{"as_of":"2026-08-10T08:01:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:303dc38583ec352aa5750f4e2c36c25f23b7be2c33a892d2c26d110fb353ced0","coverage":[{"denominator":66,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":66,"source":"paper_references, paper_reference_links","source_observed_at":"2026-07-08T21:01:34.899114Z","state":"measured"},{"denominator":66,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":66,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.05916/citation-record","integrity":"/paper/2607.05916/integrity","json":"/paper/2607.05916/citation-record.json","paper":"/paper/2607.05916"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.825049Z","title":"Kortum Aaron Bangor and James T","venue":null,"work_id":"2c6e8652-bc0e-4685-a3d9-3f04a9aa4150","year":2008},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:d4a068b27bb7ac7c3962fe97b7176f288166555fbd971995858a74a64b981e2b","observation_id":"f1fb7d43-a6a4-4fda-8ebb-d886a87d663b","resolution":{"observed_at":"2026-07-08T21:05:35.826404Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.813189Z","title":"Li-nids: Llm-based intelligent nids rules generation for cybersecurity applications","venue":null,"work_id":"9b1e74c5-c6e5-4b84-9ebb-4e42bcfd6453","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:852c8f16f6b20933cdba8b5e27c2600dca16f7e02cce4a144c7f84eaaed50a20","observation_id":"c7c38068-d020-4c60-b3d7-718fdc818168","resolution":{"observed_at":"2026-07-08T21:05:35.814720Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.807565Z","title":"Phi-4 technical report, 2024","venue":null,"work_id":"359f51e0-0079-424c-9083-4cbf7eab6f42","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:bc72aa36bad6a1d19cc0e94bee618935f71fef7e57520c808e6e1a904384473d","observation_id":"12e232f9-6a27-45aa-99ba-e8d9b90b20ba","resolution":{"observed_at":"2026-07-08T21:05:35.808617Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2303.08774","last_updated":"2024-03-04T06:01:33Z","snapshot_observed_at":"2026-08-07T07:30:12.213965Z","submitted_at":"2023-03-15T17:15:04Z","title":"GPT-4 Technical Report","version":6},"cited_work":{"arxiv_id":"2303.08774","doi":"10.1002/tea.20265","metadata_source":"pith","pith_arxiv_id":"2303.08774","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"GPT-4 Technical Report","venue":"cs.CL","work_id":"b928e041-6991-4c08-8c81-0359e4097c7b","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"cited_paper":"/paper/2303.08774","citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:7b673788b8a571722b58a1f4a36d1d2db9b7d209173a9cc7753d65f7beef04f0","observation_id":"e61993e2-389b-4332-907f-958fa878615e","resolution":{"observed_at":"2026-07-08T21:05:35.501607Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.785561Z","title":"Approximating memorization using loss surface geometry for dataset pruning and summarization","venue":null,"work_id":"7c617cbc-be58-49a4-9c31-e4b9f1ab4fec","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:fd9d45e452b95f11c32837c19799042662646f8115f1a91f7dbeb9147d7cb4e0","observation_id":"e28b12ea-12ca-461d-8536-31f5e02bff46","resolution":{"observed_at":"2026-07-08T21:05:35.790969Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.779462Z","title":"99% false positives: A qualitative study of {SOC} analysts’ perspectives on security alarms","venue":null,"work_id":"7b7c40d9-fa44-4cb5-891a-cae352fc1c48","year":2022},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:8dd9bc37fea46420948dcc0d0e870f020a1d6d54d6278f8d28cade74cebb6300","observation_id":"e1ec220f-8e93-410c-93ba-120d398a0fbf","resolution":{"observed_at":"2026-07-08T21:05:35.780815Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.781688Z","title":"Large language models hallucination: A comprehensive survey.Computer Science Review, 61:100970, 2026","venue":null,"work_id":"c98a2a0c-08fa-441e-b50f-df6a0dd189eb","year":2026},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:714e9cffbf7f5fce14e83b39479735f9ecf627b451ec3d5b2fcf956f747d7c64","observation_id":"b73908f8-9091-4b6a-b41b-db98ad2243f5","resolution":{"observed_at":"2026-07-08T21:05:35.783109Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.768925Z","title":"Next-generation