{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:M5RZZCGUVILEH4TZ6WNZDYA5PO","short_pith_number":"pith:M5RZZCGU","canonical_record":{"source":{"id":"2410.11209","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-15T02:50:59Z","cross_cats_sorted":[],"title_canon_sha256":"74305c9e924d49dc87b5ed52e63a2251534b0772d575bb03d5d4ed9f9a960040","abstract_canon_sha256":"187beab057fa0bcdf96aa358ed37b987dfb519653c93c6d5351a79e44f8cdaf4"},"schema_version":"1.0"},"canonical_sha256":"67639c88d4aa1643f279f59b91e01d7ba93533153fecfa02400500c11f1c7f32","source":{"kind":"arxiv","id":"2410.11209","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11209","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11209v1","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11209","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"M5RZZCGUVILE","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"M5RZZCGUVILEH4TZ","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"M5RZZCGU","created_at":"2026-07-05T09:20:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:M5RZZCGUVILEH4TZ6WNZDYA5PO","target":"record","payload":{"canonical_record":{"source":{"id":"2410.11209","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-15T02:50:59Z","cross_cats_sorted":[],"title_canon_sha256":"74305c9e924d49dc87b5ed52e63a2251534b0772d575bb03d5d4ed9f9a960040","abstract_canon_sha256":"187beab057fa0bcdf96aa358ed37b987dfb519653c93c6d5351a79e44f8cdaf4"},"schema_version":"1.0"},"canonical_sha256":"67639c88d4aa1643f279f59b91e01d7ba93533153fecfa02400500c11f1c7f32","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:20:30.801420Z","signature_b64":"Tui7Xl2hxr8Y9gJYJsexj9Dd/ZJDshRBg/d/D0KA+ya430Xn6/oC92GSTv52E0jAgKrp4a9whG5QLWR2E2D0Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"67639c88d4aa1643f279f59b91e01d7ba93533153fecfa02400500c11f1c7f32","last_reissued_at":"2026-07-05T09:20:30.800987Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:20:30.800987Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2410.11209","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"81vpc9lPVlNnqn7YPdjTDf6Kl2nJyDVKSMqhOXEF+9CtqlDqdfbk4p9mKOPzB+946T7v5kObEftTgTFWuV8xCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T00:57:53.217120Z"},"content_sha256":"6aeb368a2e7a217d44bdbc9cf394a751dd8639f07f2277e86e32d33d3fbf0389","schema_version":"1.0","event_id":"sha256:6aeb368a2e7a217d44bdbc9cf394a751dd8639f07f2277e86e32d33d3fbf0389"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:M5RZZCGUVILEH4TZ6WNZDYA5PO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CRUcialG: Reconstruct Integrated Attack Scenario Graphs by Cyber Threat Intelligence Reports","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chunlin Xiong, Hongmei Li, Jie Ying, Mingda Li, Mingqi Lv, Qixuan Yuan, Tiantian Zhu, Tieming Chen, Wenrui Cheng, Yan Chen","submitted_at":"2024-10-15T02:50:59Z","abstract_excerpt":"Cyber Threat Intelligence (CTI) reports are factual records compiled by security analysts through their observations of threat events or their own practical experience with attacks. In order to utilize CTI reports for attack detection, existing methods have attempted to map the content of reports onto system-level attack provenance graphs to clearly depict attack procedures. However, existing studies on constructing graphs from CTI reports suffer from problems such as weak natural language processing (NLP) capabilities, discrete and fragmented graphs, and insufficient attack semantic represent"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11209","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2410.11209/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ulnlhlcn5dUaB7XaBPzx3kC3eyikZRo/ZOp+Yr3+gTJA+F4iBC0fNLWGAE3xfHyH0WTCgrAUYnLSEBqHVs0aCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T00:57:53.220749Z"},"content_sha256":"2a373181325e54eff05d58071b5bdc07ab7aa0bf23b82aa195a449106305f7e9","schema_version":"1.0","event_id":"sha256:2a373181325e54eff05d58071b5bdc07ab7aa0bf23b82aa195a449106305f7e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/bundle.json","state_url":"https://pith.science/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