{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:D545K4TC3VXCSJU3XLHM3XIE5O","short_pith_number":"pith:D545K4TC","schema_version":"1.0","canonical_sha256":"1f79d57262dd6e29269bbacecddd04eba03c31467bfb3de209f1791562330e95","source":{"kind":"arxiv","id":"2409.16400","version":1},"attestation_state":"computed","paper":{"title":"Chasing the Shadows: TTPs in Action to Attribute Advanced Persistent Threats","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bikash Saha, Nanda Rani, Sandeep Kumar Shukla, Vikas Maurya","submitted_at":"2024-09-24T18:59:27Z","abstract_excerpt":"The current state of Advanced Persistent Threats (APT) attribution primarily relies on time-consuming manual processes. These include mapping incident artifacts onto threat attribution frameworks and employing expert reasoning to uncover the most likely responsible APT groups. This research aims to assist the threat analyst in the attribution process by presenting an attribution method named CAPTAIN (Comprehensive Advanced Persistent Threat AttrIbutioN). This novel APT attribution approach leverages the Tactics, Techniques, and Procedures (TTPs) employed by various APT groups in past attacks. "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2409.16400","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-24T18:59:27Z","cross_cats_sorted":[],"title_canon_sha256":"aba2c96945dbf0dbae9d72dd8c04ce1dcd5d081c00a3b677ddf8262c3a66ac89","abstract_canon_sha256":"1c99e8f3e43d75436f9113dda306af0afc69fa6ea0f16528d8ec3733af0d4d61"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:11:33.085809Z","signature_b64":"uVVKdoMlXJe4moZQ4MEHpYwyPw6SyB6fvFV0ZsrfZdziaGfpI9XfwLS6hUSmf6XOZNdHM51SCRAofzyPWmk8AA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1f79d57262dd6e29269bbacecddd04eba03c31467bfb3de209f1791562330e95","last_reissued_at":"2026-07-05T09:11:33.085401Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:11:33.085401Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Chasing the Shadows: TTPs in Action to Attribute Advanced Persistent Threats","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bikash Saha, Nanda Rani, Sandeep Kumar Shukla, Vikas Maurya","submitted_at":"2024-09-24T18:59:27Z","abstract_excerpt":"The current state of Advanced Persistent Threats (APT) attribution primarily relies on time-consuming manual processes. These include mapping incident artifacts onto threat attribution frameworks and employing expert reasoning to uncover the most likely responsible APT groups. This research aims to assist the threat analyst in the attribution process by presenting an attribution method named CAPTAIN (Comprehensive Advanced Persistent Threat AttrIbutioN). This novel APT attribution approach leverages the Tactics, Techniques, and Procedures (TTPs) employed by various APT groups in past attacks. "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.16400","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.16400/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2409.16400","created_at":"2026-07-05T09:11:33.085457+00:00"},{"alias_kind":"arxiv_version","alias_value":"2409.16400v1","created_at":"2026-07-05T09:11:33.085457+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.16400","created_at":"2026-07-05T09:11:33.085457+00:00"},{"alias_kind":"pith_short_12","alias_value":"D545K4TC3VXC","created_at":"2026-07-05T09:11:33.085457+00:00"},{"alias_kind":"pith_short_16","alias_value":"D545K4TC3VXCSJU3","created_at":"2026-07-05T09:11:33.085457+00:00"},{"alias_kind":"pith_short_8","alias_value":"D545K4TC","created_at":"2026-07-05T09:11:33.085457+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2506.10175","citing_title":"AURA: A Multi-Agent Intelligence Framework for Knowledge-Enhanced Cyber Threat Attribution","ref_index":24,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O","json":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O.json","graph_json":"https://pith.science/api/pith-number/D545K4TC3VXCSJU3XLHM3XIE5O/graph.json","events_json":"https://pith.science/api/pith-number/D545K4TC3VXCSJU3XLHM3XIE5O/events.json","paper":"https://pith.science/paper/D545K4TC"},"agent_actions":{"view_html":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O","download_json":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O.json","view_paper":"https://pith.science/paper/D545K4TC","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2409.16400&json=true","fetch_graph":"https://pith.science/api/pith-number/D545K4TC3VXCSJU3XLHM3XIE5O/graph.json","fetch_events":"https://pith.science/api/pith-number/D545K4TC3VXCSJU3XLHM3XIE5O/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O/action/timestamp_anchor","attest_storage":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O/action/storage_attestation","attest_author":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O/action/author_attestation","sign_citation":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O/action/citation_signature","submit_replication":"https://pith.science/pith/D545K4TC3VXCSJU3XLHM3XIE5O/action/replication_record"}},"created_at":"2026-07-05T09:11:33.085457+00:00","updated_at":"2026-07-05T09:11:33.085457+00:00"}