intrusion detection systems with llms: real-time anomaly detection, explainable ai, and adaptive data generation","venue":null,"work_id":"362fc48a-1e7e-4512-83af-754085a1677d","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:d7165adfe43adf34a92a34b8c1ce095a08eea0ccd66dae35ce0e9ce9079beba7","observation_id":"5a262226-ea5b-4f4b-8685-e3c7af772120","resolution":{"observed_at":"2026-07-08T21:05:35.770253Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.766975Z","title":"The falcon series of open language models, 2023","venue":null,"work_id":"9d7e5dac-37c8-4b57-b483-d894a4fd20e4","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:dba63c8769089781e7cd1a52575f11882640a43b30249c96b7b43d102a970d6e","observation_id":"d7701cac-2020-4071-b40e-51b185543d8c","resolution":{"observed_at":"2026-07-08T21:05:35.768375Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.693118Z","title":"Towards transparent intrusion detection: A coherence-based framework in explainable ai integrating large language models","venue":null,"work_id":"68ceb704-9681-461b-a377-f1da20cc5164","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:de2b4536428a302c39a5872bfef0bb63250dbb5abf097db15b779381569d22ca","observation_id":"6f380e24-4bcc-4414-ad2a-e0fe5d7fd326","resolution":{"observed_at":"2026-07-08T21:05:35.695179Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.696113Z","title":"The claude 3 model family: Opus, sonnet, haiku","venue":null,"work_id":"edc480ec-b40f-439e-810e-d805bf370932","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:05a7df47a4358d9c9ce1dc92f12734aff31efd9c71687c0498f7cd73cc8ec88a","observation_id":"ff1a2fbe-1958-4990-9a43-6b63492ebb57","resolution":{"observed_at":"2026-07-08T21:05:35.697607Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.704232Z","title":"Qwen technical report, 2023","venue":null,"work_id":"fcb27323-71ce-44d5-8168-cf67a43b29ff","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:3ee4734e0be05138476d89822d2c1f36f16890a04f6b157d8dc2f8907e548499","observation_id":"d2af120a-7e56-414e-b9b7-46a0f3048714","resolution":{"observed_at":"2026-07-08T21:05:35.708493Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.754635Z","title":"Hex2sign: Automatic ids signature generation from hexadecimal data using llms","venue":null,"work_id":"eb28c8ce-a7b2-4c93-9268-d544207ac33a","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:1fea6cc22c537b1f29936ecd3c4af76530c19391123124d29bfdcacdb837ab65","observation_id":"7a1738f9-d587-4dad-9de0-e70fb2804da1","resolution":{"observed_at":"2026-07-08T21:05:35.755837Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.751627Z","title":"Determining what individual sus scores mean: Adding an adjective rating scale.Journal of usability studies, 4(3):114–123, 2009","venue":null,"work_id":"f36f4d9c-1f26-46fc-a7f4-2103a0b956db","year":2009},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:daae78eb4f33dcc8b0fab45c6916404ffb444cf931ac3cb156e62ca4bc533d1e","observation_id":"aca06481-596d-455e-9081-f59bd5b6e8b0","resolution":{"observed_at":"2026-07-08T21:05:35.753268Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.748437Z","title":"O’mine: A novel collaborative ddos detection mechanism for programmable data-planes","venue":null,"work_id":"25a1b8bc-0b21-4c27-86d5-507d48deb17f","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:63c8002bf9119b453162450d36e1709b6dcb0dc019cf7548bb3ce450be6f119f","observation_id":"7aaae29d-e947-45e4-86f8-c7e0cf5b48bb","resolution":{"observed_at":"2026-07-08T21:05:35.749855Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.790735Z","title":"Efficiency in the processes of intrusion detection system through usability evaluation methods.Available at SSRN 3151216, 2018","venue":null,"work_id":"8abcf887-442f-4e1b-80ac-f95f63b3430f","year":2018},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:c01aa1cc6b7b5f70e8f5d29db2e1d937b936420707150693ddb464d29fecf123","observation_id":"c453787d-9438-4001-b4a0-07bf911e010d","resolution":{"observed_at":"2026-07-08T21:05:35.792126Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.744839Z","title":"Kairos: