{"as_of":"2026-08-18T17:16:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:69f2942d0bf32c6bcdff3fd282641d4475b7616a88b7961d81fda8804a70b180","coverage":[{"denominator":91,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":91,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-07T10:36:29.618916Z","state":"measured"},{"denominator":91,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":91,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-18T06:34:40.430872+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2506.05001/citation-record","integrity":"/paper/2506.05001/integrity","json":"/paper/2506.05001/citation-record.json","paper":"/paper/2506.05001"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:22.734761Z","title":"Lazarus apt continues to exploit log4j vulnerability,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:22.734761Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:1df79d7e1cc4f3f03418c7182894bd6f95e276c329fd1b3c5e32012770560704","observation_id":"6139217c-004d-4feb-8796-e4849a8b30d9","resolution":{"observed_at":"2026-08-07T10:36:22.734761Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:22.822609Z","title":"General, efficient, and real-time data compaction strategy for apt forensic analysis,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:22.822609Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:0a848ba90b99cd84a07394d6863c8ee32178dcd156a2606d11ad7f5d915640d9","observation_id":"2e5443ec-2341-4ab4-abf1-2988e0968269","resolution":{"observed_at":"2026-08-07T10:36:22.822609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:22.952902Z","title":"Aptshield: A stable, efficient and real-time apt detection system for linux hosts,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:22.952902Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:802641aa67c0aee8d41d60fc75914156da331a384fdd8cdd308c1586f51cbb10","observation_id":"7cc084d5-e222-4923-8945-7cc5ea0e1855","resolution":{"observed_at":"2026-08-07T10:36:22.952902Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.118517Z","title":"A systematic literature review of methods and datasets for anomaly-based network intrusion detection,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.118517Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:ca944badac8e8c7cb3872f81cb784ceb7bbf4626618468d5690a076c2db6d0db","observation_id":"f4e3a1eb-c63a-41eb-b4d4-f71cd0e1ae8e","resolution":{"observed_at":"2026-08-07T10:36:23.118517Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.280577Z","title":"Prographer: An anomaly detection system based on provenance graph embedding,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.280577Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e20a665a88b475cb0f0c82edeb45962158f7802559aabee827a77453e78d3101","observation_id":"49f0f941-ffc2-45b6-ada1-b7ea77c2a1ed","resolution":{"observed_at":"2026-08-07T10:36:23.280577Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.422505Z","title":"Airtag: Towards automated attack investigation by unsupervised learning with log texts,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.422505Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5e34f56e2dc0923ac818fb8653dc77d278ce04c4025474c11ee21eac88121ef7","observation_id":"6f40ec5b-dbd4-4b50-85bc-f2ec773ea46b","resolution":{"observed_at":"2026-08-07T10:36:23.422505Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.508100Z","title":"auditd(8) - linux man page,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.508100Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:6a35001379f7c4a8e57ad98e402bdfea6d5ebf7330f17f0d88f4e7d5d2448cd1","observation_id":"84230c3f-a6f8-4041-92ba-13809e7fe293","resolution":{"observed_at":"2026-08-07T10:36:23.508100Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.596152Z","title":"On the forensic validity of approximated audit logs,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.596152Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5d8c87c80ef7ff3f2eb60d20ca60ecf4cedf93e5aeb2d45b4b956e815ff76dbd","observation_id":"e775adff-ca45-4bd6-ab16-4361a63057d4","resolution":{"observed_at":"2026-08-07T10:36:23.596152Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.688942Z","title":"Krystal: Knowledge graph-based framework for tactical attack discovery in audit data,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.688942Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:38177badefc1b0fd7bc1a015f424fe7a16691d3783610226a40b2a283ead9c1e","observation_id":"bc39bc7e-08cf-4973-8db1-e4171c6deff7","resolution":{"observed_at":"2026-08-07T10:36:23.688942Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.745548Z","title":"eaudit: A fast, scalable and deployable audit data collection system,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.745548Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:0ed994b4d719fa94c78114d53086aa3e5c2977337dc2b1eb6a39ed0052571ab5","observation_id":"dda71ccb-4007-4b2f-ba16-ae2b4875e61e","resolution":{"observed_at":"2026-08-07T10:36:23.745548Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:23.801054Z","title":"Trace: Enterprise-wide provenance tracking for real-time apt detection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.801054Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:bd88770aae553e41ae53bb53e0a668c91f43cb9e96361c1f2850e4c4043137d4","observation_id":"eeb1cd01-b3be-4dcd-be36-7542f065b6cd","resolution":{"observed_at":"2026-08-07T10:36:23.801054Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.192194Z","title":"Auditbeat: Lightweight shipper for audit data,","venue":null,"work_id":"db1b994e-0e7c-4303-95aa-ff8f3af28bde","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.898058Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:3d4a2fadf55521a85e944804f64aba1b33882628d4b5459d8abcfe4a1204490c","observation_id":"bd7b67fe-1fe4-4f9a-bbed-70b94439b9ca","resolution":{"observed_at":"2026-08-07T10:36:36.195423Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.182277Z","title":"Atlas: A