{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:N6IV7FACNJ2UYR57SNL6RBXCRK","short_pith_number":"pith:N6IV7FAC","canonical_record":{"source":{"id":"1811.05622","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2018-11-14T03:26:27Z","cross_cats_sorted":[],"title_canon_sha256":"d1501228c40b82d3ba5e8c40f6e09414226aac9f5d679565de1067796f04bce9","abstract_canon_sha256":"54196bef08d8a57ca2ce1ef5ffba1aeba8489a7329ca200b16bb94f7c5acbf93"},"schema_version":"1.0"},"canonical_sha256":"6f915f94026a754c47bf9357e886e28aa9d4c4a9ab45239ed37c991dbbfaefa9","source":{"kind":"arxiv","id":"1811.05622","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.05622","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"1811.05622v1","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.05622","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"N6IV7FACNJ2U","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"N6IV7FACNJ2UYR57","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"N6IV7FAC","created_at":"2026-05-18T12:32:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:N6IV7FACNJ2UYR57SNL6RBXCRK","target":"record","payload":{"canonical_record":{"source":{"id":"1811.05622","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2018-11-14T03:26:27Z","cross_cats_sorted":[],"title_canon_sha256":"d1501228c40b82d3ba5e8c40f6e09414226aac9f5d679565de1067796f04bce9","abstract_canon_sha256":"54196bef08d8a57ca2ce1ef5ffba1aeba8489a7329ca200b16bb94f7c5acbf93"},"schema_version":"1.0"},"canonical_sha256":"6f915f94026a754c47bf9357e886e28aa9d4c4a9ab45239ed37c991dbbfaefa9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:00:42.504940Z","signature_b64":"RWvuOA9yeftFQoGEW9DVe1jn21U+l4Dk6b1ThJz7re7zLglgoPgIt5WeRT++FY4JPLrB6aNgOXJU5KgbO/V8DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6f915f94026a754c47bf9357e886e28aa9d4c4a9ab45239ed37c991dbbfaefa9","last_reissued_at":"2026-05-18T00:00:42.504293Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:00:42.504293Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.05622","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I2ZBDVqUAQU1/xjpD54wpA2sZJyBC/Fw++bVUpS0NSovVjKceDkZfiLDx0vb2cgLDVEV+kBQ5vcI/8HMNjX/CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T11:05:44.508214Z"},"content_sha256":"56da8525bfdb8004259a6f6bc7e8b0a3448a8e5e26a114bbc3fdca60707362b0","schema_version":"1.0","event_id":"sha256:56da8525bfdb8004259a6f6bc7e8b0a3448a8e5e26a114bbc3fdca60707362b0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:N6IV7FACNJ2UYR57SNL6RBXCRK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Game Theoretic Approach for Dynamic Information Flow Tracking to Detect Multi-Stage Advanced Persistent Threats","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.GT","authors_text":"Andrew Clark, Dinuka Sahabandu, Joey Allen, Linda Bushnell, Radha Poovendran, Shana Moothedath, Wenke Lee","submitted_at":"2018-11-14T03:26:27Z","abstract_excerpt":"Advanced Persistent Threats (APTs) infiltrate cyber systems and compromise specifically targeted data and/or resources through a sequence of stealthy attacks consisting of multiple stages. Dynamic information flow tracking has been proposed to detect APTs. In this paper, we develop a dynamic information flow tracking game for resource-efficient detection of APTs via multi-stage dynamic games. The game evolves on an information flow graph, whose nodes are processes and objects (e.g. file, network endpoints) in the system and the edges capture the interaction between different processes and