Practical intrusion detection and investigation using whole-system provenance","venue":null,"work_id":"51a9007e-8b54-4d1f-b51a-16156a0ffbf6","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:c018ec2e049b33eeecfd4ade693219b54a92472f1885dc82defb2f61ff62a2e6","observation_id":"7ae173b0-137d-4618-b9a9-27d6c1b7707d","resolution":{"observed_at":"2026-07-08T21:05:35.746400Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.691933Z","title":"Deepseek llm: Scaling open-source language models with longtermism, 2024","venue":null,"work_id":"1ba53f3c-3857-4411-a7ab-d0aa38f6e2d5","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:761ecbfeb6939625671f2e8d75ff40ba9853c86b37a5cec7512a4827c2bccebe","observation_id":"96b1f131-2828-43c8-8d34-5b093e23d54d","resolution":{"observed_at":"2026-07-08T21:05:35.693293Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.714588Z","title":"Deepseek-v3 technical report, 2025","venue":null,"work_id":"ef9b43cb-2682-44bb-b588-dee4abdc1dcb","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:0f2e94a38bef38bc5366050cd3db54303b95d9cd5aca121a5850069e363fc3e1","observation_id":"48a454c6-4429-4846-923e-a4552ca0406c","resolution":{"observed_at":"2026-07-08T21:05:35.716677Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.803832Z","title":"Harnessing large language models for automated intrusion detection rule generation in cyber range.IEEE Network, 2025","venue":null,"work_id":"aea168f8-0876-4ba5-8162-8dedd4db3dd1","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:7d0b8775bca30cedaae5c8452b3cf0cf17e213baf868ada523362899f54454cf","observation_id":"8db360ae-3c38-4f0d-bc0d-f4b3d141a829","resolution":{"observed_at":"2026-07-08T21:05:35.805103Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.704685Z","title":"Ollama: Get up and running with large language models, 2023","venue":null,"work_id":"77a7ea9a-0a37-47a3-bd5d-a50bfd8c251e","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:87b2eab3ba8731648a3c250ee90a0c92a9f93a1a2a6d562123a01c3393ce0f29","observation_id":"a718e92b-7c6b-4522-8528-9d7b1851bd69","resolution":{"observed_at":"2026-07-08T21:05:35.706181Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.709380Z","title":"Point cloud analysis for ml-based malicious traffic detection: Reducing majorities of false positive alarms","venue":null,"work_id":"f4ef86e9-d4ed-4298-b2b0-2d460c5e0ab2","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:ec28a07433dd0ec67a6e81d2905a4b9e851151ab39e764daaadc2cfbdef85037","observation_id":"b5c9e6c4-114f-4921-add4-840b62352564","resolution":{"observed_at":"2026-07-08T21:05:35.712930Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.786791Z","title":"Sometimes, you aren’t what you do: Mimicry attacks against provenance graph host intrusion detection systems","venue":null,"work_id":"740fdd5c-54b7-45c3-940b-7b10df0ec98b","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:09fec5fe42cf8cf6871dbe78836af53aa969c7c20861121e43d692a4f6489471","observation_id":"159cb6ca-4ecb-4f88-b75b-588e4cfbbb80","resolution":{"observed_at":"2026-07-08T21:05:35.788072Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.801564Z","title":"R-caid: Embedding root cause analysis within provenance-based intrusion detection","venue":null,"work_id":"50738342-d278-4a9b-a5d5-e6f3d7d9f58a","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:ad8fff52d512c5d175c09f0b427741c3a8160aacbc712464410c7762852510a1","observation_id":"e14d4dac-593a-4f5d-974f-b3d27023da72","resolution":{"observed_at":"2026-07-08T21:05:35.802946Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2407.21783","last_updated":"2024-11-23T23:27:33Z","snapshot_observed_at":"2026-07-06T18:55:11.576666Z","submitted_at":"2024-07-31T17:54:27Z","title":"The Llama 3 Herd of Models","version":3},"cited_work":{"arxiv_id":"2407.21783","doi":"10.1016/s0749-0720(15","metadata_source":"pith","pith_arxiv_id":"2407.21783","snapshot_observed_at":"2026-07-11T11:50:26.030339Z","title":"The Llama 3 Herd of Models","venue":"cs.AI","work_id":"1549a635-88af-4ac1-acfe-51ae7bb53345","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"cited_paper":"/paper/2407.21783","citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:e0e2be9c3fb5590c3ece2eebb089f6e3b24728388513a119b2b0e96ac3d105b4","observation_id":"5428c8ec-010e-4eb4-beb9-193c2e508d01","resolution":{"observed_at":"2026-07-08T21:05:35.518423Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.809252Z","title":"A survey on llm-as-a-judge","venue":null,"work_id":"7d4a0d70-bb32-4984-8f3b-baa0c5197601","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:6e20317a19bbd4e3e73b96968b6f9bea15a5797f9c3a4cb90531f1650e324279","observation_id":"023e3dd2-1e2c-4af9-9c52-9a3bd755c83b","resolution":{"observed_at":"2026-07-08T21:05:35.810395Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.777492Z","title":"Flowsentry: Accelerat- ing netflow-based ddos detection","venue":null,"work_id":"2b1cb235-6065-4a8e-ab61-b6d3dda8ec47","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:04588c270ffcd27a8029728f4d28deeba919e8a8ca12c165e6736d323b95f3f1","observation_id":"1e2d68e0-04ad-47ad-9558-08787126b11f","resolution":{"observed_at":"2026-07-08T21:05:35.778849Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.726988Z","title":"A llm-based agent for the automatic generation and generalization of ids rules","venue":null,"work_id":"67884e2e-075d-47a7-ada8-a5255aecef83","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:3e0f2b96b15a1ee0da66da61de4068e876c69a0a79ecd177e0978db3aa1e99be","observation_id":"c6eb4cdf-9e8a-4cb6-9639-f1082a39ddf5","resolution":{"observed_at":"2026-07-08T21:05:35.728728Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.807908Z","title":"A comparative analysis of difficulty between log and graph-based detection rule creation","venue":null,"work_id":"8f3d50c6-68dc-4a08-9787-04f9dc5bcf03","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:0d93625a019c3bc7cdad33ebc18890c5696f538298159554ab93adcb2392d0f9","observation_id":"ae53712d-2e10-4dcc-8e08-b7e19f8ccfce","resolution":{"observed_at":"2026-07-08T21:05:35.809431Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.835155Z","title":"Jiang, Alexandre Sablayrolles, Arthur Mensch, et al","venue":null,"work_id":"edcd1850-8300-4f61-a29c-e7580c47d170","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:a51776e6cbe6420d67ea0374a94ec51a7a833e741c3d64fe81f118d1da86fc18","observation_id":"bda97fc6-5cb9-4887-b29e-729bf04eb83b","resolution":{"observed_at":"2026-07-08T21:05:35.836497Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.833255Z","title":"Survey of intrusion detection systems: techniques, datasets and challenges.Cybersecurity, 2(1):20, 2019","venue":null,"work_id":"a05f1b63-e638-4cda-bb98-baeca9b4e5bd","year":2019},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:aa52e7c4788697e674ee848809aea27f0bbeaa13df68e1b69955a04c9b67bb02","observation_id":"d21aa75e-497d-4d4c-a622-d2b78b57c8d3","resolution":{"observed_at":"2026-07-08T21:05:35.834584Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.826954Z","title":"Learning, forgetting, remembering: Insights from tracking llm memorization during training","venue":null,"work_id":"fc87a339-e29b-451d-ba8d-bdbef278ec0d","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:6cee22de661a5aa81a0a2598cff6a4380852c9df6ff4cb773046eac0b00329b9","observation_id":"ce6b8b57-87d5-49d9-bb50-d17e71abe375","resolution":{"observed_at":"2026-07-08T21:05:35.828204Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.822986Z","title":"From generation to judgment: Opportunities and challenges of llm-as-a-judge","venue":null,"work_id":"12bc2819-af2a-493d-a061-587e9d5dd254","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:c2171423aa6673fec36b062fdf701191d025ffbb49fb3a4d75a3d0b1143a56fb","observation_id":"d2d97efe-a2b2-417f-a9cf-5d9d2d8c1f36","resolution":{"observed_at":"2026-07-08T21:05:35.824464Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2510.13257","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.512398Z","title":"Gridai: Generating and repairing intrusion detection rules via collaboration among multiple llm-based agents.arXiv preprint arXiv:2510.13257, 