sequence-based learning approach for attack investigation,","venue":null,"work_id":"4cb9fc3f-da7c-4123-96bd-0034073c6a67","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:23.997975Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:a03578aca3d88e7d119e54bd342381ba1b58773ac706082eeb24b7b559442794","observation_id":"51a41223-37d2-4f43-a4b5-02e5f21b096a","resolution":{"observed_at":"2026-08-07T10:36:36.185607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.172564Z","title":"Alchemist: Fusing application and audit logs for precise attack provenance without instrumentation","venue":null,"work_id":"f1171e6d-bf99-4b42-9858-7c0edca97e85","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.084216Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:fee593f0067ccff6f01fb09250d8aa9736c045c7a4d671fc4848a93e5735015e","observation_id":"902ec81a-2bae-4d91-9ac9-04dbfbe4e3bd","resolution":{"observed_at":"2026-08-07T10:36:36.175813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:24.181576Z","title":"Are we there yet? an industrial viewpoint on provenance-based endpoint detection and response tools,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.181576Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5e5e1fe62a2298e38e2f542fa349680f315e6f980bd3dbecf29ad1140170b79b","observation_id":"58dfe9e4-18a8-4e48-8a89-be930b0eedf4","resolution":{"observed_at":"2026-08-07T10:36:24.181576Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.154286Z","title":"{ATTACK2VEC}: Leveraging temporal word embeddings to understand the evolution of cyberattacks,","venue":null,"work_id":"238d1a86-1cd4-49d8-a1fb-947368a441a6","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.267804Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:0a8b3a9500d928b95ed389651337a4fd1bcc8115d663afaaa19699f8a18d51bc","observation_id":"a5947cd0-8ada-4674-bf14-c9bf5b268a99","resolution":{"observed_at":"2026-08-07T10:36:36.158321Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.142848Z","title":"Shadewatcher: Recommendation-guided cyber threat analysis using system audit records,","venue":null,"work_id":"a9cbf365-f61c-4f7f-bb2a-1b3e97d83aa6","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.348150Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:935f857979474379bda11ee41d39b2cf152463d2b8e218505b81e92b156c9f78","observation_id":"6d25031f-499b-4435-bcaa-ea72f952bbaf","resolution":{"observed_at":"2026-08-07T10:36:36.146717Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.131781Z","title":"Threatrace: Detecting and tracing host-based threats in node level through provenance graph learning,","venue":null,"work_id":"e716477c-91de-4f3d-a476-f15cb301b597","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.435984Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5d565cc0250eb6414534f9c6f242fe46f8e5fdb41a9d49dde7e8db7c6c14b6ff","observation_id":"7cbdc65c-b4e2-45e8-abd8-69d077dae8a1","resolution":{"observed_at":"2026-08-07T10:36:36.135416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2001.01525","last_updated":"2020-01-14T12:26:28Z","snapshot_observed_at":"2026-08-18T10:50:33.697563Z","submitted_at":"2020-01-06T12:42:51Z","title":"UNICORN: Runtime Provenance-Based Detector for Advanced Persistent Threats","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2001.01525","snapshot_observed_at":"2026-08-07T10:36:24.529868Z","title":"Unicorn: Runtime provenance-based detector for advanced persistent threats,","venue":null,"work_id":null,"year":2001},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.529868Z"},"links":{"cited_paper":"/paper/2001.01525","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:6b6c8e86ca54ef1f1447a760418d7e7b394c5241f8761bde2f994e67e5c4d8da","observation_id":"edd38a61-420c-4184-8aa8-98a7399bf680","resolution":{"observed_at":"2026-08-07T10:36:24.529868Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.120175Z","title":"Cyber threat intelligence sharing in nigeria,","venue":null,"work_id":"3db37747-cc87-4041-b3ec-ac98214d78b6","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.613676Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:bfcf4406f8b6a034ba56f40e83d7862961c82d26c1e1c059a2656cc43351b889","observation_id":"ac75c8f5-f04b-40e3-8b39-e23146684a90","resolution":{"observed_at":"2026-08-07T10:36:36.124393Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.107440Z","title":"A literature review on mining cyberthreat intelligence from unstructured texts,","venue":null,"work_id":"3724e3a8-fcba-4754-86cb-d4ea5fedfe7c","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.704740Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:6c95f436e4e210e9aafee773863f12ced1d7706faf41981193a4aa2bf205fefa","observation_id":"eaa0ad73-d2ae-4c03-8c9d-ef8cf1367eef","resolution":{"observed_at":"2026-08-07T10:36:36.111055Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.095557Z","title":"Omegalog: High-fidelity attack investigation via transparent multi-layer log analy- sis,","venue":null,"work_id":"13c0031f-ccc8-406b-9602-69f33a967b37","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.800466Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e8ea07def9c658fe84bea6436b9647bd2e91556b5c02bd4e544801adb0f8d58c","observation_id":"3d2d0427-51ac-43e6-a6c6-202ad7108315","resolution":{"observed_at":"2026-08-07T10:36:36.099116Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.082906Z","title":"Forensic analysis of configuration-based attacks,","venue":null,"work_id":"6244f404-526b-4e8e-8a98-34340c30dfb5","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.881613Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:3deece7b7d751c17feec1547d0795fb8592ea70f2e25c09c0874d476352f240f","observation_id":"0c3d69b2-68c1-42f8-b05b-14d95a174749","resolution":{"observed_at":"2026-08-07T10:36:36.087169Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.069304Z","title":"Poirot: Aligning attack behavior with kernel audit records for cyber threat