{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:3V3LXTFCTJBXHOLUMOYB6ZD5XH","short_pith_number":"pith:3V3LXTFC","canonical_record":{"source":{"id":"2506.06604","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-07T00:44:09Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"fa178aa69f432be129a488dd0d10080eff5813a8ccda7cd198931b842e696547","abstract_canon_sha256":"3db0ded319f1bb19646a41354f33ff6794af5ac26873ca6533a98868f3643cd4"},"schema_version":"1.0"},"canonical_sha256":"dd76bbcca29a4373b97463b01f647db9ee4dbb5bb37dfec161ad9b27aeea9028","source":{"kind":"arxiv","id":"2506.06604","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06604","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06604v1","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06604","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_12","alias_value":"3V3LXTFCTJBX","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_16","alias_value":"3V3LXTFCTJBXHOLU","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_8","alias_value":"3V3LXTFC","created_at":"2026-07-05T11:17:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:3V3LXTFCTJBXHOLUMOYB6ZD5XH","target":"record","payload":{"canonical_record":{"source":{"id":"2506.06604","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-07T00:44:09Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"fa178aa69f432be129a488dd0d10080eff5813a8ccda7cd198931b842e696547","abstract_canon_sha256":"3db0ded319f1bb19646a41354f33ff6794af5ac26873ca6533a98868f3643cd4"},"schema_version":"1.0"},"canonical_sha256":"dd76bbcca29a4373b97463b01f647db9ee4dbb5bb37dfec161ad9b27aeea9028","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:17:52.753348Z","signature_b64":"F6/kKrgkevbuPLgYUGB+sYXae94T2sl2fNqgxlmI74Niwrbcwf6sS/JhAWeso01/5YTPvvIH5dew8FRx6yTDAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd76bbcca29a4373b97463b01f647db9ee4dbb5bb37dfec161ad9b27aeea9028","last_reissued_at":"2026-07-05T11:17:52.752803Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:17:52.752803Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.06604","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AF6n2j5GJinssPDOv1fUpWVu+lvqr/7VOFISUTpvHEpFYk6dm8WrB+yYP04SY/AjDBmVBkcCiB1TWshrQGElAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:47.763599Z"},"content_sha256":"64726eb8acd1f01b816b6b6cb50fec346a77fa5ef031827740255e6df0f4d1e5","schema_version":"1.0","event_id":"sha256:64726eb8acd1f01b816b6b6cb50fec346a77fa5ef031827740255e6df0f4d1e5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:3V3LXTFCTJBXHOLUMOYB6ZD5XH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Scoring the Unscorables: Cyber Risk Assessment Beyond Internet Scans","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Armin Sarabi, Manish Karir, Mingyan Liu","submitted_at":"2025-06-07T00:44:09Z","abstract_excerpt":"In this paper we present a study on using novel data types to perform cyber risk quantification by estimating the likelihood of a data breach. We demonstrate that it is feasible to build a highly accurate cyber risk assessment model using public and readily available technology signatures obtained from crawling an organization's website. This approach overcomes the limitations of previous similar approaches that relied on large-scale IP address based scanning data, which suffers from incomplete/missing IP address mappings as well as the lack of such data for large numbers of small and medium-s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06604","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.06604/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:17:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m9XYZ3mmcwhYljmc5w0qvr3I7zX/Prt2bTmPmnrrNfdZQyGYxwA//8EqAhfSB3lClLjk4KSpO8kOW4Cg0/wVDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:47.764220Z"},"content_sha256":"e9948e3ecc67ff515e60546ab587fb10601f64cf44bab39c97e676f7c0ee0393","schema_version":"1.0","event_id":"sha256:e9948e3ecc67ff515e60546ab587fb10601f64cf44bab39c97e676f7c0ee0393"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/bundle.json","state_url":"https://pith.science/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:34:47Z","links":{"resolver":"https://pith.science/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH","bundle":"https://pith.science/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/bundle.json","state":"https://pith.science/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3V3LXTFCTJBXHOLUMOYB6ZD5XH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:3V3LXTFCTJBXHOLUMOYB6ZD5XH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3db0ded319f1bb19646a41354f33ff6794af5ac26873ca6533a98868f3643cd4","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-07T00:44:09Z","title_canon_sha256":"fa178aa69f432be129a488dd0d10080eff5813a8ccda7cd198931b842e696547"},"schema_version":"1.0","source":{"id":"2506.06604","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.06604","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.06604v1","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.06604","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_12","alias_value":"3V3LXTFCTJBX","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_16","alias_value":"3V3LXTFCTJBXHOLU","created_at":"2026-07-05T11:17:52Z"},{"alias_kind":"pith_short_8","alias_value":"3V3LXTFC","created_at":"2026-07-05T11:17:52Z"}],"graph_snapshots":[{"event_id":"sha256:e9948e3ecc67ff515e60546ab587fb10601f64cf44bab39c97e676f7c0ee0393","target":"graph","created_at":"2026-07-05T11:17:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.06604/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper we present a study on using novel data types to perform cyber risk quantification by estimating the likelihood of a data breach. We demonstrate that it is feasible to build a highly accurate cyber risk assessment model using public and readily available technology signatures obtained from crawling an organization's website. This approach overcomes the limitations of previous similar approaches that relied on large-scale IP address based scanning data, which suffers from incomplete/missing IP address mappings as well as the lack of such data for large numbers of small and medium-s","authors_text":"Armin Sarabi, Manish Karir, Mingyan Liu","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-07T00:44:09Z","title":"Scoring the Unscorables: Cyber Risk Assessment Beyond Internet Scans"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.06604","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:64726eb8acd1f01b816b6b6cb50fec346a77fa5ef031827740255e6df0f4d1e5","target":"record","created_at":"2026-07-05T11:17:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3db0ded319f1bb19646a41354f33ff6794af5ac26873ca6533a98868f3643cd4","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-07T00:44:09Z","title_canon_sha256":"fa178aa69f432be129a488dd0d10080eff5813a8ccda7cd198931b842e696547"},"schema_version":"1.0","source":{"id":"2506.06604","kind":"arxiv","version":1}},"canonical_sha256":"dd76bbcca29a4373b97463b01f647db9ee4dbb5bb37dfec161ad9b27aeea9028","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dd76bbcca29a4373b97463b01f647db9ee4dbb5bb37dfec161ad9b27aeea9028","first_computed_at":"2026-07-05T11:17:52.752803Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:17:52.752803Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F6/kKrgkevbuPLgYUGB+sYXae94T2sl2fNqgxlmI74Niwrbcwf6sS/JhAWeso01/5YTPvvIH5dew8FRx6yTDAg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:17:52.753348Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.06604","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:64726eb8acd1f01b816b6b6cb50fec346a77fa5ef031827740255e6df0f4d1e5","sha256:e9948e3ecc67ff515e60546ab587fb10601f64cf44bab39c97e676f7c0ee0393"],"state_sha256":"a396e307bb4316ca91b70763c428d43f4adc94490a69322388b2145ca45fadd9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M7ST2FA25HoY3N85m4U9MhOHrwZeLyYpNX6AnvH9QWRiN0FEJZIKNAx4GSYNOnYQr4hZ1j5ibe1FJ7LPSOUyCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:34:47.768612Z","bundle_sha256":"b67da0ef2472d470a57af7b53b57154ba1b60fa93b8aadba1d3d9243192a056e"}}