{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:B53Y7E3WZES4VORDMNDARVEMW5","short_pith_number":"pith:B53Y7E3W","canonical_record":{"source":{"id":"2508.16637","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-17T16:43:23Z","cross_cats_sorted":[],"title_canon_sha256":"b983b258f51137fd6eeb7edb0de34ada4c42266da3225dc864d42f9d0edaa59c","abstract_canon_sha256":"4e3020857287584f8cbe3978f787bc5934333da400374d390dedd73aa6a346d2"},"schema_version":"1.0"},"canonical_sha256":"0f778f9376c925caba23634608d48cb749f5589effe4b46b3e3ee25ee34bc481","source":{"kind":"arxiv","id":"2508.16637","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.16637","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"arxiv_version","alias_value":"2508.16637v1","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.16637","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_12","alias_value":"B53Y7E3WZES4","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_16","alias_value":"B53Y7E3WZES4VORD","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_8","alias_value":"B53Y7E3W","created_at":"2026-07-05T11:58:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:B53Y7E3WZES4VORDMNDARVEMW5","target":"record","payload":{"canonical_record":{"source":{"id":"2508.16637","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-17T16:43:23Z","cross_cats_sorted":[],"title_canon_sha256":"b983b258f51137fd6eeb7edb0de34ada4c42266da3225dc864d42f9d0edaa59c","abstract_canon_sha256":"4e3020857287584f8cbe3978f787bc5934333da400374d390dedd73aa6a346d2"},"schema_version":"1.0"},"canonical_sha256":"0f778f9376c925caba23634608d48cb749f5589effe4b46b3e3ee25ee34bc481","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:58:00.533188Z","signature_b64":"vSrc0EzLKVZ2s6x+PG60vw7VGXx10bNJAzO/3PegtqBvRvhWk5WKg7saEeVrYZFpJWA1DanGKS4I+Kt5lsU+DA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f778f9376c925caba23634608d48cb749f5589effe4b46b3e3ee25ee34bc481","last_reissued_at":"2026-07-05T11:58:00.532737Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:58:00.532737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.16637","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ouW8oyLE9uGOSXEB+8IRF8kvG+nOdwp9+YuaULU37HVVu8MB8QGoP4PdDPjtAAYVGt1usbDnhQlp0gxb3EwrAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:35:06.594365Z"},"content_sha256":"ab33f18bf04adb04e2f81162c7d0a2b2addcbd098b2abae97ef4ddca99384026","schema_version":"1.0","event_id":"sha256:ab33f18bf04adb04e2f81162c7d0a2b2addcbd098b2abae97ef4ddca99384026"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:B53Y7E3WZES4VORDMNDARVEMW5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Passive Hack-Back Strategies for Cyber Attribution: Covert Vectors in Denied Environment","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Abraham Itzhak Weinberg","submitted_at":"2025-08-17T16:43:23Z","abstract_excerpt":"Attributing cyberattacks remains a central challenge in modern cybersecurity, particularly within denied environments where defenders have limited visibility into attacker infrastructure and are restricted by legal or operational rules of engagement. This perspective examines the strategic value of passive hack-back techniques that enable covert attribution and intelligence collection without initiating direct offensive actions. Key vectors include tracking beacons, honeytokens, environment-specific payloads, and supply-chain-based traps embedded within exfiltrated or leaked assets. These appr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.16637","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.16637/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H034ClzmB8RctK02oZJvvNCYLqUcSW4wY9XNKmwZgeKd5ZIsOkacRQSsrBd952Uzwb8crPKOqNiVfaktltVqBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T06:35:06.594885Z"},"content_sha256":"80790b6cc51f71f7b3f37a7fa37c6c1a99075561b9408c060bb9be1f4e67739d","schema_version":"1.0","event_id":"sha256:80790b6cc51f71f7b3f37a7fa37c6c1a99075561b9408c060bb9be1f4e67739d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B53Y7E3WZES4VORDMNDARVEMW5/bundle.json","state_url":"https://pith.science/pith/B53Y7E3WZES4VORDMNDARVEMW5