hunting,","venue":null,"work_id":"064a30bc-fa54-4aab-bb50-b07f5d19a57e","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:24.973439Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5b519542d87bd1a316883eae610d9111c98b786e7bdd362c04116fbe818dc9a5","observation_id":"abcfd4fa-95e0-4906-ae14-a8191796c87a","resolution":{"observed_at":"2026-08-07T10:36:36.075021Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.056351Z","title":"Combating dependence ex- plosion in forensic analysis using alternative tag propagation semantics,","venue":null,"work_id":"84f78b25-0110-496f-8da4-81a4420c1b5e","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.070041Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:9143b88bd98de717a5223f1eb053a4267cb2fedabfb8a7250b51b95ba99242ec","observation_id":"e2329b56-6535-4536-81b4-6dc0989f5566","resolution":{"observed_at":"2026-08-07T10:36:36.060589Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.042409Z","title":"{CLARION}: Sound and clear provenance tracking for microservice deployments,","venue":null,"work_id":"cec4c56d-9ee8-4713-a67d-fe6bdbe35223","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.140102Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:861e21a59ff9a214f7f20d6163bb8fb0f44197994521363029c9eeeedef12ff1","observation_id":"daf79dcd-d676-4e5f-99ee-00ca4bed80b1","resolution":{"observed_at":"2026-08-07T10:36:36.047030Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:25.196720Z","title":"You are what you do: Hunting stealthy malware via data provenance analysis","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.196720Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c74ebff03d58a64e28d01b78649717d47cdc45b20430b6736a6bd3dc39323ab8","observation_id":"ac1d41ac-6e2a-486e-91bf-58fe321949ed","resolution":{"observed_at":"2026-08-07T10:36:25.196720Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.020139Z","title":"Holmes: real-time apt detection through correlation of suspicious information flows,","venue":null,"work_id":"f6b27a36-a6fa-45a1-b71f-279ea71c0c2f","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.246329Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c112c27fb2b2ef06ed6714e1fe92581e87fcec719989875726c591f3ff744f95","observation_id":"9e1d4d64-cd76-4316-ad66-f067498936e3","resolution":{"observed_at":"2026-08-07T10:36:36.023981Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:36.007665Z","title":"Tactical provenance analysis for endpoint detection and response systems,","venue":null,"work_id":"dcc62d1a-9d73-4c64-bbf3-2b6708ed968a","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.311585Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e6ea740dc9f7cb02ab510961ead84118a7765ef012ffb457c034bcdd217285c4","observation_id":"7dd7002f-9340-4e79-b9eb-737b3242c4a6","resolution":{"observed_at":"2026-08-07T10:36:36.011324Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.991356Z","title":"Runtime analysis of whole-system provenance,","venue":null,"work_id":"35c2d187-061b-4528-8829-da42d36b90f3","year":2018},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.377483Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:52493c1765c6e01c58526b48126612daa82b770a5caa8c732111fc212e2a1d3d","observation_id":"e46c72f8-5943-450a-9421-6f2a8f5a0faf","resolution":{"observed_at":"2026-08-07T10:36:35.995009Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.979544Z","title":"From here to provtopia,","venue":null,"work_id":"2ba5a000-60cf-43b3-b104-5bc2e1e0b8ec","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.461121Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:a8f0535cd85dd0e14059989f4cb11add80127320baf9e961c65b2d54676ffe4d","observation_id":"d686dea1-f3ac-4b9b-8339-22424868eddb","resolution":{"observed_at":"2026-08-07T10:36:35.983696Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.967678Z","title":"R-caid: Embedding root cause analysis within provenance-based intrusion detection,","venue":null,"work_id":"73f04e8b-f69d-474b-8ea4-ff8163e0c4b3","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.542392Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:462c1e6b6b3b44f31ddb9f984452567795426dd1cbbb3db9d5fe951a8ffae1d0","observation_id":"2c39782e-da84-4f44-b5ab-4e2c9ebb3c4e","resolution":{"observed_at":"2026-08-07T10:36:35.971275Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.956613Z","title":"Kairos: Practical intrusion detection and investigation using whole- system provenance,","venue":null,"work_id":"7325037e-3ba1-47c0-b095-53836f28cb82","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.628009Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:4efe532192a543d9e9fd3b3046e5010b9ba556045ba848f6341e26df72bc4d94","observation_id":"fd367cb3-2acc-49ef-99fa-f65fbca673da","resolution":{"observed_at":"2026-08-07T10:36:35.960416Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.944615Z","title":"Dispro- track: Distributed provenance tracking over serverless applications,","venue":null,"work_id":"c785b31e-1020-4630-bd89-ce0e03ca3cd6","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.717980Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:146759e17a8ca7fea1512a7c6b155e40fb0cb78e86cfb90990c22490d67d9c31","observation_id":"a51847c7-d0b9-47e9-8aa7-ba51c1908f89","resolution":{"observed_at":"2026-08-07T10:36:35.948456Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.933277Z","title":"Cost-effective attack forensics by recording and correlating file system changes,","venue":null,"work_id":"5bf67cc0-9dcf-4fa5-b587-baf160b02dc6","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.774391Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e48156e1c78891c8c49de670a534163bc931b4479c9af24d4198a047ab6e825d","observation_id":"a155a6df-f142-4c51-8141-93837f5a0f88","resolution":{"observed_at":"2026-08-07T10:36:35.937133Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.921554Z","title":"{MAGIC}: Detecting advanced persistent threats via masked graph representation