},"content_sha256":"0ec3c92acbd693841c72c8c10677b1b013259e6a94ab4c5417439b1bfcd91e96","schema_version":"1.0","event_id":"sha256:0ec3c92acbd693841c72c8c10677b1b013259e6a94ab4c5417439b1bfcd91e96"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:6VYALQRFAWLOG3DMH7V2CELQ24","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Assessing LLMs in Malicious Code Deobfuscation of Real-world Malware Campaigns","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Constantinos Patsakis, Fran Casino, Nikolaos Lykousas","submitted_at":"2024-04-30T17:06:27Z","abstract_excerpt":"The integration of large language models (LLMs) into various pipelines is increasingly widespread, effectively automating many manual tasks and often surpassing human capabilities. Cybersecurity researchers and practitioners have recognised this potential. Thus, they are actively exploring its applications, given the vast volume of heterogeneous data that requires processing to identify anomalies, potential bypasses, attacks, and fraudulent incidents. On top of this, LLMs' advanced capabilities in generating functional code, comprehending code context, and summarising its operations can also b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.19715","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.19715/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:13:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uDRptJ3St3X0Du2ItYiFFphkl+olzrBZY6dINccYDGLVljGTktHriHYJJoWK+qhfs6YtH3dVO4hpao540PFBBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T11:50:38.191549Z"},"content_sha256":"e9d9f656288bae0e85f18a3f539c48ea6662ef3d5883f4568b682ce21e1aff91","schema_version":"1.0","event_id":"sha256:e9d9f656288bae0e85f18a3f539c48ea6662ef3d5883f4568b682ce21e1aff91"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6VYALQRFAWLOG3DMH7V2CELQ24/bundle.json","state_url":"https://pith.science/pith/6VYALQRFAWLOG3DMH7V2CELQ24/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6VYALQRFAWLOG3DMH7V2CELQ24/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T11:50:38Z","links":{"resolver":"https://pith.science/pith/6VYALQRFAWLOG3DMH7V2CELQ24","bundle":"https://pith.science/pith/6VYALQRFAWLOG3DMH7V2CELQ24/bundle.json","state":"https://pith.science/pith/6VYALQRFAWLOG3DMH7V2CELQ24/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6VYALQRFAWLOG3DMH7V2CELQ24/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:6VYALQRFAWLOG3DMH7V2CELQ24","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8233bd081b03269be4b01ede6d03ca008ddc3fb393d11538ed4c5e43b275cfb0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-30T17:06:27Z","title_canon_sha256":"235d5e4ed80f363f855a98200d3aff67e2e65ed616775c1c697a9201d9a287bf"},"schema_version":"1.0","source":{"id":"2404.19715","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.19715","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"arxiv_version","alias_value":"2404.19715v1","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.19715","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_12","alias_value":"6VYALQRFAWLO","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_16","alias_value":"6VYALQRFAWLOG3DM","created_at":"2026-07-05T08:13:55Z"},{"alias_kind":"pith_short_8","alias_value":"6VYALQRF","created_at":"2026-07-05T08:13:55Z"}],"graph_snapshots":[{"event_id":"sha256:e9d9f656288bae0e85f18a3f539c48ea6662ef3d5883f4568b682ce21e1aff91","target":"graph","created_at":"2026-07-05T08:13:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.19715/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of large language models (LLMs) into various pipelines is increasingly widespread, effectively automating many manual tasks and often surpassing human capabilities. Cybersecurity researchers and practitioners have recognised this potential. Thus, they are actively exploring its applications, given the vast volume of heterogeneous data that requires processing to identify anomalies, potential bypasses, attacks, and fraudulent incidents. On top of this, LLMs' advanced capabilities in generating functional code, comprehending code context, and summarising its operations can also b","authors_text":"Constantinos Patsakis, Fran Casino, Nikolaos Lykousas","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-30T17:06:27Z","title":"Assessing LLMs in Malicious Code Deobfuscation of Real-world Malware Campaigns"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.19715","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ec3c92acbd693841c72c8c10677b1b013259e6a94ab4c5417439b1bfcd91e96","target":"record","created_at":"2026-07-05T08:13:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8233bd081b03269be4b01ede6d03ca008ddc3fb393d11538ed4c5e43b275cfb0","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-04-30T17:06:27Z","title_canon_sha256":"235d5e4ed80f363f855a98200d3aff67e2e65ed616775c1c697a9201d9a287bf"},"schema_version":"1.0","source":{"id":"2404.19715","kind":"arxiv","version":1}},"canonical_sha256":"f57005c2250596e36c6c3feba11170d723c79b92dbfc613b90072a91a75bc971","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f57005c2250596e36c6c3feba11170d723c79b92dbfc613b90072a91a75bc971","first_computed_at":"2026-07-05T08:13:55.785162Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:13:55.785162Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IP4HcLfke0oKGi3n8tYS1wq1KJzvubwklYpToIfFQUoW5Mgs4WFPwBdOrSIZiULJT9aQ/99i4LqFdcJpEMopAg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:13:55.785565Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.19715","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ec3c92acbd693841c72c8c10677b1b013259e6a94ab4c5417439b1bfcd91e96","sha256:e9d9f656288bae0e85f18a3f539c48ea6662ef3d5883f4568b682ce21e1aff91"],"state_sha256":"505341cc424f2933622366ec1f7f8ea371e8e8f8f6adcf08eef8c6876207e1df"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B0imI+8vz+hWjmeY8NNQ+X2Xo0FhUJ4+mBl19YBWlksO/OJgnHwXOFm4jCJfWlIOW/kjZUEukIvXSB4tGeNMAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T11:50:38.193503Z","bundle_sha256":"6243b550e80a3c61d5cca31cec85970681e70c5dfc55614aab6e84a35ebc364b"}}