Paper Citation Record · LEDGER

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation

As of 17 August 2026, this Paper Citation Record lists 39 of 39 outbound references and 0 inbound Pith citation observations for arXiv:2607.18108.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2607.18108 v1

Coverage vector

measured 39 of 39 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-01T16:10:50.591628Z

measured 39 of 39 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-17T06:30:58.91139+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

39 of 39 outbound references displayed

verified exact0
verified fuzzy0
unresolved39
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation c4a04720-be98-4c02-ba86-75e6018b7453 · outbound

This paper cites Auto-isac atm.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Auto-isac atm

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.446320Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 91eafd87-10a6-4735-9309-f6da04bdd7f2 · outbound

This paper cites Autosec-timeline.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Autosec-timeline

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.450881Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4ad726ea-4dd0-4d8e-bb95-baa21430dc9d · outbound

This paper cites Remote exploitation of nissan leaf.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Remote exploitation of nissan leaf

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.455068Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1c91684d-e300-4613-a676-7a8d8ef20789 · outbound

This paper cites Ctinexus: Automatic cyber threat intelligence knowledge graph construction using large language models.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Ctinexus: Automatic cyber threat intelligence knowledge graph construction using large language models

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.459426Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dfdf7ff6-d903-4947-adb9-f0ff6e23d7de · outbound

This paper cites Threatget: towards automated at- tack tree analysis for automotive cybersecurity.Infor- mation, 14(1):14, 2022.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Threatget: towards automated at- tack tree analysis for automotive cybersecurity.Infor- mation, 14(1):14, 2022

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.463754Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8df3ab1a-2db7-411e-ad34-e0d118843fcc · outbound

This paper cites Cti-hal: A human-annotated dataset for cyber threat intelligence analysis.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Cti-hal: A human-annotated dataset for cyber threat intelligence analysis

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.467608Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 18782f9b-962c-4756-8014-57645a11a8cf · outbound

This paper cites From Local to Global: A Graph RAG Approach to Query-Focused Summarization.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation From Local to Global: A Graph RAG Approach to Query-Focused Summarization

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.471524Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 30b7bd3f-68ad-4527-85b7-a81016f25625 · outbound

This paper cites Llm-tikg: Threat intelligence knowledge graph 13 construction utilizing large language model.Computers & Security, 145:103999, 2024.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Llm-tikg: Threat intelligence knowledge graph 13 construction utilizing large language model.Computers & Security, 145:103999, 2024

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.475944Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 28e93a21-d283-4ffe-9221-bcb3970b59e8 · outbound

This paper cites Ctikg: Llm-powered knowledge graph construction from cyber threat intel- ligence.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Ctikg: Llm-powered knowledge graph construction from cyber threat intel- ligence

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.479276Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d69882b0-d033-4943-8cca-94f58e8e4d8e · outbound

This paper cites Open-cykg: An open cyber threat intelligence knowledge graph.Knowledge- Based Systems, 233(1):1–13, 2021.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Open-cykg: An open cyber threat intelligence knowledge graph.Knowledge- Based Systems, 233(1):1–13, 2021

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.482959Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 156579c0-6b0f-4c0d-a083-aaad9572e2c0 · outbound

This paper cites Jeep hacking.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Jeep hacking

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.486797Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8c097a13-d94d-4e48-b7c8-f041ceccc766 · outbound

This paper cites Experimental security assessment of bmw cars.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Experimental security assessment of bmw cars

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.490686Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation a3856b11-a541-4f6f-bf66-2407fc47db82 · outbound

This paper cites Mercedes benz security research report.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Mercedes benz security research report

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.494441Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation dc75b194-3962-409b-a35e-3375f783ab45 · outbound

This paper cites Kia open source software notice.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Kia open source software notice

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.497965Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 847a62b3-b17a-4ccc-b121-630ba0e6f0ab · outbound

This paper cites Attackg: Constructing technique knowledge graph from cyber threat intelligence reports.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Attackg: Constructing technique knowledge graph from cyber threat intelligence reports

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.501460Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5ad36f75-375f-4d8f-8ac4-7d0056ec23ab · outbound

This paper cites Hyundai mobis open sources.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Hyundai mobis open sources

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.505406Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6e3016c7-406c-4114-a6dd-9af635785d85 · outbound

This paper cites Openrouter api.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Openrouter api

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.509569Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 620c1915-369b-4709-ba36-f5a228ca2a4c · outbound

This paper cites Mulval: A logic-based network security ana- lyzer.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Mulval: A logic-based network security ana- lyzer

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.513954Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 495c0b8f-fd10-41de-a998-e4b9f116542e · outbound