learning,","venue":null,"work_id":"a8dbc304-3c7e-4491-8854-eacdd05a43a6","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.866737Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:48d8f2fc2c924880952a6875cbc7f5580fe0c38f603633fc2bc2ee87cd7922e9","observation_id":"98bdf609-0cb4-4fc4-8cf6-d3b5d2902e79","resolution":{"observed_at":"2026-08-07T10:36:35.925512Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.909560Z","title":"Pagoda: A hybrid approach to enable efficient realtime provenance based intrusion,","venue":null,"work_id":"98fae793-081a-48a8-91d5-384c99b15233","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:25.959425Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:88c7da9a58bfc68db05883428570f4532790c7d00f2e8324a1f9889246b1f800","observation_id":"7ce8f784-56f1-44ab-8d0c-54adf2f7d999","resolution":{"observed_at":"2026-08-07T10:36:35.912959Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.899354Z","title":"Event tracing for windows (etw),","venue":null,"work_id":"3e5b4c00-4901-4312-8315-94f10ce13c02","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.048777Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e0af2b6290afc20effd17b08c10b131d9f639e1ffda02ecc97a942f406e5fef4","observation_id":"afe0aea8-0daa-4b70-9a5e-6fda748e45ca","resolution":{"observed_at":"2026-08-07T10:36:35.902811Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.887776Z","title":"Ratscope: Recording and reconstructing missing rat semantic behaviors for forensic analysis on windows,","venue":null,"work_id":"812d2be6-8ff1-4fd3-bf61-4632f041a248","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.114591Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:8dcd98a5540720f304509fcdb63a4b7cb23db2549fde94a4fb340453bf73ecb0","observation_id":"ab3cb78c-2b49-4f06-bc4a-7ab603dfea90","resolution":{"observed_at":"2026-08-07T10:36:35.892004Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.877520Z","title":"Validating the integrity of audit logs against execution reparti- tioning attacks,","venue":null,"work_id":"c24ce839-30f7-48cc-abd2-d694a0847e1e","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.172374Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:70a7b8b62a84280421534f881e8c1747a2d10f2a9320a77e32f54518d78143c0","observation_id":"d47cb12a-3f17-4ce3-a4cc-2738789ccf46","resolution":{"observed_at":"2026-08-07T10:36:35.881193Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.866291Z","title":"Palant ´ır: Optimizing attack provenance with hardware-enhanced system observability,","venue":null,"work_id":"92832b84-cc26-48a1-b1fa-23ddbfef3f16","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.218240Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:2f9e72619e06eb1103bbd54407e0a004e448faa6e033bd196597e9f343a52134","observation_id":"3c9187c4-2982-4c72-a915-104043b99c5d","resolution":{"observed_at":"2026-08-07T10:36:35.870287Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:26.273677Z","title":"Spade: Support for provenance auditing in distributed environments,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.273677Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:af64f9dbed1ac6a887ae1b80a276c8785d55a3b3ae0a6c28b8f96edf03d742a6","observation_id":"cd4fddf9-d41c-4929-9c28-5a7654555d28","resolution":{"observed_at":"2026-08-07T10:36:26.273677Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.846604Z","title":"Paradise: real-time, generalized, and distributed provenance- based intrusion detection,","venue":null,"work_id":"e4b96c63-c440-425e-b6c3-caf2505a39fd","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.366543Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c342240222456e2bbc86aa9305d8a3e4f6ad4d5ea4a9ea57dc2d58a9259a1449","observation_id":"cced4274-dbba-4361-bb5e-1e1715f5459a","resolution":{"observed_at":"2026-08-07T10:36:35.850156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.835391Z","title":"Towards reproducible ran- somware analysis,","venue":null,"work_id":"48f24a2a-6a2a-4085-96d0-dc34b7b0a799","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.425595Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:cdd30db11001a8ee89e47e59c7c288f0c6a015d19ae1098f67b339be0c8c0ae2","observation_id":"0eaab104-e27d-42ca-9e18-aab349c312f9","resolution":{"observed_at":"2026-08-07T10:36:35.838857Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.823974Z","title":"Watson: Abstracting behaviors from audit logs via aggregation of contextual semantics","venue":null,"work_id":"d03f79e0-9819-43a2-9d13-af48e05705c7","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.521131Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:35dc6444d9b058d695b42a4a9cbe0a3edddf81ae32119452cbfbbccff320bd5f","observation_id":"68244dbf-37b9-438a-bc3c-10f12da8773f","resolution":{"observed_at":"2026-08-07T10:36:35.827576Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.814318Z","title":"Layering in provenance systems,","venue":null,"work_id":"4fd70b11-2cb0-419a-a67e-aba45aab4385","year":2009},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.569668Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:7154a4c0022686cf417d898ecb6ad479f2ad108f6a4f0c3c0da69b8a6904b4bb","observation_id":"dda344fc-56ab-4652-a973-16de5fe7ffd4","resolution":{"observed_at":"2026-08-07T10:36:35.817510Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.803950Z","title":"P-gaussian: provenance-based gaussian distribution for detecting intrusion behavior variants using high efficient and real time memory databases,","venue":null,"work_id":"d70cbb8d-f674-475a-b67c-1c96d2acaf62","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.662104Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:9253a20f13ae266847f8c9d3c3673e49318ccb49e73094638e379df054485bec","observation_id":"c382bbf6-6d0d-48ae-ab3c-2ebd2f2a46d5","resolution":{"observed_at":"2026-08-07T10:36:35.807384Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.792830Z","title":"Pagoda: A hybrid approach to enable efficient real-time provenance based intrusion detection in big data