2025","venue":null,"work_id":"3ef54edc-6a17-4782-b2e2-d45690a65efb","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:2d11a3f59ee8db3ca7fdbd1cd40e3a61e36afa0ed016387694f4ecd542475ba2","observation_id":"22eca70a-adf8-4ac1-9800-ffd92960bdb7","resolution":{"observed_at":"2026-07-08T21:05:35.514022Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.819129Z","title":"Rulemaster+: Llm-based automated rule generation framework for intrusion detection systems.Chinese Journal of Electronics, 34(5):1402–1415, 2025","venue":null,"work_id":"a3d35e25-40e2-43a0-8a13-5318e01ac6ad","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:76cbc5205d908f01362d13b4a42918481d17be4aaf03eb748c05ad5e4731cd08","observation_id":"04ecb25b-6af9-452e-895b-89db2e1b7992","resolution":{"observed_at":"2026-07-08T21:05:35.820538Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.815399Z","title":"Rulellm: Llm-driven rule generation for anomaly network traffic identification","venue":null,"work_id":"9923d8e7-f5fe-491d-a0b1-0d202503718e","year":2026},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:63ad4375071b4d44f32956887f0931e645d43f8b81a34d66a42920a1fb03417e","observation_id":"19a3ee3c-21c4-450a-ae8b-59c5d5b2d77a","resolution":{"observed_at":"2026-07-08T21:05:35.816813Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.810997Z","title":"Granite code models: A family of open foundation models for code intelligence, 2024","venue":null,"work_id":"4112fdbd-9caf-4d4f-ac9d-2d54f9a30bf8","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:1bf51da33df509c3e55b44eca288b01dcd302484ef35ef999d306453b53922c5","observation_id":"0d43d318-ae80-4c78-9b19-e667ec2b76e1","resolution":{"observed_at":"2026-07-08T21:05:35.812504Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2508.18684","last_updated":"2026-06-23T04:40:30Z","snapshot_observed_at":"2026-08-09T18:27:28.770669Z","submitted_at":"2025-08-26T05:08:53Z","title":"FALCON: Transforming Cyber Threat Intelligence into Deployable IDS Rules with Self-Reflection","version":2},"cited_work":{"arxiv_id":"2508.18684","doi":null,"metadata_source":"pith","pith_arxiv_id":"2508.18684","snapshot_observed_at":"2026-07-08T21:05:35.513972Z","title":"arXiv preprint arXiv:2508.18684 (2025)","venue":"cs.CR","work_id":"17bac0a2-27e3-4cac-a9f6-e238b6ae5b6b","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"cited_paper":"/paper/2508.18684","citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:0ad70e8e56685911cb4c5dd7dbffacd2d1e54ede5e4de8817818c203323c98d1","observation_id":"3b5baad9-f734-47e6-88f6-cc4ffc461300","resolution":{"observed_at":"2026-07-08T21:05:35.515686Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.803566Z","title":"Leveraging llms for automated ids rule generation: A novel methodology for securing industrial environments","venue":null,"work_id":"8dc1363d-8f2c-4fa3-b85e-b4bf3d29a37a","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:d367452a0489517ad7d0b30d5d6558f79daca10ba1f9a1c9473ff62ee66800cd","observation_id":"c3e1eeec-f032-496d-b70f-588ae6cf2b1e","resolution":{"observed_at":"2026-07-08T21:05:35.804865Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.798558Z","title":"Behind the scenes of attack graphs: Vulnerable network generator for in-depth experimental evaluation of attack graph scalability.Computers & Security, 157:104576, October 2025","venue":null,"work_id":"c6549498-172b-43b9-8484-e698beb0bb1b","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:6ae1567dc284a7c27021da2caacb0ee7d4b39a32ce0bdea5320d4aab0ee0ef7f","observation_id":"393c93e9-dcd4-4b57-8524-5aa01d81078d","resolution":{"observed_at":"2026-07-08T21:05:35.800283Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.791880Z","title":"Rulexploit: A framework for generating suricata rules from exploits using generative ai","venue":null,"work_id":"82630072-94b0-4691-a90f-4239ca687a9f","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:095841a929117b8fc782b167a9763e88f6658e67d5260054aecd632b18a26fed","observation_id":"a9426a25-c53b-4b65-ba0d-2aab90cfd84f","resolution":{"observed_at":"2026-07-08T21:05:35.797828Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.731404Z","title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization.ICISSp, 1(2018):108–116, 