T00:57:53Z","links":{"resolver":"https://pith.science/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO","bundle":"https://pith.science/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/bundle.json","state":"https://pith.science/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M5RZZCGUVILEH4TZ6WNZDYA5PO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:M5RZZCGUVILEH4TZ6WNZDYA5PO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"187beab057fa0bcdf96aa358ed37b987dfb519653c93c6d5351a79e44f8cdaf4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-15T02:50:59Z","title_canon_sha256":"74305c9e924d49dc87b5ed52e63a2251534b0772d575bb03d5d4ed9f9a960040"},"schema_version":"1.0","source":{"id":"2410.11209","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.11209","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"arxiv_version","alias_value":"2410.11209v1","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.11209","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_12","alias_value":"M5RZZCGUVILE","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_16","alias_value":"M5RZZCGUVILEH4TZ","created_at":"2026-07-05T09:20:30Z"},{"alias_kind":"pith_short_8","alias_value":"M5RZZCGU","created_at":"2026-07-05T09:20:30Z"}],"graph_snapshots":[{"event_id":"sha256:2a373181325e54eff05d58071b5bdc07ab7aa0bf23b82aa195a449106305f7e9","target":"graph","created_at":"2026-07-05T09:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.11209/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Cyber Threat Intelligence (CTI) reports are factual records compiled by security analysts through their observations of threat events or their own practical experience with attacks. In order to utilize CTI reports for attack detection, existing methods have attempted to map the content of reports onto system-level attack provenance graphs to clearly depict attack procedures. However, existing studies on constructing graphs from CTI reports suffer from problems such as weak natural language processing (NLP) capabilities, discrete and fragmented graphs, and insufficient attack semantic represent","authors_text":"Chunlin Xiong, Hongmei Li, Jie Ying, Mingda Li, Mingqi Lv, Qixuan Yuan, Tiantian Zhu, Tieming Chen, Wenrui Cheng, Yan Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-15T02:50:59Z","title":"CRUcialG: Reconstruct Integrated Attack Scenario Graphs by Cyber Threat Intelligence Reports"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.11209","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6aeb368a2e7a217d44bdbc9cf394a751dd8639f07f2277e86e32d33d3fbf0389","target":"record","created_at":"2026-07-05T09:20:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"187beab057fa0bcdf96aa358ed37b987dfb519653c93c6d5351a79e44f8cdaf4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-10-15T02:50:59Z","title_canon_sha256":"74305c9e924d49dc87b5ed52e63a2251534b0772d575bb03d5d4ed9f9a960040"},"schema_version":"1.0","source":{"id":"2410.11209","kind":"arxiv","version":1}},"canonical_sha256":"67639c88d4aa1643f279f59b91e01d7ba93533153fecfa02400500c11f1c7f32","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"67639c88d4aa1643f279f59b91e01d7ba93533153fecfa02400500c11f1c7f32","first_computed_at":"2026-07-05T09:20:30.800987Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:20:30.800987Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Tui7Xl2hxr8Y9gJYJsexj9Dd/ZJDshRBg/d/D0KA+ya430Xn6/oC92GSTv52E0jAgKrp4a9whG5QLWR2E2D0Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:20:30.801420Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.11209","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6aeb368a2e7a217d44bdbc9cf394a751dd8639f07f2277e86e32d33d3fbf0389","sha256:2a373181325e54eff05d58071b5bdc07ab7aa0bf23b82aa195a449106305f7e9"],"state_sha256":"e63d73177654b1d0e9d2d2decd08ba0d9db8717f1bfa523c46229179227806a6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yPArHMJsp3qh1KvmrHQNX0H3iiWlO3wzyxisLRdeXxXJ/g5YjRXKQnpVxQydlp6aO+xyo89t303mso2FA+TDBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T00:57:53.234068Z","bundle_sha256":"2ef29fca1808a0f4ab4fd839820b2bd61ce3e00a57f1e114122549d2d555a440"}}