environments,","venue":null,"work_id":"0ff400ac-1c62-4002-ab32-07945ecf12e6","year":2018},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.710792Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:74a36f9824389978d71090b55d337b2d648852a9cf6cc72ed3619dcebbea8145","observation_id":"d32e342a-3ed0-48e9-984b-506372e3047f","resolution":{"observed_at":"2026-08-07T10:36:35.796824Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.782417Z","title":null,"venue":null,"work_id":"be26abd4-89ea-4285-842e-2d8bf9189ba1","year":2025},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.788235Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:79ef22dea24ff1cff30c1b5cc2d82f3668bc28dd7f90d28d7b50899fea64d15b","observation_id":"076c58b3-8cce-418e-9778-fcdda9c4d3d7","resolution":{"observed_at":"2026-08-07T10:36:35.786037Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.770910Z","title":"Back-propagating system dependency impact for attack investigation,","venue":null,"work_id":"0b6f72a5-8188-4c37-92d1-e4505d732c19","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.851809Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:82bbe1367ac2b3fdd5d7275d7a0fc2daab9802451e4d48c967c0d84c474a7e71","observation_id":"e1905289-7127-4e4c-8c77-d48ba9af8584","resolution":{"observed_at":"2026-08-07T10:36:35.774746Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.760042Z","title":null,"venue":null,"work_id":"25abeca3-fbc9-402f-af2f-7db29bb0e168","year":2025},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.896026Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:47e135179d3f9f0229681b17eb717e03123f3024ab11c7365f977f03b2f46010","observation_id":"f5e2edd6-4c43-4dc5-be51-a45d3bcf41af","resolution":{"observed_at":"2026-08-07T10:36:35.763455Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.748984Z","title":"{ALASTOR}: Reconstructing the provenance of serverless intrusions,","venue":null,"work_id":"37b90065-736f-4061-a9e1-63df0a511de1","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:26.942184Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:bfa99c3fbdc2918849a09165ff0031ed163275decc930863ea07f99fb8a7e420","observation_id":"4026e980-c408-4e2e-bb9d-0cce1a25e86d","resolution":{"observed_at":"2026-08-07T10:36:35.752522Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.737941Z","title":"Analyzing the hidden danger of environment variables for keeping secrets,","venue":null,"work_id":"7ae4ff61-0407-49c1-b6c6-bd34785fb31a","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.016663Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:cbe05599cc81b90a0d37f90cc8774072972e9b4bd501d74c01f5b170ae522c5c","observation_id":"2021bee2-660d-4f6f-9482-2d44a9361aae","resolution":{"observed_at":"2026-08-07T10:36:35.741374Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.725892Z","title":"Auditbeat reference:,","venue":null,"work_id":"ebe2f599-35da-42b5-acd3-4829b510c9aa","year":2025},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.073418Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c00d3d5bc1a8af6770154c43fdf0440a07634203df31770f802082a58aa889fa","observation_id":"b7b23a91-845c-4da4-a9d3-4a71e4582c93","resolution":{"observed_at":"2026-08-07T10:36:35.729734Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.625459Z","title":"Fast memory-efficient anomaly detection in streaming heterogeneous graphs,","venue":null,"work_id":"d11da763-e0b4-450f-83a4-1f12e39a585a","year":2016},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.154872Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:6d17262d10b431363a774cb0fe3177fad0775a074149d774cd8aec2da83e9172","observation_id":"ec79acd3-cf8c-4a69-b921-1427e703ebfa","resolution":{"observed_at":"2026-08-07T10:36:35.711425Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.498280Z","title":"Log2vec: A heterogeneous graph embedding based approach for detecting cyber threats within enterprise,","venue":null,"work_id":"9b39abcd-1092-440e-9923-57f423307fc9","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.249875Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:dcb0b2c5c32e1cd8366cdb14acc6885674039c532698a0fd313984cb6edcbc30","observation_id":"b07f013e-9a46-4d02-bd1f-9bc8535f7a95","resolution":{"observed_at":"2026-08-07T10:36:35.564953Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.375055Z","title":"Deeplog: Anomaly detection and diagnosis from system logs through deep learning,","venue":null,"work_id":"0dfdb4b9-89fc-4f35-a2b6-baaa512b4fa9","year":2017},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.299188Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c8ab4a3e7a0ceaa544bedfb8335bee3678d98a90e4c1d8ff0c1e66336e20f3e5","observation_id":"d282f982-1ac4-42ec-8147-10e4988fe412","resolution":{"observed_at":"2026-08-07T10:36:35.431288Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.244466Z","title":"Robust log-based anomaly detection on unstable log data,","venue":null,"work_id":"53116f8f-b5d5-4ee0-bb49-703252274acb","year":2019},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.377668Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:80e29313a12cf19257a8e1bac4c0c8d4808dba58c6928ceb82f20cfb83a5688a","observation_id":"06565dbe-8d0c-43fc-b81e-0da577d52dc0","resolution":{"observed_at":"2026-08-07T10:36:35.312254Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:35.108103Z","title":"Graph neural networks in network neuroscience,","venue":null,"work_id":"ec9fe311-7fcc-451e-9b5a-23b35ac34357","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.444103Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:ac1d85a21355b747da270e92b388c56275065a504e441610cf555eaa905207f3","observation_id":"a812f9c9-dcea-4df2-bfa1-5ef1825fdf71","resolution":{"observed_at":"2026-08-07T10:36:35.172698Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.984910Z","title":"Gadbench: Revisiting and benchmarking supervised graph anomaly detection,","venue":null,"work_id":"4fd04801-fc4e-4e1f-bb66-a4f7b23c2847","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.507796Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:1669f2d3ae5c89de981ce94a5c8929c3b2a426dff454bb5184a2d506fc5d5e12","observation_id":"f7c79d2f-ca5d-4d26-8624-f21056c6f3b8","resolution":{"observed_at":"2026-08-07T10:36:35.042569Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.820914Z","title":"Cybersecurity