{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:ADDH5GZEXHDO722JONHKC2YRVV","short_pith_number":"pith:ADDH5GZE","canonical_record":{"source":{"id":"1805.01612","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-04T05:24:19Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"f2fe35e539e7a1092573eb8ccd0396e690ce0ec14c4a9629f74f3695621c371b","abstract_canon_sha256":"498b434083ab22453cecf28c2c6ac6e63e3b45470ac8ede049dea243f71a4593"},"schema_version":"1.0"},"canonical_sha256":"00c67e9b24b9c6efeb49734ea16b11ad459468aef4e5021b9290c043a7e916c7","source":{"kind":"arxiv","id":"1805.01612","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.01612","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"arxiv_version","alias_value":"1805.01612v2","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.01612","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"pith_short_12","alias_value":"ADDH5GZEXHDO","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_16","alias_value":"ADDH5GZEXHDO722J","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_8","alias_value":"ADDH5GZE","created_at":"2026-05-18T12:32:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:ADDH5GZEXHDO722JONHKC2YRVV","target":"record","payload":{"canonical_record":{"source":{"id":"1805.01612","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-04T05:24:19Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"f2fe35e539e7a1092573eb8ccd0396e690ce0ec14c4a9629f74f3695621c371b","abstract_canon_sha256":"498b434083ab22453cecf28c2c6ac6e63e3b45470ac8ede049dea243f71a4593"},"schema_version":"1.0"},"canonical_sha256":"00c67e9b24b9c6efeb49734ea16b11ad459468aef4e5021b9290c043a7e916c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:48:40.540933Z","signature_b64":"qCFwoG4AY9Q8jPtHIJpByux+PZy2p2JsEsM/i/kSggTK+2aW3t1s+chbUAr1HZOkPiGHxaJPJtSNLBXSgPPHAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"00c67e9b24b9c6efeb49734ea16b11ad459468aef4e5021b9290c043a7e916c7","last_reissued_at":"2026-05-17T23:48:40.540360Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:48:40.540360Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1805.01612","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DISDBy0TlNUc6EN4OGNuigihBukKihUrq2WR2nz4m/3IYKNLMy2+z98DhHaMQSq4d+u6vK0vMnbDVefL+gQvCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T18:02:32.584194Z"},"content_sha256":"08797ee2961242b0effd293a96d3f38744e853d0d869c5bd83dbb3810d976f45","schema_version":"1.0","event_id":"sha256:08797ee2961242b0effd293a96d3f38744e853d0d869c5bd83dbb3810d976f45"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:ADDH5GZEXHDO722JONHKC2YRVV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Insight into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Flavio Toffalini, Ivan Homoliak, Juan Guarnizo, Mart\\'in Ochoa, Yuval Elovici","submitted_at":"2018-05-04T05:24:19Z","abstract_excerpt":"Insider threats are one of today's most challenging cybersecurity issues that are not well addressed by commonly employed security solutions. Despite several scientific works published in this domain, we argue that the field can benefit from the proposed structural taxonomy and novel categorization of research that contribute to the organization and disambiguation of insider threat incidents and the defense solutions used against them. The objective of our categorization is to systematize knowledge in insider threat research, while leveraging existing grounded theory method for rigorous litera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.01612","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vvxxAYuwolR3N1iwuVs/6FSxeJqNnj7dN5bcuL+E9m72sGs1I6z6cAqNJzVeFOA7Jr4h/dve8+M6+1oAv39VCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-06T18:02:32.584897Z"},"content_sha256":"50cd4e0d59602f7d54c922f9a93c6cfa5736f11d18eb6863e60fbd91755d72bc","schema_version":"1.0","event_id":"sha256:50cd4e0d59602f7d54c922f9a93c6cfa5736f11d18eb6863e60fbd91755d72bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ADDH5GZEXHDO722JONHKC2YRVV/bundle.json","state_url":"https://pith.science/pith/ADDH5GZEXHDO722JONHKC2YRVV