2018","venue":null,"work_id":"270385a6-8909-4924-ae44-398761b500e7","year":2018},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:29655fe701dfc5e39a4226887e4ad58c1963773c4abbdbcc01bf90174c477d4a","observation_id":"c240a672-4143-4a11-8601-35e7f387c77a","resolution":{"observed_at":"2026-07-08T21:05:35.733051Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2508.18947","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.503079Z","title":"LLMs in the SOC: An Empirical Study of Human-AI Collaboration in Security Operations Centres, September 2025","venue":null,"work_id":"c8cb019b-5325-4023-aa4c-69d89265e5a8","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:6e148351a8914d42e7db3e94bd3a199e051e6fc36f61c7cde6b20fd6f6459675","observation_id":"5851faf8-21ef-412e-86a4-4211d7831572","resolution":{"observed_at":"2026-07-08T21:05:35.504897Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.781457Z","title":"Gemini: A family of highly capable multimodal models","venue":null,"work_id":"a42ec617-708d-428a-b1fd-35375f955763","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:a1469726fbe326140db437cd187e840655e250102565cbc55c5d38094b11fdde","observation_id":"8855838a-0fb1-4802-a81b-a22a3240b85f","resolution":{"observed_at":"2026-07-08T21:05:35.782752Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.757596Z","title":"Ruling the unruly: Designing effective, low-noise network intrusion detection rules for security operations centers","venue":null,"work_id":"6b03577f-14cc-4af2-a42d-124c470fefe5","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:98da1f258121d742beefeb801172b78c731d307fb472da4312915c9ed05edfb6","observation_id":"d8bd42be-15f7-419d-bae9-1689e666fdc6","resolution":{"observed_at":"2026-07-08T21:05:35.758811Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.772648Z","title":"Memorization without overfitting: Analyzing the training dynamics of large language models.Advances in Neural Information Processing Systems, 35:38274–38290","venue":null,"work_id":"3ab06ed2-039d-45c8-845a-b89f57b01ef3","year":2022},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:eaa530e8dd5aaf8408f742327a3ce5b0bd0d5db7d1d894e9028d678068e6f0e2","observation_id":"2061674d-f850-43bd-b034-45d52fd35212","resolution":{"observed_at":"2026-07-08T21:05:35.774702Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.09288","last_updated":"2023-07-19T17:08:59Z","snapshot_observed_at":"2026-08-07T12:56:43.323460Z","submitted_at":"2023-07-18T14:31:57Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","version":2},"cited_work":{"arxiv_id":"2307.09288","doi":"10.24963/ijcai.2025/706","metadata_source":"pith","pith_arxiv_id":"2307.09288","snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Llama 2: Open Foundation and Fine-Tuned Chat Models","venue":"cs.CL","work_id":"68a5177f-d644-44c1-bd4f-4e5278c22f5d","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"cited_paper":"/paper/2307.09288","citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:e3983855a1b4d09dafd74cd8f29a97144682263077760912d736ea19c1c6abed","observation_id":"f020e44b-9d25-4de7-a415-05cdf5b06609","resolution":{"observed_at":"2026-07-08T21:05:35.516647Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.770851Z","title":"Flash: A comprehensive approach to intrusion detection via provenance graph representation learning","venue":null,"work_id":"138d906e-f97c-41f2-a612-16ae6a37fe35","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:144b6feaadb676c1b8ddd03f6af3c207b4b46cce0c3fc0ae30c91053b5c760b1","observation_id":"94acd9a3-3184-4483-a903-a7765322f981","resolution":{"observed_at":"2026-07-08T21:05:35.772099Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.805525Z","title":"Alert alchemy: Soc workflows and decisions in the management of nids rules","venue":null,"work_id":"b73b2fcf-51fd-498d-b9db-0c9cae985261","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:e9560f4c3b662cf7e68aa783af9293ae2ade1e28f939efdde68833473a4535ee","observation_id":"5d2c9f60-3413-4519-a93f-f68b4eee4345","resolution":{"observed_at":"2026-07-08T21:05:35.806934Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.783332Z","title":"Ruling the rules: Quantifying the evolution of