{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:AP76B3QFEB4QMUILBQOREG3QIU","short_pith_number":"pith:AP76B3QF","schema_version":"1.0","canonical_sha256":"03ffe0ee05207906510b0c1d121b70450867da8ba0afecc96eab95576a463e4b","source":{"kind":"arxiv","id":"2411.15354","version":1},"attestation_state":"computed","paper":{"title":"Unified Semantic Log Parsing and Causal Graph Construction for Attack Attribution","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Christos Anagnostopoulos, Jeremy Singer, Shameem P. Parambath, Zhuoran Tan","submitted_at":"2024-11-22T21:40:19Z","abstract_excerpt":"Multi-source logs provide a comprehensive overview of ongoing system activities, allowing for in-depth analysis to detect potential threats. A practical approach for threat detection involves explicit extraction of entity triples (subject, action, object) towards building provenance graphs to facilitate the analysis of system behavior. However, current log parsing methods mainly focus on retrieving parameters and events from raw logs while approaches based on entity extraction are limited to processing a single type of log. To address these gaps, we contribute with a novel unified framework, c"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2411.15354","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.SE","submitted_at":"2024-11-22T21:40:19Z","cross_cats_sorted":[],"title_canon_sha256":"5db75f263b5e0743d861464ce3315e884bc083b6770ba307d3541a5afa820894","abstract_canon_sha256":"5d0fb719ac4c809c131981e503fc654a413ac1ad72adbe2390198d8790d12838"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:39:33.627364Z","signature_b64":"oCnrNsMRByM/7zwoHgfUYeGgn3H859DpncjbwMyr/law5nUsx7aazxQD2vk4mNs2F43DqAsRY5k3WdnU4QeyBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"03ffe0ee05207906510b0c1d121b70450867da8ba0afecc96eab95576a463e4b","last_reissued_at":"2026-07-05T09:39:33.626835Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:39:33.626835Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Unified Semantic Log Parsing and Causal Graph Construction for Attack Attribution","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Christos Anagnostopoulos, Jeremy Singer, Shameem P. Parambath, Zhuoran Tan","submitted_at":"2024-11-22T21:40:19Z","abstract_excerpt":"Multi-source logs provide a comprehensive overview of ongoing system activities, allowing for in-depth analysis to detect potential threats. A practical approach for threat detection involves explicit extraction of entity triples (subject, action, object) towards building provenance graphs to facilitate the analysis of system behavior. However, current log parsing methods mainly focus on retrieving parameters and events from raw logs while approaches based on entity extraction are limited to processing a single type of log. To address these gaps, we contribute with a novel unified framework, c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.15354","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.15354/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2411.15354","created_at":"2026-07-05T09:39:33.626902+00:00"},{"alias_kind":"arxiv_version","alias_value":"2411.15354v1","created_at":"2026-07-05T09:39:33.626902+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.15354","created_at":"2026-07-05T09:39:33.626902+00:00"},{"alias_kind":"pith_short_12","alias_value":"AP76B3QFEB4Q","created_at":"2026-07-05T09:39:33.626902+00:00"},{"alias_kind":"pith_short_16","alias_value":"AP76B3QFEB4QMUIL","created_at":"2026-07-05T09:39:33.626902+00:00"},{"alias_kind":"pith_short_8","alias_value":"AP76B3QF","created_at":"2026-07-05T09:39:33.626902+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU","json":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU.json","graph_json":"https://pith.science/api/pith-number/AP76B3QFEB4QMUILBQOREG3QIU/graph.json","events_json":"https://pith.science/api/pith-number/AP76B3QFEB4QMUILBQOREG3QIU/events.json","paper":"https://pith.science/paper/AP76B3QF"},"agent_actions":{"view_html":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU","download_json":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU.json","view_paper":"https://pith.science/paper/AP76B3QF","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2411.15354&json=true","fetch_graph":"https://pith.science/api/pith-number/AP76B3QFEB4QMUILBQOREG3QIU/graph.json","fetch_events":"https://pith.science/api/pith-number/AP76B3QFEB4QMUILBQOREG3QIU/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU/action/timestamp_anchor","attest_storage":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU/action/storage_attestation","attest_author":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU/action/author_attestation","sign_citation":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU/action/citation_signature","submit_replication":"https://pith.science/pith/AP76B3QFEB4QMUILBQOREG3QIU/action/replication_record"}},"created_at":"2026-07-05T09:39:33.626902+00:00","updated_at":"2026-07-05T09:39:33.626902+00:00"}