{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:COUDLQPK3MU5DB524PH2EROAWE","short_pith_number":"pith:COUDLQPK","canonical_record":{"source":{"id":"2210.02601","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-05T23:21:41Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"20cdcf5760d42f470f2b4015ebda88dc9c06f8331e3610261aa5d1317bc66e19","abstract_canon_sha256":"28e2f98c43dd0978ceaddc08f606825cdb7cd053cacda1050d58bfd4a79f344e"},"schema_version":"1.0"},"canonical_sha256":"13a835c1eadb29d187bae3cfa245c0b100228d675691d7dfc34e48a68bebb572","source":{"kind":"arxiv","id":"2210.02601","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.02601","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"arxiv_version","alias_value":"2210.02601v1","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.02601","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_12","alias_value":"COUDLQPK3MU5","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_16","alias_value":"COUDLQPK3MU5DB52","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_8","alias_value":"COUDLQPK","created_at":"2026-07-05T05:03:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:COUDLQPK3MU5DB524PH2EROAWE","target":"record","payload":{"canonical_record":{"source":{"id":"2210.02601","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-05T23:21:41Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"20cdcf5760d42f470f2b4015ebda88dc9c06f8331e3610261aa5d1317bc66e19","abstract_canon_sha256":"28e2f98c43dd0978ceaddc08f606825cdb7cd053cacda1050d58bfd4a79f344e"},"schema_version":"1.0"},"canonical_sha256":"13a835c1eadb29d187bae3cfa245c0b100228d675691d7dfc34e48a68bebb572","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:03:54.578876Z","signature_b64":"SckjkXmFB8aH9cG7MnDqZieGW/TrQ3rJbPt34HGi97Q8e/bxgv492ahxHTNoqQCSAMOFC/P1ygrRRNeWSKukCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"13a835c1eadb29d187bae3cfa245c0b100228d675691d7dfc34e48a68bebb572","last_reissued_at":"2026-07-05T05:03:54.578436Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:03:54.578436Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.02601","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:03:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p1FrzFmaIrPRVsGqclbVdkWXnJokUhUctaQ/BibXqsw6Sjw3aViQ9BfeOs9kof6uLZC03D4CvzWzTPhfOf+xDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:00:08.346507Z"},"content_sha256":"87ca2355f6ec248a2dc02ab01c3dfac5af496a9185c228efee0d1f68335a5c68","schema_version":"1.0","event_id":"sha256:87ca2355f6ec248a2dc02ab01c3dfac5af496a9185c228efee0d1f68335a5c68"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:COUDLQPK3MU5DB524PH2EROAWE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"From Threat Reports to Continuous Threat Intelligence: A Comparison of Attack Technique Extraction Methods from Textual Artifacts","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Laurie Williams, Md Rayhanur Rahman","submitted_at":"2022-10-05T23:21:41Z","abstract_excerpt":"The cyberthreat landscape is continuously evolving. Hence, continuous monitoring and sharing of threat intelligence have become a priority for organizations. Threat reports, published by cybersecurity vendors, contain detailed descriptions of attack Tactics, Techniques, and Procedures (TTP) written in an unstructured text format. Extracting TTP from these reports aids cybersecurity practitioners and researchers learn and adapt to evolving attacks and in planning threat mitigation. Researchers have proposed TTP extraction methods in the literature, however, not all of these proposed methods are"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.02601","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.02601/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:03:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LgiEL+VrKlkvElL5bgAWBvfB/0o9wPw9JGEJzhZv7eUmMO/2655eK3frhZQfLuwkIWatYQ+o5B6c+PymEyZtBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T20:00:08.347038Z"},"content_sha256":"2e6d370bce2afebc02e455c12ef4b180b3559132215dba8537d676e88452bd40","schema_version":"1.0","event_id":"sha256:2e6d370bce2afebc02e455c12ef4b180b3559132215dba8537d676e88452bd40"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/COUDLQPK3MU5DB524PH2EROAWE/bundle.json","state_url":"https://pith.science/pith/COUDLQPK3MU5DB524PH2EROAWE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/COUDLQPK3MU5DB524PH2EROAWE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T20:00:08Z","links":{"resolver":"https://pith.science/pith/COUDLQPK3MU5DB524PH2EROAWE","bundle":"https://pith.science/pith/COUDLQPK3MU5DB524PH2EROAWE/bundle.json","state":"https://pith.science/pith/COUDLQPK3MU5DB524PH2EROAWE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/COUDLQPK3MU5DB524PH2EROAWE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:COUDLQPK3MU5DB524PH2EROAWE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28e2f98c43dd0978ceaddc08f606825cdb7cd053cacda1050d58bfd4a79f344e","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-05T23:21:41Z","title_canon_sha256":"20cdcf5760d42f470f2b4015ebda88dc9c06f8331e3610261aa5d1317bc66e19"},"schema_version":"1.0","source":{"id":"2210.02601","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.02601","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"arxiv_version","alias_value":"2210.02601v1","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.02601","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_12","alias_value":"COUDLQPK3MU5","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_16","alias_value":"COUDLQPK3MU5DB52","created_at":"2026-07-05T05:03:54Z"},{"alias_kind":"pith_short_8","alias_value":"COUDLQPK","created_at":"2026-07-05T05:03:54Z"}],"graph_snapshots":[{"event_id":"sha256:2e6d370bce2afebc02e455c12ef4b180b3559132215dba8537d676e88452bd40","target":"graph","created_at":"2026-07-05T05:03:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.02601/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The cyberthreat landscape is continuously evolving. Hence, continuous monitoring and sharing of threat intelligence have become a priority for organizations. Threat reports, published by cybersecurity vendors, contain detailed descriptions of attack Tactics, Techniques, and Procedures (TTP) written in an unstructured text format. Extracting TTP from these reports aids cybersecurity practitioners and researchers learn and adapt to evolving attacks and in planning threat mitigation. Researchers have proposed TTP extraction methods in the literature, however, not all of these proposed methods are","authors_text":"Laurie Williams, Md Rayhanur Rahman","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-05T23:21:41Z","title":"From Threat Reports to Continuous Threat Intelligence: A Comparison of Attack Technique Extraction Methods from Textual Artifacts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.02601","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:87ca2355f6ec248a2dc02ab01c3dfac5af496a9185c228efee0d1f68335a5c68","target":"record","created_at":"2026-07-05T05:03:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28e2f98c43dd0978ceaddc08f606825cdb7cd053cacda1050d58bfd4a79f344e","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-10-05T23:21:41Z","title_canon_sha256":"20cdcf5760d42f470f2b4015ebda88dc9c06f8331e3610261aa5d1317bc66e19"},"schema_version":"1.0","source":{"id":"2210.02601","kind":"arxiv","version":1}},"canonical_sha256":"13a835c1eadb29d187bae3cfa245c0b100228d675691d7dfc34e48a68bebb572","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"13a835c1eadb29d187bae3cfa245c0b100228d675691d7dfc34e48a68bebb572","first_computed_at":"2026-07-05T05:03:54.578436Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:03:54.578436Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SckjkXmFB8aH9cG7MnDqZieGW/TrQ3rJbPt34HGi97Q8e/bxgv492ahxHTNoqQCSAMOFC/P1ygrRRNeWSKukCA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:03:54.578876Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.02601","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:87ca2355f6ec248a2dc02ab01c3dfac5af496a9185c228efee0d1f68335a5c68","sha256:2e6d370bce2afebc02e455c12ef4b180b3559132215dba8537d676e88452bd40"],"state_sha256":"13e878e9ac9b60f64f004df5bbf497f19b6a28012ee918f57312288ea099bffe"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qCWcjWdvMVAzGoH4NbK77LQUz1BnHkC/DTTZCwKTrjC9grlcFlZBp666VNsJVb8yzx03S0LnN0nRaatg8R94Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T20:00:08.353460Z","bundle_sha256":"6f8294c9df9fee7370523810d5841dd5ec6d447bf2dd587926ed06fca6d32c5c"}}