This paper cites A survey on security attacks and defense techniques for connected and au- tonomous vehicles.Computers & Security, 109:102269, 2021.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation A survey on security attacks and defense techniques for connected and au- tonomous vehicles.Computers & Security, 109:102269, 2021

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.517969Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b4cfadd2-3262-45b4-ace3-b2f1423307a2 · outbound

This paper cites Springer, 2024.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Springer, 2024

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.521358Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 5122a01a-8547-48d6-9636-48feb3ad4cf3 · outbound

This paper cites Hybridrag: Integrating knowledge graphs and vector retrieval aug- mented generation for efficient information extraction.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Hybridrag: Integrating knowledge graphs and vector retrieval aug- mented generation for efficient information extraction

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.524655Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 9e5edb81-3a5d-471c-9347-3f5b3d6c4049 · outbound

This paper cites Graph-based automation of threat analy- sis and risk assessment for automotive security.Infor- mation, 16(6):449, 2025.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Graph-based automation of threat analy- sis and risk assessment for automotive security.Infor- mation, 16(6):449, 2025

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.528137Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cbe4bd5b-de4b-44da-9aa3-d542315be277 · outbound

This paper cites Uco: A unified cybersecurity ontol- ogy.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Uco: A unified cybersecurity ontol- ogy

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.531355Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4a88108c-647b-4b71-ba9f-9d6d27773964 · outbound

This paper cites V olkswagen third-party licence notes.ht tps://www.volkswagen-newsroom.com/en/third -party-licence-notes-38.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation V olkswagen third-party licence notes.ht tps://www.volkswagen-newsroom.com/en/third -party-licence-notes-38

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.535447Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fcc5bab-4534-439e-b462-f4c519c1cd16 · outbound

This paper cites Proactive security defense: cyber threat intelligence modeling for connected autonomous vehicles.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Proactive security defense: cyber threat intelligence modeling for connected autonomous vehicles

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.539736Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 40a76e59-e2b6-484c-a1fa-fc41f578f047 · outbound

This paper cites A dataset for cyber threat intelligence modeling of connected autonomous vehicles.Scientific Data, 12(1):366, 2025.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation A dataset for cyber threat intelligence modeling of connected autonomous vehicles.Scientific Data, 12(1):366, 2025

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.543612Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ac419a4-0322-48b3-8cbd-7d8bf984085c · outbound

This paper cites Cakg: A framework for cyber- security threat detection of automotive via knowledge graph.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Cakg: A framework for cyber- security threat detection of automotive via knowledge graph

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.547168Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99292a37-b89f-4976-bb23-1ca17692370d · outbound

This paper cites Attackg+: Boosting attack graph con- struction with large language models.Computers & Security, 150:104220, 2025.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Attackg+: Boosting attack graph con- struction with large language models.Computers & Security, 150:104220, 2025

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.550919Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 81f3ef45-572a-49fd-bdcb-cb63cea73d26 · outbound

This paper cites MM-AttacKG: A Multimodal Approach to Attack Graph Construction with Large Language Models.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation MM-AttacKG: A Multimodal Approach to Attack Graph Construction with Large Language Models

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.554742Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bc6aa353-8fbc-4ecc-9810-524c413393a0 · outbound

This paper cites device",.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation device",

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.558542Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation da3e43bc-3eed-46e6-981a-e8b762a6341e · outbound

This paper cites Relations.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Relations

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.562728Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ee03f1b9-0c41-4c18-bd11-e6ab1beda145 · outbound

This paper cites intercepted.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation intercepted

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.566735Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 32d6fd3f-1d6b-4945-8e32-3e48bb809363 · outbound

This paper cites an unresolved cited work.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Unresolved cited work

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.570057Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1606372f-f829-4530-b702-7c98d4bdb1f8 · outbound

This paper cites an unresolved cited work.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Unresolved cited work

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.574082Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 879cdd15-39a4-40ab-ae18-d6016fef9918 · outbound

This paper cites an unresolved cited work.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Unresolved cited work

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.577649Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation beb4bdf0-2fd3-429a-89d5-851209905f36 · outbound

This paper cites an unresolved cited work.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Unresolved cited work

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.581400Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c2c18b8b-794a-4c61-9451-a04ce04d89f3 · outbound

This paper cites style": one of [.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation style": one of [

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.585073Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e509469e-5a2e-496f-9f36-3f77fbf7cef4 · outbound

This paper cites an unresolved cited work.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation Unresolved cited work

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.588472Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 21799e1e-bde2-4a8f-84db-e8e8f926508c · outbound

This paper cites nodes": [{.

GARAGE: Characterizing the Automation Boundary in LLM-based Attack Graph Generation nodes": [{

Reference 39

Resolution: unresolved; no resolver link, observed 2026-08-01T16:10:50.591628Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.