{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:CJKN3VIXSRCTAQSEREBEZZXZSE","short_pith_number":"pith:CJKN3VIX","canonical_record":{"source":{"id":"2508.10639","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-14T13:35:51Z","cross_cats_sorted":[],"title_canon_sha256":"6b105a2297de11a694203e72e2ae658aaf34de7c8f7edb12e43cc3f99da24b5f","abstract_canon_sha256":"ea4b4a588bd198895b73ed611615ec69670c6113d6f47976d64b1798b8d93b49"},"schema_version":"1.0"},"canonical_sha256":"1254ddd517944530424489024ce6f99102f3a42a130186fd94a7307e49f77603","source":{"kind":"arxiv","id":"2508.10639","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.10639","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"arxiv_version","alias_value":"2508.10639v1","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.10639","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_12","alias_value":"CJKN3VIXSRCT","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_16","alias_value":"CJKN3VIXSRCTAQSE","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_8","alias_value":"CJKN3VIX","created_at":"2026-07-05T11:53:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:CJKN3VIXSRCTAQSEREBEZZXZSE","target":"record","payload":{"canonical_record":{"source":{"id":"2508.10639","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-14T13:35:51Z","cross_cats_sorted":[],"title_canon_sha256":"6b105a2297de11a694203e72e2ae658aaf34de7c8f7edb12e43cc3f99da24b5f","abstract_canon_sha256":"ea4b4a588bd198895b73ed611615ec69670c6113d6f47976d64b1798b8d93b49"},"schema_version":"1.0"},"canonical_sha256":"1254ddd517944530424489024ce6f99102f3a42a130186fd94a7307e49f77603","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:53:59.964883Z","signature_b64":"5zuSj4S5a2x6HbvZpPIL1JNnyESZojZ4NFhYqragRVbqqnWQF30FoQ9COkZ5+7TBFMqtt9dXi+KicL/+cJ5oAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1254ddd517944530424489024ce6f99102f3a42a130186fd94a7307e49f77603","last_reissued_at":"2026-07-05T11:53:59.964439Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:53:59.964439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.10639","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EG4KBKNvydrfLI82Odr19LppIq+kwulJTomWHgEVNxF+Tj8+n3jP+5JeSFEhPdaphkRUOma4TiNVy2d2jEFCCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T02:42:37.513535Z"},"content_sha256":"52528f9de576248941b62d7556ef93c2487863d3d474aa0bcc7805b3a14b0d3b","schema_version":"1.0","event_id":"sha256:52528f9de576248941b62d7556ef93c2487863d3d474aa0bcc7805b3a14b0d3b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:CJKN3VIXSRCTAQSEREBEZZXZSE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MirGuard: Towards a Robust Provenance-based Intrusion Detection System Against Graph Manipulation Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Anyuan Sang, Huipeng Yang, Jianfeng Ma, Junbo Jia, Li Yang, Lu Zhou, Pengbin Feng","submitted_at":"2025-08-14T13:35:51Z","abstract_excerpt":"Learning-based Provenance-based Intrusion Detection Systems (PIDSes) have become essential tools for anomaly detection in host systems due to their ability to capture rich contextual and structural information, as well as their potential to detect unknown attacks. However, recent studies have shown that these systems are vulnerable to graph manipulation attacks, where attackers manipulate the graph structure to evade detection. While some previous approaches have discussed this type of attack, none have fully addressed it with a robust detection solution, limiting the practical applicability o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.10639","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.10639/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:53:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m7VHo9W3uhn0OHozlbsNfhs81F+CmtZHiYW1TcQ9bYkwMFLF9gadCpcH0qV7FuZLzdsIaEfb39moA23/qtWfCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T02:42:37.514550Z"},"content_sha256":"67c0bac38aefadf74eb04fdf13cf7ba92bf6375d9377ffcef946629396211b08","schema_version":"1.0","event_id":"sha256:67c0bac38aefadf74eb04fdf13cf7ba92bf6375d9377ffcef946629396211b08"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/bundle.json","state_url