threat intelligence augmentation and embedding improvement-a healthcare usecase,","venue":null,"work_id":"d42007fd-b0bb-40b4-9512-105afff625b1","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.582835Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:76af24362e14b14db1a2fd13886c3e715d3fa56ec8f44f8c573b4aea64b877a0","observation_id":"e9a3f762-de83-48db-8f63-5304b648cfc8","resolution":{"observed_at":"2026-08-07T10:36:34.873785Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.706622Z","title":"Sok: Taxonomy of attacks on open-source software supply chains,","venue":null,"work_id":"1d526e53-4ccc-4f69-bd7b-1a477fe039f2","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.659805Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:3247b5c3497c501662fd0464a9fc99763941558bdc1fbb928276192a858b26c9","observation_id":"49fe94b4-83a3-4d7f-a738-4bb8af0727e8","resolution":{"observed_at":"2026-08-07T10:36:34.769328Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.549208Z","title":"Attackg: Constructing technique knowledge graph from cyber threat intelligence reports,","venue":null,"work_id":"a13b2c4e-5d6a-417b-b08c-2ffefe440cd3","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.741472Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:719d70f7095b595a091589c5c466171abb9d5c9728a7403922ed00b244e53727","observation_id":"dad9aa3e-106b-42eb-9b65-dcbb8a5f0017","resolution":{"observed_at":"2026-08-07T10:36:34.647602Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.362664Z","title":null,"venue":null,"work_id":"b289a871-43f9-4731-b3a7-19b4079c9697","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.793507Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:c145298431b64b59b16b0e3e83e5a8db9e69a97c2b8e9af061728dabd11269ba","observation_id":"a5664fda-6531-4217-b598-9d6f0232b789","resolution":{"observed_at":"2026-08-07T10:36:34.487465Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:34.195821Z","title":"Microsoft security intelligence center,","venue":null,"work_id":"ed7414f1-7795-4896-a3ba-080ee9b85bd1","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.847587Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5bab8fc59c51d10df229de8d73140341771b1b547e5459d31592815e837a5446","observation_id":"85928bc3-9c61-4e2d-8714-7a6caf66e813","resolution":{"observed_at":"2026-08-07T10:36:34.263711Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:33.953415Z","title":"The cybersecurity and infrastructure security agency,","venue":null,"work_id":"5375f570-319d-4411-9e38-ca3918a64973","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.904472Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:0ae50cf8155497f0c4c6c56404a585f9f414d2e4a61e83167afa8cecd5547b27","observation_id":"ae8b2833-56db-4999-b2ed-a05818a0efcc","resolution":{"observed_at":"2026-08-07T10:36:34.060201Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:33.730661Z","title":"Homepage of fead,","venue":null,"work_id":"bbc7c30f-08a1-4abe-894a-2312416d88e2","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:27.984240Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:7d0267cb06cf3bd0503806954d834554bd91eb2fe08fbf02b75a1928ea7b1692","observation_id":"12db2bed-725b-47d0-a5cf-e8d50114f385","resolution":{"observed_at":"2026-08-07T10:36:33.834038Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:33.569086Z","title":"Att&ck tactics, techniques, and procedures,","venue":null,"work_id":"d244bc77-b2b9-47e2-8da1-d8b869944419","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.054816Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:9a748ce264e4b47cca04c6b315864be91bad1b5092d9cf98f2039fc0e36352c9","observation_id":"2d09a030-78ce-46b4-b31f-355bcb67df8a","resolution":{"observed_at":"2026-08-07T10:36:33.627655Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2311.07314","last_updated":"2023-11-13T13:10:44Z","snapshot_observed_at":"2026-08-17T13:02:00.455392Z","submitted_at":"2023-11-13T13:10:44Z","title":"Semi-automatic Data Enhancement for Document-Level Relation Extraction with Distant Supervision from Large Language Models","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2311.07314","snapshot_observed_at":"2026-08-07T10:36:28.111188Z","title":"Semi-automatic data enhancement for document-level relation extraction with distant supervision from large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.111188Z"},"links":{"cited_paper":"/paper/2311.07314","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:3e80706db894555c9baa6519ba3eda9d9f667f65d8d15480785bdc2f0d8b697e","observation_id":"87e1c369-bf21-4fa2-9e08-5ce630ff2003","resolution":{"observed_at":"2026-08-07T10:36:28.111188Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:33.299355Z","title":"Umie: Unified multimodal information extraction with instruction tuning,","venue":null,"work_id":"e0dd53a4-8241-49a8-beb2-7a9a6f73048f","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.194907Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:bec77230be7eb125e09ffce5a1e0c4098aa2467f232d10b1b54eba08efbdfc7a","observation_id":"2d3747cd-ca84-43ca-abaa-78d65990f015","resolution":{"observed_at":"2026-08-07T10:36:33.418933Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:33.066942Z","title":"Knowprompt: Knowledge-aware prompt-tuning with synergistic optimization for relation extraction,","venue":null,"work_id":"b04a8c7e-1554-406d-a8b5-1872098b7f16","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.270613Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:dc4163de45b257831e020248c964327015129e22455a3a82a46e22d5125375ba","observation_id":"901e89e4-8ba0-4dae-914f-4030f848d592","resolution":{"observed_at":"2026-08-07T10:36:33.175110Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:32.863099Z","title":"Survey of hallucination in natural language