rulesets, alerts and incidents in network intrusion detection","venue":null,"work_id":"0dd21c64-b284-4d0e-9862-af665f74078a","year":2022},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:fd243a8be7b5e43b4e7ee8e72c27110932ab31bf3cad2ff5f1ebbc12f618640d","observation_id":"539183b7-cfba-4346-968b-892074b43bb3","resolution":{"observed_at":"2026-07-08T21:05:35.784925Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2511.12224","doi":"10.48550/arxiv.2511.12224","metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Rulepilot: An llm-powered agent for security rule generation.arXiv preprint arXiv:2511.12224, 2025","venue":"ArXiv.org","work_id":"19504846-aefc-480f-b4c9-8c5327da22d7","year":2025},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:ba23e8f17cd79578c465ad012dfd9c361d02f7156af77152470322df5b74bf08","observation_id":"603bd6b7-d973-400a-9ce5-69ec86e7fa6d","resolution":{"observed_at":"2026-07-08T21:05:35.521724Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.764901Z","title":"Incorporating gradients to rules: Towards lightweight, adaptive provenance-based intrusion detection","venue":null,"work_id":"a2e42483-794c-429c-8e9e-3d699d990a32","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:58fedf687c17b26214cb8d55af78f06ed0dc07eab155a16158b0ecf3b62be9c4","observation_id":"4a250cde-18ae-4be0-a2f1-07a8fb843a7a","resolution":{"observed_at":"2026-07-08T21:05:35.766429Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-10T11:37:03.941805Z","title":"Chain-of-thought prompting elicits reasoning in large language models.Advances in neural information processing systems, 35:24824–24837","venue":null,"work_id":"3256b5a6-76d9-460c-ad77-5d232058ad6d","year":2022},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:09a752235785e27c62857580835035104c148d181da3f705feb4e04261893327","observation_id":"1e3775eb-4ebd-4aca-a95c-66fd0f3bfb69","resolution":{"observed_at":"2026-07-08T21:05:35.764063Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2309.06794","last_updated":"2023-09-13T08:33:09Z","snapshot_observed_at":"2026-07-06T16:17:50.837748Z","submitted_at":"2023-09-13T08:33:09Z","title":"Cognitive Mirage: A Review of Hallucinations in Large Language Models","version":1},"cited_work":{"arxiv_id":"2309.06794","doi":null,"metadata_source":"pith","pith_arxiv_id":"2309.06794","snapshot_observed_at":"2026-07-08T21:05:35.523194Z","title":"Cognitive mirage: A review of hallucinations in large language models","venue":"cs.CL","work_id":"09c56b2e-6529-4a42-a882-e8eada97292f","year":2023},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"cited_paper":"/paper/2309.06794","citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:470f61b8a36cfd2b6d2c4ea321811ff4c6084bca2d969dcc978b556739479ea2","observation_id":"dec81438-8340-4d2e-8d3e-3a522ff206f3","resolution":{"observed_at":"2026-07-08T21:05:35.524817Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.721253Z","title":"C y b e r s e c u r i t y","venue":null,"work_id":"58b349cb-b5b9-4a6e-b2dd-00ba97b8e68c","year":2024},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:e2df748a1c0f610d8868c2bfa2a771171759c65a5f85deab8e630a47527b0bd2","observation_id":"17d38faa-0ee7-41b7-939d-5aa33b7d5aa9","resolution":{"observed_at":"2026-07-08T21:05:35.724208Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.717993Z","title":"report, malicious payload, ET rules GLM4 Custom Custom × ×","venue":null,"work_id":"556cf0c3-6c31-4698-a1cb-f59a1209934f","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:26a5fa72d1242674b68eb5f66f93193ba5ab7de2b8aaa51d4d43c4339135c3bf","observation_id":"d2d7d3b3-43ec-42e1-9d62-559ae3c963b4","resolution":{"observed_at":"2026-07-08T21:05:35.719646Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.758457Z","title":null,"venue":null,"work_id":"29ee19dc-d20b-4743-aace-ff1cddea6f16","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:4a796ac5da918afe6c8dcba0d902d809f8a705d4487bc9db49c4f1553ec9112b","observation_id":"c2c76808-4481-4f58-9ef4-12ff5bcf968a","resolution":{"observed_at":"2026-07-08T21:05:35.759493Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.756774Z","title":null,"venue":null,"work_id":"84b798