obje"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.05622","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"b5mrPAWCkBehGpeLfVNU4GVBlqhe6+irNynnVrGI5edIHl+3fu/ZCaXeEjvLwlQTBYPsIbd7dS+8UUvPfbCgCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T11:05:44.508923Z"},"content_sha256":"9e9a7af3db214ae6f35bf3e27f7593a011629da28a77eda55fa3b40f548c3b18","schema_version":"1.0","event_id":"sha256:9e9a7af3db214ae6f35bf3e27f7593a011629da28a77eda55fa3b40f548c3b18"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/bundle.json","state_url":"https://pith.science/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T11:05:44Z","links":{"resolver":"https://pith.science/pith/N6IV7FACNJ2UYR57SNL6RBXCRK","bundle":"https://pith.science/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/bundle.json","state":"https://pith.science/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/N6IV7FACNJ2UYR57SNL6RBXCRK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:N6IV7FACNJ2UYR57SNL6RBXCRK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"54196bef08d8a57ca2ce1ef5ffba1aeba8489a7329ca200b16bb94f7c5acbf93","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2018-11-14T03:26:27Z","title_canon_sha256":"d1501228c40b82d3ba5e8c40f6e09414226aac9f5d679565de1067796f04bce9"},"schema_version":"1.0","source":{"id":"1811.05622","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.05622","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"arxiv_version","alias_value":"1811.05622v1","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.05622","created_at":"2026-05-18T00:00:42Z"},{"alias_kind":"pith_short_12","alias_value":"N6IV7FACNJ2U","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_16","alias_value":"N6IV7FACNJ2UYR57","created_at":"2026-05-18T12:32:40Z"},{"alias_kind":"pith_short_8","alias_value":"N6IV7FAC","created_at":"2026-05-18T12:32:40Z"}],"graph_snapshots":[{"event_id":"sha256:9e9a7af3db214ae6f35bf3e27f7593a011629da28a77eda55fa3b40f548c3b18","target":"graph","created_at":"2026-05-18T00:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Advanced Persistent Threats (APTs) infiltrate cyber systems and compromise specifically targeted data and/or resources through a sequence of stealthy attacks consisting of multiple stages. Dynamic information flow tracking has been proposed to detect APTs. In this paper, we develop a dynamic information flow tracking game for resource-efficient detection of APTs via multi-stage dynamic games. The game evolves on an information flow graph, whose nodes are processes and objects (e.g. file, network endpoints) in the system and the edges capture the interaction between different processes and obje","authors_text":"Andrew Clark, Dinuka Sahabandu, Joey Allen, Linda Bushnell, Radha Poovendran, Shana Moothedath, Wenke Lee","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2018-11-14T03:26:27Z","title":"A Game Theoretic Approach for Dynamic Information Flow Tracking to Detect Multi-Stage Advanced Persistent Threats"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.05622","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:56da8525bfdb8004259a6f6bc7e8b0a3448a8e5e26a114bbc3fdca60707362b0","target":"record","created_at":"2026-05-18T00:00:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"54196bef08d8a57ca2ce1ef5ffba1aeba8489a7329ca200b16bb94f7c5acbf93","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2018-11-14T03:26:27Z","title_canon_sha256":"d1501228c40b82d3ba5e8c40f6e09414226aac9f5d679565de1067796f04bce9"},"schema_version":"1.0","source":{"id":"1811.05622","kind":"arxiv","version":1}},"canonical_sha256":"6f915f94026a754c47bf9357e886e28aa9d4c4a9ab45239ed37c991dbbfaefa9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6f915f94026a754c47bf9357e886e28aa9d4c4a9ab45239ed37c991dbbfaefa9","first_computed_at":"2026-05-18T00:00:42.504293Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:00:42.504293Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RWvuOA9yeftFQoGEW9DVe1jn21U+l4Dk6b1ThJz7re7zLglgoPgIt5WeRT++FY4JPLrB6aNgOXJU5KgbO/V8DA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:00:42.504940Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.05622","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:56da8525bfdb8004259a6f6bc7e8b0a3448a8e5e26a114bbc3fdca60707362b0","sha256:9e9a7af3db214ae6f35bf3e27f7593a011629da28a77eda55fa3b40f548c3b18"],"state_sha256":"c9cebeb20bd78115568c1127dae040b080c2d02c96f93bb08411d97364f60e39"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jPZEmsTm0J5npCTlWCIs9ifBJkO1AZVC7F7uyPG//QVaxFDfBmFXiNx3AwHtiAU2gyzVq8+Ob1st+O9joLqLBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T11:05:44.512497Z","bundle_sha256":"f9503c532bced3d53192f3bb32357a23c24ea23ddc1de6da7c123875e910d138"}}