":"https://pith.science/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T02:42:37Z","links":{"resolver":"https://pith.science/pith/CJKN3VIXSRCTAQSEREBEZZXZSE","bundle":"https://pith.science/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/bundle.json","state":"https://pith.science/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CJKN3VIXSRCTAQSEREBEZZXZSE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:CJKN3VIXSRCTAQSEREBEZZXZSE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ea4b4a588bd198895b73ed611615ec69670c6113d6f47976d64b1798b8d93b49","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-14T13:35:51Z","title_canon_sha256":"6b105a2297de11a694203e72e2ae658aaf34de7c8f7edb12e43cc3f99da24b5f"},"schema_version":"1.0","source":{"id":"2508.10639","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.10639","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"arxiv_version","alias_value":"2508.10639v1","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.10639","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_12","alias_value":"CJKN3VIXSRCT","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_16","alias_value":"CJKN3VIXSRCTAQSE","created_at":"2026-07-05T11:53:59Z"},{"alias_kind":"pith_short_8","alias_value":"CJKN3VIX","created_at":"2026-07-05T11:53:59Z"}],"graph_snapshots":[{"event_id":"sha256:67c0bac38aefadf74eb04fdf13cf7ba92bf6375d9377ffcef946629396211b08","target":"graph","created_at":"2026-07-05T11:53:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.10639/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Learning-based Provenance-based Intrusion Detection Systems (PIDSes) have become essential tools for anomaly detection in host systems due to their ability to capture rich contextual and structural information, as well as their potential to detect unknown attacks. However, recent studies have shown that these systems are vulnerable to graph manipulation attacks, where attackers manipulate the graph structure to evade detection. While some previous approaches have discussed this type of attack, none have fully addressed it with a robust detection solution, limiting the practical applicability o","authors_text":"Anyuan Sang, Huipeng Yang, Jianfeng Ma, Junbo Jia, Li Yang, Lu Zhou, Pengbin Feng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-14T13:35:51Z","title":"MirGuard: Towards a Robust Provenance-based Intrusion Detection System Against Graph Manipulation Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.10639","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:52528f9de576248941b62d7556ef93c2487863d3d474aa0bcc7805b3a14b0d3b","target":"record","created_at":"2026-07-05T11:53:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ea4b4a588bd198895b73ed611615ec69670c6113d6f47976d64b1798b8d93b49","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-14T13:35:51Z","title_canon_sha256":"6b105a2297de11a694203e72e2ae658aaf34de7c8f7edb12e43cc3f99da24b5f"},"schema_version":"1.0","source":{"id":"2508.10639","kind":"arxiv","version":1}},"canonical_sha256":"1254ddd517944530424489024ce6f99102f3a42a130186fd94a7307e49f77603","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1254ddd517944530424489024ce6f99102f3a42a130186fd94a7307e49f77603","first_computed_at":"2026-07-05T11:53:59.964439Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:53:59.964439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5zuSj4S5a2x6HbvZpPIL1JNnyESZojZ4NFhYqragRVbqqnWQF30FoQ9COkZ5+7TBFMqtt9dXi+KicL/+cJ5oAw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:53:59.964883Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.10639","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:52528f9de576248941b62d7556ef93c2487863d3d474aa0bcc7805b3a14b0d3b","sha256:67c0bac38aefadf74eb04fdf13cf7ba92bf6375d9377ffcef946629396211b08"],"state_sha256":"8884aba2c06780834c2150347f13424bfb725e978b07a5a8e258fc8647777e5b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aFGRkhqGg3XNKv6NxZ4v5h8Hqkc60ZDu+1MefsXu9jPEVdVUiwcwQxcZZz/TARF3XgoD+qMmuaMtjZlRPJ4HAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T02:42:37.521508Z","bundle_sha256":"b4a0efdd531bad53d98147d5d253bafd498d80931d98fd1f1ff49975cb095a3f"}}