{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:6GOROBP5MSY3UGVVVM7G5JEKQS","short_pith_number":"pith:6GOROBP5","canonical_record":{"source":{"id":"2507.06497","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-09T02:45:00Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"379e49f4eb5349108a4b07cc62fbab1893a9f81aabae3d2d79f295a6cfa553b3","abstract_canon_sha256":"46e6ab350e7263325997117bb64fd1fe87cd54217e6b1e70b792484d30815985"},"schema_version":"1.0"},"canonical_sha256":"f19d1705fd64b1ba1ab5ab3e6ea48a84ba7f3abf138d01ab225e4d86b6b17d5d","source":{"kind":"arxiv","id":"2507.06497","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.06497","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"arxiv_version","alias_value":"2507.06497v1","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.06497","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_12","alias_value":"6GOROBP5MSY3","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_16","alias_value":"6GOROBP5MSY3UGVV","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_8","alias_value":"6GOROBP5","created_at":"2026-07-05T11:34:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:6GOROBP5MSY3UGVVVM7G5JEKQS","target":"record","payload":{"canonical_record":{"source":{"id":"2507.06497","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-09T02:45:00Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"379e49f4eb5349108a4b07cc62fbab1893a9f81aabae3d2d79f295a6cfa553b3","abstract_canon_sha256":"46e6ab350e7263325997117bb64fd1fe87cd54217e6b1e70b792484d30815985"},"schema_version":"1.0"},"canonical_sha256":"f19d1705fd64b1ba1ab5ab3e6ea48a84ba7f3abf138d01ab225e4d86b6b17d5d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:17.170366Z","signature_b64":"YfEBazKYvLk6omLJrocX3ksrolWvA3mIDtm1yJaB94kj8cZe+sCvMNqN7ueUMQi7W/GCcpNjPidvkoYhYXRAAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f19d1705fd64b1ba1ab5ab3e6ea48a84ba7f3abf138d01ab225e4d86b6b17d5d","last_reissued_at":"2026-07-05T11:34:17.169875Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:17.169875Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.06497","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"InDcgrWhVdIzg7gxVV5J3TZJZB70/xBQcUeWvlDecD05tlDV0TDiMD9I5mIuJMp0hgAtZPrMZXuoj627xJXDAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:29:35.277421Z"},"content_sha256":"63a90babd95781b65b6901ea6026dc20b468703cd2b6051e2d8a93a7413cce52","schema_version":"1.0","event_id":"sha256:63a90babd95781b65b6901ea6026dc20b468703cd2b6051e2d8a93a7413cce52"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:6GOROBP5MSY3UGVVVM7G5JEKQS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TELSAFE: Security Gap Quantitative Risk Assessment Framework","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Chandra Thapa, Derui Wang, Hajime Suzuki, Rajiv Shah, Rayne Holland, Sarah Ali Siddiqui, Seyit Camtepe, Wei Shao","submitted_at":"2025-07-09T02:45:00Z","abstract_excerpt":"Gaps between established security standards and their practical implementation have the potential to introduce vulnerabilities, possibly exposing them to security risks. To effectively address and mitigate these security and compliance challenges, security risk management strategies are essential. However, it must adhere to well-established strategies and industry standards to ensure consistency, reliability, and compatibility both within and across organizations. In this paper, we introduce a new hybrid risk assessment framework called TELSAFE, which employs probabilistic modeling for quantit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.06497","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.06497/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GH/qqpSCY25gZXavYjXNAmmQm1Fp0rZBZZosY6/5HnQo1cbTkRMURkvoDD2cd0H51sTQtSoI0tj+w241t0kPBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T12:29:35.278045Z"},"content_sha256":"ab93b0b903fecb00e0f5a6a8a5941f28991e5da14fcae5f51e976601d28026da","schema_version":"1.0","event_id":"sha256:ab93b0b903fecb00e0f5a6a8a5941f28991e5da14fcae5f51e976601d28026da"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/bundle.json","state_url":"https://pith.science