{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5B7KRFMLXNKZWFUMXOZPPBPOMC","short_pith_number":"pith:5B7KRFML","canonical_record":{"source":{"id":"2501.00446","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-31T13:54:44Z","cross_cats_sorted":[],"title_canon_sha256":"0e9d93e1ee3c2e9b28fabacaa0a1db64f62275b21b499a76f2ebc6f2de33c863","abstract_canon_sha256":"82821f944c13bf203a90c0f16c3d1948b23a813d72a8981bd313f9d5b6d097f3"},"schema_version":"1.0"},"canonical_sha256":"e87ea8958bbb559b168cbbb2f785ee60aa8b489f761469d1c962fb8683bec20a","source":{"kind":"arxiv","id":"2501.00446","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.00446","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"arxiv_version","alias_value":"2501.00446v1","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.00446","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_12","alias_value":"5B7KRFMLXNKZ","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_16","alias_value":"5B7KRFMLXNKZWFUM","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_8","alias_value":"5B7KRFML","created_at":"2026-07-05T09:56:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5B7KRFMLXNKZWFUMXOZPPBPOMC","target":"record","payload":{"canonical_record":{"source":{"id":"2501.00446","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-31T13:54:44Z","cross_cats_sorted":[],"title_canon_sha256":"0e9d93e1ee3c2e9b28fabacaa0a1db64f62275b21b499a76f2ebc6f2de33c863","abstract_canon_sha256":"82821f944c13bf203a90c0f16c3d1948b23a813d72a8981bd313f9d5b6d097f3"},"schema_version":"1.0"},"canonical_sha256":"e87ea8958bbb559b168cbbb2f785ee60aa8b489f761469d1c962fb8683bec20a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:56:05.966532Z","signature_b64":"W4QHwMF2Tgyu57HLcTfHG26hbmvC1UrrhM4OwC8EiNc1GphRLrtLmjrb0b2IE/MewEwQGKGmsBzLkeYuNCxpDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e87ea8958bbb559b168cbbb2f785ee60aa8b489f761469d1c962fb8683bec20a","last_reissued_at":"2026-07-05T09:56:05.966112Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:56:05.966112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.00446","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GPXhoTxWV5AC6lQax1ZAoBYSCeqOh0ZmShau/IIeUZQ8SerxwELBZRpmQ6WGQwexH33ncbvAgA0NnqvJ9aolDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T15:04:41.845205Z"},"content_sha256":"ff1fd432767e24fbe6aaaebd9223e67adb3b9a5b5174d4fd551cc3edece7760c","schema_version":"1.0","event_id":"sha256:ff1fd432767e24fbe6aaaebd9223e67adb3b9a5b5174d4fd551cc3edece7760c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5B7KRFMLXNKZWFUMXOZPPBPOMC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DEHYDRATOR: Enhancing Provenance Graph Storage via Hierarchical Encoding and Sequence Generation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jie Ying, Mingqi Lv, Tiantian Zhu, Tieming Chen","submitted_at":"2024-12-31T13:54:44Z","abstract_excerpt":"As the scope and impact of cyber threats have expanded, analysts utilize audit logs to hunt threats and investigate attacks. The provenance graphs constructed from kernel logs are increasingly considered as an ideal data source due to their powerful semantic expression and attack historic correlation ability. However, storing provenance graphs with traditional databases faces the challenge of high storage overhead, given the high frequency of kernel events and the persistence of attacks. To address this, we propose Dehydrator, an efficient provenance graph storage system. For the logs generate"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.00446","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.00446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ci0YI0oynoAp9Zj3uk0NVHoVDpKNLVK70TMHbsipwn6R1lpve8aA1sFFJk1P5udHTXoA940ArUxKtKrokVLlCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T15:04:41.845803Z"},"content_sha256":"b03caa672c2b70caae07abb259332f325cebbcd8150477ddb9e749b017d46c0f","schema_version":"1.0","event_id":"sha256:b03caa672c2b70caae07abb259332f325cebbcd8150477ddb9e749b017d46c0f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/bundle.json","state_url":"https://pith.science/