generation,","venue":null,"work_id":"5c09d5a8-1ba4-48e8-8191-968fe8109c99","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.354003Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:223783ee1099e67eaee0bd040a7b9242b8f694c80c57b994238cb21bbfb0bcd5","observation_id":"268e49bf-97cb-4c56-a6bc-890aa6349311","resolution":{"observed_at":"2026-08-07T10:36:32.941167Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.01219","last_updated":"2025-09-14T09:34:46Z","snapshot_observed_at":"2026-08-16T12:38:46.158503Z","submitted_at":"2023-09-03T16:56:48Z","title":"Siren's Song in the AI Ocean: A Survey on Hallucination in Large Language Models","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.01219","snapshot_observed_at":"2026-08-07T10:36:28.414659Z","title":"Siren’s song in the ai ocean: a survey on hallucination in large language models,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.414659Z"},"links":{"cited_paper":"/paper/2309.01219","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:f0581bfd320e86f1ceb0ea0a9581e2bce38793162bfcd4dada448720f0d18e16","observation_id":"910244d3-d583-43cd-9db5-084d02acc657","resolution":{"observed_at":"2026-08-07T10:36:28.414659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:32.668813Z","title":"Towards revealing the mystery behind chain of thought: a theoretical perspective,","venue":null,"work_id":"d9ea8db4-2075-4dba-8886-4bce334285f4","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.466256Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:2a8d1fb658469cc6bb523d4c365a7cfd6a6c9eace5c10399974535447297285d","observation_id":"53213ac8-59d5-4bc4-9c11-163f7320e3d9","resolution":{"observed_at":"2026-08-07T10:36:32.784475Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:32.397162Z","title":"Chain-of-thought prompting elicits reasoning in large language models,","venue":null,"work_id":"6ca8d1ca-0db7-4389-a019-c19bee5c21d5","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.553656Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:9f2055eb3499795f973670c80f9925c830a2341bd6ff0f84860580eb78e19200","observation_id":"577f296d-6429-4447-aae4-792e97ddd507","resolution":{"observed_at":"2026-08-07T10:36:32.543376Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.15402","last_updated":"2024-06-06T01:58:54Z","snapshot_observed_at":"2026-08-18T13:18:39.540526Z","submitted_at":"2023-09-27T04:53:10Z","title":"Navigate through Enigmatic Labyrinth A Survey of Chain of Thought Reasoning: Advances, Frontiers and Future","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2309.15402","snapshot_observed_at":"2026-08-07T10:36:28.617064Z","title":"A survey of chain of thought reasoning: Advances, frontiers and future,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.617064Z"},"links":{"cited_paper":"/paper/2309.15402","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5082101a4b106c59c87500583b46e24e2b55364540ec52671a3ed2a5f97ea9c9","observation_id":"c961e5f4-064d-4c64-aaff-b28eb677d986","resolution":{"observed_at":"2026-08-07T10:36:28.617064Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:32.169615Z","title":"Graph attention networks,","venue":null,"work_id":"31a96259-a100-4daa-aa97-54b07ff30112","year":2018},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.687055Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:967e31616f248b20c189a3b0c911c47a64b72fb32834bf488a5bbf1b385d16c3","observation_id":"408ea681-7ff5-4046-99c3-ceb665ae72f2","resolution":{"observed_at":"2026-08-07T10:36:32.273926Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.979155Z","title":"Darpa tc dataset,","venue":null,"work_id":"f4c230b1-db23-4b50-9006-3e8bd772d67c","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.721437Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:80e795460cdb5f5c8ce691ca9cfa3757745aca42265b5b78717f42873e4c2756","observation_id":"e8ba6d7e-0388-4191-8125-6aa72de92159","resolution":{"observed_at":"2026-08-07T10:36:32.063286Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.819998Z","title":"Cse-cic-ids2018,","venue":null,"work_id":"2e4d269b-8900-45b3-a485-500c197cd07a","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.799757Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:eb35f647ddb1122dfb56a4a86a7d5a8e263d90b23b74340156fcd62478c18d2a","observation_id":"24b50239-58cd-43b7-9a6e-d82aac6b9184","resolution":{"observed_at":"2026-08-07T10:36:31.904156Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.655354Z","title":"E-graphsage: A graph neural network based intrusion detection system for iot,","venue":null,"work_id":"4fe6e989-659e-49aa-97bc-4cda27e28091","year":2022},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.859237Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:8f6d7d11b57243420eaf1828628b9fbe222cb88ac4994718df452992cd2393b5","observation_id":"4b106383-8bd5-4ed9-ae1e-c3f90ee71c98","resolution":{"observed_at":"2026-08-07T10:36:31.727956Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.444037Z","title":"How effective are neural networks for fixing security vulnerabilities,","venue":null,"work_id":"4b9161d0-b3ab-4a2d-964e-df8f47b7e98f","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:28.938850Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:ac026541956b23e6a677a4829dae0fb9e9788e4495c8fdcb0ca8a90d8d2ce588","observation_id":"d1e74d83-930b-4c8c-9743-541c98b96274","resolution":{"observed_at":"2026-08-07T10:36:31.512911Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.244722Z","title":"Exploiting library vulnerability via migration based automating test generation,","venue":null,"work_id":"38c0ee52-551a-4b7a-861c-e60f04a25a7b","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.014407Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:829004f190d8418cd46a5a9a4d7303983167fe69cf0b5d05996e1a73dfb271a4","observation_id":"f582c098-b7e7-45e0-8bcc-4d836e69e499","resolution":{"observed_at":"2026-08-07T10:36:31.345200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:31.048329Z","title":"Sok: A comprehensive analysis and evaluation of docker container attack