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ADDH5GZEXHDO722JONHKC2YRVV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-06T18:02:32Z","links":{"resolver":"https://pith.science/pith/ADDH5GZEXHDO722JONHKC2YRVV","bundle":"https://pith.science/pith/ADDH5GZEXHDO722JONHKC2YRVV/bundle.json","state":"https://pith.science/pith/ADDH5GZEXHDO722JONHKC2YRVV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ADDH5GZEXHDO722JONHKC2YRVV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:ADDH5GZEXHDO722JONHKC2YRVV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"498b434083ab22453cecf28c2c6ac6e63e3b45470ac8ede049dea243f71a4593","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-04T05:24:19Z","title_canon_sha256":"f2fe35e539e7a1092573eb8ccd0396e690ce0ec14c4a9629f74f3695621c371b"},"schema_version":"1.0","source":{"id":"1805.01612","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.01612","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"arxiv_version","alias_value":"1805.01612v2","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.01612","created_at":"2026-05-17T23:48:40Z"},{"alias_kind":"pith_short_12","alias_value":"ADDH5GZEXHDO","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_16","alias_value":"ADDH5GZEXHDO722J","created_at":"2026-05-18T12:32:13Z"},{"alias_kind":"pith_short_8","alias_value":"ADDH5GZE","created_at":"2026-05-18T12:32:13Z"}],"graph_snapshots":[{"event_id":"sha256:50cd4e0d59602f7d54c922f9a93c6cfa5736f11d18eb6863e60fbd91755d72bc","target":"graph","created_at":"2026-05-17T23:48:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Insider threats are one of today's most challenging cybersecurity issues that are not well addressed by commonly employed security solutions. Despite several scientific works published in this domain, we argue that the field can benefit from the proposed structural taxonomy and novel categorization of research that contribute to the organization and disambiguation of insider threat incidents and the defense solutions used against them. The objective of our categorization is to systematize knowledge in insider threat research, while leveraging existing grounded theory method for rigorous litera","authors_text":"Flavio Toffalini, Ivan Homoliak, Juan Guarnizo, Mart\\'in Ochoa, Yuval Elovici","cross_cats":["cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-04T05:24:19Z","title":"Insight into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.01612","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:08797ee2961242b0effd293a96d3f38744e853d0d869c5bd83dbb3810d976f45","target":"record","created_at":"2026-05-17T23:48:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"498b434083ab22453cecf28c2c6ac6e63e3b45470ac8ede049dea243f71a4593","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-04T05:24:19Z","title_canon_sha256":"f2fe35e539e7a1092573eb8ccd0396e690ce0ec14c4a9629f74f3695621c371b"},"schema_version":"1.0","source":{"id":"1805.01612","kind":"arxiv","version":2}},"canonical_sha256":"00c67e9b24b9c6efeb49734ea16b11ad459468aef4e5021b9290c043a7e916c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"00c67e9b24b9c6efeb49734ea16b11ad459468aef4e5021b9290c043a7e916c7","first_computed_at":"2026-05-17T23:48:40.540360Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:48:40.540360Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"qCFwoG4AY9Q8jPtHIJpByux+PZy2p2JsEsM/i/kSggTK+2aW3t1s+chbUAr1HZOkPiGHxaJPJtSNLBXSgPPHAQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:48:40.540933Z","signed_message":"canonical_sha256_bytes"},"source_id":"1805.01612","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:08797ee2961242b0effd293a96d3f38744e853d0d869c5bd83dbb3810d976f45","sha256:50cd4e0d59602f7d54c922f9a93c6cfa5736f11d18eb6863e60fbd91755d72bc"],"state_sha256":"67333f09e5f923b5aa9dab309424ae531345a37172c446b1ca0a754e953ee96e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iqL2zM6rfMJC2Szree/2gGzXVdgfZ+42dFqHVl7kF8qW0IwKa9/7cpnl49k9/6NCxVSioiSbFOfGqUzq7XMDDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-06T18:02:32.588774Z","bundle_sha256":"042317ea72682d3a2d94c2f4a417e39ac53bcfeb6922347a6aaa4a32a9bb0102"}}