/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T12:29:35Z","links":{"resolver":"https://pith.science/pith/6GOROBP5MSY3UGVVVM7G5JEKQS","bundle":"https://pith.science/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/bundle.json","state":"https://pith.science/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6GOROBP5MSY3UGVVVM7G5JEKQS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:6GOROBP5MSY3UGVVVM7G5JEKQS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"46e6ab350e7263325997117bb64fd1fe87cd54217e6b1e70b792484d30815985","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-09T02:45:00Z","title_canon_sha256":"379e49f4eb5349108a4b07cc62fbab1893a9f81aabae3d2d79f295a6cfa553b3"},"schema_version":"1.0","source":{"id":"2507.06497","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.06497","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"arxiv_version","alias_value":"2507.06497v1","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.06497","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_12","alias_value":"6GOROBP5MSY3","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_16","alias_value":"6GOROBP5MSY3UGVV","created_at":"2026-07-05T11:34:17Z"},{"alias_kind":"pith_short_8","alias_value":"6GOROBP5","created_at":"2026-07-05T11:34:17Z"}],"graph_snapshots":[{"event_id":"sha256:ab93b0b903fecb00e0f5a6a8a5941f28991e5da14fcae5f51e976601d28026da","target":"graph","created_at":"2026-07-05T11:34:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.06497/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Gaps between established security standards and their practical implementation have the potential to introduce vulnerabilities, possibly exposing them to security risks. To effectively address and mitigate these security and compliance challenges, security risk management strategies are essential. However, it must adhere to well-established strategies and industry standards to ensure consistency, reliability, and compatibility both within and across organizations. In this paper, we introduce a new hybrid risk assessment framework called TELSAFE, which employs probabilistic modeling for quantit","authors_text":"Chandra Thapa, Derui Wang, Hajime Suzuki, Rajiv Shah, Rayne Holland, Sarah Ali Siddiqui, Seyit Camtepe, Wei Shao","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-09T02:45:00Z","title":"TELSAFE: Security Gap Quantitative Risk Assessment Framework"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.06497","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:63a90babd95781b65b6901ea6026dc20b468703cd2b6051e2d8a93a7413cce52","target":"record","created_at":"2026-07-05T11:34:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"46e6ab350e7263325997117bb64fd1fe87cd54217e6b1e70b792484d30815985","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-09T02:45:00Z","title_canon_sha256":"379e49f4eb5349108a4b07cc62fbab1893a9f81aabae3d2d79f295a6cfa553b3"},"schema_version":"1.0","source":{"id":"2507.06497","kind":"arxiv","version":1}},"canonical_sha256":"f19d1705fd64b1ba1ab5ab3e6ea48a84ba7f3abf138d01ab225e4d86b6b17d5d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f19d1705fd64b1ba1ab5ab3e6ea48a84ba7f3abf138d01ab225e4d86b6b17d5d","first_computed_at":"2026-07-05T11:34:17.169875Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:17.169875Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YfEBazKYvLk6omLJrocX3ksrolWvA3mIDtm1yJaB94kj8cZe+sCvMNqN7ueUMQi7W/GCcpNjPidvkoYhYXRAAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:17.170366Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.06497","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:63a90babd95781b65b6901ea6026dc20b468703cd2b6051e2d8a93a7413cce52","sha256:ab93b0b903fecb00e0f5a6a8a5941f28991e5da14fcae5f51e976601d28026da"],"state_sha256":"76c93300f4d5877587fc300df5e072875eac2483b27c48a2156add3d51f93c1f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lRpGlV0AvjcVAIwetczshQHP3BuVItVyLMdhz+jwMyTxn/QD+9/nJkgOwvFIY/T14fIfK6pAzq1rLADYMzQvDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T12:29:35.282715Z","bundle_sha256":"006f2f121fd5f9be022193dbd1a46bf636be69635750652fb2d6108aa19a1d88"}}