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B53Y7E3WZES4VORDMNDARVEMW5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T06:35:06Z","links":{"resolver":"https://pith.science/pith/B53Y7E3WZES4VORDMNDARVEMW5","bundle":"https://pith.science/pith/B53Y7E3WZES4VORDMNDARVEMW5/bundle.json","state":"https://pith.science/pith/B53Y7E3WZES4VORDMNDARVEMW5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B53Y7E3WZES4VORDMNDARVEMW5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:B53Y7E3WZES4VORDMNDARVEMW5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4e3020857287584f8cbe3978f787bc5934333da400374d390dedd73aa6a346d2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-17T16:43:23Z","title_canon_sha256":"b983b258f51137fd6eeb7edb0de34ada4c42266da3225dc864d42f9d0edaa59c"},"schema_version":"1.0","source":{"id":"2508.16637","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.16637","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"arxiv_version","alias_value":"2508.16637v1","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.16637","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_12","alias_value":"B53Y7E3WZES4","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_16","alias_value":"B53Y7E3WZES4VORD","created_at":"2026-07-05T11:58:00Z"},{"alias_kind":"pith_short_8","alias_value":"B53Y7E3W","created_at":"2026-07-05T11:58:00Z"}],"graph_snapshots":[{"event_id":"sha256:80790b6cc51f71f7b3f37a7fa37c6c1a99075561b9408c060bb9be1f4e67739d","target":"graph","created_at":"2026-07-05T11:58:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.16637/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Attributing cyberattacks remains a central challenge in modern cybersecurity, particularly within denied environments where defenders have limited visibility into attacker infrastructure and are restricted by legal or operational rules of engagement. This perspective examines the strategic value of passive hack-back techniques that enable covert attribution and intelligence collection without initiating direct offensive actions. Key vectors include tracking beacons, honeytokens, environment-specific payloads, and supply-chain-based traps embedded within exfiltrated or leaked assets. These appr","authors_text":"Abraham Itzhak Weinberg","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-17T16:43:23Z","title":"Passive Hack-Back Strategies for Cyber Attribution: Covert Vectors in Denied Environment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.16637","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ab33f18bf04adb04e2f81162c7d0a2b2addcbd098b2abae97ef4ddca99384026","target":"record","created_at":"2026-07-05T11:58:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4e3020857287584f8cbe3978f787bc5934333da400374d390dedd73aa6a346d2","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-17T16:43:23Z","title_canon_sha256":"b983b258f51137fd6eeb7edb0de34ada4c42266da3225dc864d42f9d0edaa59c"},"schema_version":"1.0","source":{"id":"2508.16637","kind":"arxiv","version":1}},"canonical_sha256":"0f778f9376c925caba23634608d48cb749f5589effe4b46b3e3ee25ee34bc481","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f778f9376c925caba23634608d48cb749f5589effe4b46b3e3ee25ee34bc481","first_computed_at":"2026-07-05T11:58:00.532737Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:58:00.532737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vSrc0EzLKVZ2s6x+PG60vw7VGXx10bNJAzO/3PegtqBvRvhWk5WKg7saEeVrYZFpJWA1DanGKS4I+Kt5lsU+DA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:58:00.533188Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.16637","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ab33f18bf04adb04e2f81162c7d0a2b2addcbd098b2abae97ef4ddca99384026","sha256:80790b6cc51f71f7b3f37a7fa37c6c1a99075561b9408c060bb9be1f4e67739d"],"state_sha256":"8e78856789d7c3bc72b7df723fdb62c2c2b930486f09cc575d5b7c6a8b6ebd8b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S4V6gQQWffKf8bWJSfKwnB0ERJz7tKsrlF6xFk1MJnX3Gc0Dq3BBk/x9erzvGiE30tpgVuGeTQ6/cumkjtQ3Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T06:35:06.600290Z","bundle_sha256":"f5d072e405c3fcddff80ad7d21daac604a24b482a24e0f0e7c725df976d329b2"}}