d3-0e60-4dd9-8338-d60e0474c882","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:dd2cc8f395acd8deeced424b39ec664083142a43f5ee175ff2ab12c5243b9760","observation_id":"8eaf8d01-dcb8-4dbc-82fd-02490e35c55e","resolution":{"observed_at":"2026-07-08T21:05:35.757875Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.725099Z","title":null,"venue":null,"work_id":"d170abea-6af7-478d-b789-49aa43ac7ba3","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:09671b55deeeaa09628b82a50eff337235762b488e6dd3c45525d3189381c4ec","observation_id":"b21f9e02-f3ad-4cd5-8f32-22115ee05c67","resolution":{"observed_at":"2026-07-08T21:05:35.726530Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.750498Z","title":null,"venue":null,"work_id":"e2eb109e-0032-4665-bef1-7ea08471e4f1","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:444575b2a9d9faa9060bfc817b29b1545163e9eb69ddaea62d6b5074598738a4","observation_id":"1c63517d-f821-463a-a5cf-12183ce99374","resolution":{"observed_at":"2026-07-08T21:05:35.752110Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.828777Z","title":null,"venue":null,"work_id":"dd045765-3cda-433a-abd9-dd1b8e9ac198","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:2aa89ff3a3786d022f3d396bb57f238939f7ccbf71d241025f67c2a822482daf","observation_id":"40fc4cb1-5487-49d8-8bbb-25401419c07a","resolution":{"observed_at":"2026-07-08T21:05:35.830605Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.821097Z","title":null,"venue":null,"work_id":"3bf4f71c-d422-449d-a7dc-0e5303f6c790","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:38b76a199c3fb09a2c20ca4351f455599717a1457ae68b8947dffd4d25672cdd","observation_id":"8400c76b-4097-4a73-bebc-0a99810bca5e","resolution":{"observed_at":"2026-07-08T21:05:35.822365Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.746999Z","title":null,"venue":null,"work_id":"bbae69ea-c0a2-439c-a55b-154dd7d8964a","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:de86fc5c21983d19e6f50ac272cb4d94855f8462f1ff99fe12e07d48f938bd0f","observation_id":"964dd938-bbff-431b-a144-023fd1434c7a","resolution":{"observed_at":"2026-07-08T21:05:35.748606Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.817367Z","title":null,"venue":null,"work_id":"feafdfc2-c5fd-47a5-af5f-7f3c0ae2ca11","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:89c3a1b29906ee58872afc39c0a148ca4980ed13204308654a7f6f2e6254a3c6","observation_id":"b2928f22-2fd5-4f6a-a875-0accfcab9153","resolution":{"observed_at":"2026-07-08T21:05:35.818480Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.831356Z","title":null,"venue":null,"work_id":"0ad81bde-4782-44e8-b9bc-f8fb4ab5f3c1","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:bb7b77692ab41bb2b862941c2da48b1744195b962fb7f3fc0ee19acb42e5ac9c","observation_id":"ccc7795e-444f-4c11-9be1-ed9074a38edb","resolution":{"observed_at":"2026-07-08T21:05:35.832503Z","resolver_source":"raw_fallback","status":"unresolved"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-07-08T21:05:35.775453Z","title":"suggest-and-deploy","venue":null,"work_id":"a763508b-6ae5-4d9a-be85-f7c44002fe5b","year":null},"citing_paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-07-08T21:01:34.899114Z"},"links":{"citing_paper":"/paper/2607.05916"},"observation_digest":"sha256:a550b131e9139482b1caf7138901094da792b390d3845477e593465ae980625d","observation_id":"7dfc05cd-1a25-4bb0-a641-3c7fe4a92884","resolution":{"observed_at":"2026-07-08T21:05:35.776816Z","resolver_source":"raw_fallback","status":"malformed_identifier"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2607.05916","last_updated":"2026-07-07T07:09:56Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-08T07:42:59.326758Z","submitted_at":"2026-07-07T07:09:56Z","title":"Beyond the Syntax: Do Security Experts Trust LLMs for NIDS Rule Engineering?"},"reference_resolution":{"displayed":66,"state_counts":{"malformed_identifier":1,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":9,"verified_exact":8,"verified_fuzzy":48},"total_outbound_references":66},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 66 of 66 outbound references and 0 inbound Pith citation observations for arXiv:2607.05916."}