and defense mechanisms,","venue":null,"work_id":"84ca0622-1af2-497b-9dbf-5278502fa07e","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.090287Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:4699d8c254e190bcace844548f5966e0009e439e178efe4f8c5e7258c0d2728e","observation_id":"100ae821-6667-48d2-a2dd-9bc982552a44","resolution":{"observed_at":"2026-08-07T10:36:31.135625Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2406.16347","last_updated":"2024-09-24T00:54:30Z","snapshot_observed_at":"2026-08-17T11:36:11.713525Z","submitted_at":"2024-06-24T06:39:07Z","title":"VulZoo: A Comprehensive Vulnerability Intelligence Dataset","version":2},"cited_work":{"arxiv_id":"2406.16347","doi":null,"metadata_source":"pith","pith_arxiv_id":"2406.16347","snapshot_observed_at":"2026-08-07T10:36:29.728344Z","title":"VulZoo: A Comprehensive Vulnerability Intelligence Dataset","venue":"cs.CR","work_id":"e6a6361e-9040-4301-a56b-34c9e73d36b5","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.150441Z"},"links":{"cited_paper":"/paper/2406.16347","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:b48148a634b02a734bcfc27bd041ec692f4ff18d2682a21f54af017c4a127eb1","observation_id":"021acc35-241c-4fb2-98fe-0958f862c2d0","resolution":{"observed_at":"2026-08-07T10:36:29.806911Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:30.833706Z","title":"Research on automated anomaly localization in the power internet of things based on fuzzing and semantic analysis,","venue":null,"work_id":"f74afcd7-b8e3-4bd4-826f-8f3d7004a0ea","year":2023},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.214545Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:df22c1b31f8ac3ce39e4afca62b8697c49bcac308866591427de8c6378074e4f","observation_id":"e1b5eba8-6d07-450c-84de-73e824ddecc0","resolution":{"observed_at":"2026-08-07T10:36:30.944052Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.15656","last_updated":"2024-07-22T14:17:29Z","snapshot_observed_at":"2026-08-16T13:32:07.793117Z","submitted_at":"2024-07-22T14:17:29Z","title":"Evaluation of Reinforcement Learning for Autonomous Penetration Testing using A3C, Q-learning and DQN","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2407.15656","snapshot_observed_at":"2026-08-07T10:36:29.274127Z","title":"Evaluation of reinforcement learning for autonomous penetration test- ing using a3c, q-learning and dqn,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.274127Z"},"links":{"cited_paper":"/paper/2407.15656","citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:e0cc12401c6c90185ad066b846b8e798b9f3a56ed1d859805591ee3fdf47fd71","observation_id":"b18adbdc-8200-40c8-8a26-99bd23fff732","resolution":{"observed_at":"2026-08-07T10:36:29.274127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:30.615324Z","title":"Azure openai service,","venue":null,"work_id":"a552d309-932c-473b-9045-29f5a2807b8d","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.349332Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:0b2cbf76dc9fb3987b2d10cf082320030b26cc467744f87bb9c9cc7965b92284","observation_id":"c18966fe-9ad4-4259-9bd0-869a396d2997","resolution":{"observed_at":"2026-08-07T10:36:30.731194Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:30.457664Z","title":"Spec2006,","venue":null,"work_id":"a5ca2907-58a3-4a75-8189-ad79bd296cff","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.401772Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:8cf65b34a2903ce2e064ddaf04fd9e6b2e11421ed4223ca98f66c9b4c92b56c3","observation_id":"2858b8b9-6632-44d9-b826-ef1046e4ec1c","resolution":{"observed_at":"2026-08-07T10:36:30.544208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:30.223253Z","title":"A reusable characteriza- tion of the memory system behavior of spec2017 and spec2006,","venue":null,"work_id":"bcaea78b-375b-42c5-891e-335ea96c23b3","year":2021},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.478285Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:b24bb7bcf5aa88ca3e112da8050cab17475fcfe962cfaeaf86583a18e7d8003f","observation_id":"c775f3e7-b1cd-45fc-9d21-ed1421c3e535","resolution":{"observed_at":"2026-08-07T10:36:30.333364Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:30.082429Z","title":"Stream benchmark,","venue":null,"work_id":"58ca766f-2e06-4a21-a28d-b9b93c93255f","year":2024},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.554498Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:5f48a9076286d9796d04a9df8ecbf07f1e6d6af8a87ce4affdde30f0cefd2e31","observation_id":"bd865180-8c3f-4d67-8a33-eccb22bfe54f","resolution":{"observed_at":"2026-08-07T10:36:30.154731Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-07T10:36:29.953581Z","title":"On the memory underutilization: Exploring disaggregated memory on hpc systems,","venue":null,"work_id":"64c68062-d9d8-44f1-a9f7-3444c8630f83","year":2020},"citing_paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-07T10:36:29.618916Z"},"links":{"citing_paper":"/paper/2506.05001"},"observation_digest":"sha256:634b5e8038b3421aa68e1e94f85346340655eadc175f8689ce12a9958d74a7a5","observation_id":"07a7f8e8-afb1-498d-95ee-304cdc3ee960","resolution":{"observed_at":"2026-08-07T10:36:30.014139Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-18T06:34:40.430872+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2506.05001","last_updated":"2025-06-05T13:10:58Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-12T05:15:20.493654Z","submitted_at":"2025-06-05T13:10:58Z","title":"Attack Effect Model based Malicious Behavior Detection"},"reference_resolution":{"displayed":91,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":22,"verified_exact":1,"verified_fuzzy":68},"total_outbound_references":91},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-18T06:34:40.430872+00:00","source":"crossref"},{"observed_at":"2026-08-18T06:34:34.496301+00:00","source":"retraction_watch"}],"thesis":"As of 18 August 2026, this Paper Citation Record lists 91 of 91 outbound references and 0 inbound Pith citation observations for arXiv:2506.05001."}