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T15:04:41Z","links":{"resolver":"https://pith.science/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC","bundle":"https://pith.science/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/bundle.json","state":"https://pith.science/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5B7KRFMLXNKZWFUMXOZPPBPOMC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5B7KRFMLXNKZWFUMXOZPPBPOMC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"82821f944c13bf203a90c0f16c3d1948b23a813d72a8981bd313f9d5b6d097f3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-31T13:54:44Z","title_canon_sha256":"0e9d93e1ee3c2e9b28fabacaa0a1db64f62275b21b499a76f2ebc6f2de33c863"},"schema_version":"1.0","source":{"id":"2501.00446","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.00446","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"arxiv_version","alias_value":"2501.00446v1","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.00446","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_12","alias_value":"5B7KRFMLXNKZ","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_16","alias_value":"5B7KRFMLXNKZWFUM","created_at":"2026-07-05T09:56:05Z"},{"alias_kind":"pith_short_8","alias_value":"5B7KRFML","created_at":"2026-07-05T09:56:05Z"}],"graph_snapshots":[{"event_id":"sha256:b03caa672c2b70caae07abb259332f325cebbcd8150477ddb9e749b017d46c0f","target":"graph","created_at":"2026-07-05T09:56:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.00446/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As the scope and impact of cyber threats have expanded, analysts utilize audit logs to hunt threats and investigate attacks. The provenance graphs constructed from kernel logs are increasingly considered as an ideal data source due to their powerful semantic expression and attack historic correlation ability. However, storing provenance graphs with traditional databases faces the challenge of high storage overhead, given the high frequency of kernel events and the persistence of attacks. To address this, we propose Dehydrator, an efficient provenance graph storage system. For the logs generate","authors_text":"Jie Ying, Mingqi Lv, Tiantian Zhu, Tieming Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-31T13:54:44Z","title":"DEHYDRATOR: Enhancing Provenance Graph Storage via Hierarchical Encoding and Sequence Generation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.00446","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ff1fd432767e24fbe6aaaebd9223e67adb3b9a5b5174d4fd551cc3edece7760c","target":"record","created_at":"2026-07-05T09:56:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"82821f944c13bf203a90c0f16c3d1948b23a813d72a8981bd313f9d5b6d097f3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-31T13:54:44Z","title_canon_sha256":"0e9d93e1ee3c2e9b28fabacaa0a1db64f62275b21b499a76f2ebc6f2de33c863"},"schema_version":"1.0","source":{"id":"2501.00446","kind":"arxiv","version":1}},"canonical_sha256":"e87ea8958bbb559b168cbbb2f785ee60aa8b489f761469d1c962fb8683bec20a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e87ea8958bbb559b168cbbb2f785ee60aa8b489f761469d1c962fb8683bec20a","first_computed_at":"2026-07-05T09:56:05.966112Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:56:05.966112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"W4QHwMF2Tgyu57HLcTfHG26hbmvC1UrrhM4OwC8EiNc1GphRLrtLmjrb0b2IE/MewEwQGKGmsBzLkeYuNCxpDw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:56:05.966532Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.00446","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ff1fd432767e24fbe6aaaebd9223e67adb3b9a5b5174d4fd551cc3edece7760c","sha256:b03caa672c2b70caae07abb259332f325cebbcd8150477ddb9e749b017d46c0f"],"state_sha256":"430c6149b2ab0ac6d76b66d3a74905aee9146c137695edd1ae2e85e92864e556"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IO5SK0xQSaAZoygzCN6dABM2RshRQFrXf5c08lC0oAOeVgVTek7cod8QYfkoiHRv9oc0zgGyg2hZSEY8Sjf1BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T15:04:41.851408Z","bundle_sha256":"e87d0e64a88fb7a5242cb1dd46000c66e655e8584c1cc14236dec80471d304a6"}}