{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DEPRMVRLROVCSN5WCYWTPAC7UL","short_pith_number":"pith:DEPRMVRL","canonical_record":{"source":{"id":"2409.07709","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-12T02:25:41Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"acdc0e9942d0ded393ac70c27d818c15cdd3fcf6c6b5e6a10891ceee6bcad794","abstract_canon_sha256":"68ea8dbb8111346f6b8b2b1f2071c9c909e4ce2c7073c61f03f03a88d34f331c"},"schema_version":"1.0"},"canonical_sha256":"191f16562b8baa2937b6162d37805fa2ce25b0837a24a241d84d60296113d0a6","source":{"kind":"arxiv","id":"2409.07709","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07709","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07709v1","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07709","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_12","alias_value":"DEPRMVRLROVC","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_16","alias_value":"DEPRMVRLROVCSN5W","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_8","alias_value":"DEPRMVRL","created_at":"2026-07-05T09:06:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DEPRMVRLROVCSN5WCYWTPAC7UL","target":"record","payload":{"canonical_record":{"source":{"id":"2409.07709","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-12T02:25:41Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"acdc0e9942d0ded393ac70c27d818c15cdd3fcf6c6b5e6a10891ceee6bcad794","abstract_canon_sha256":"68ea8dbb8111346f6b8b2b1f2071c9c909e4ce2c7073c61f03f03a88d34f331c"},"schema_version":"1.0"},"canonical_sha256":"191f16562b8baa2937b6162d37805fa2ce25b0837a24a241d84d60296113d0a6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:06:13.869585Z","signature_b64":"KLxLlMbiA6x5Yd1NhbR8L9cnCVPTvrxjso3D8/MrDVheqWKwq3rQj/TB5kGT9uxF8THHnY0YR+fCplAaWh1HAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"191f16562b8baa2937b6162d37805fa2ce25b0837a24a241d84d60296113d0a6","last_reissued_at":"2026-07-05T09:06:13.869058Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:06:13.869058Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.07709","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mu9Z72Jvup+hAD0mHFUkJxat9RBTdyYanqrJOW1l3oBWRiaoV8cPUup4Z7jvRjXtuDnCkqKoIJIzABzF0pVRCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:41:40.241430Z"},"content_sha256":"dd07b0d417465822ae0843d0617f799e2c69dfd22619ed71025081ca0eee9bac","schema_version":"1.0","event_id":"sha256:dd07b0d417465822ae0843d0617f799e2c69dfd22619ed71025081ca0eee9bac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DEPRMVRLROVCSN5WCYWTPAC7UL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Harnessing TI Feeds for Exploitation Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.CR","authors_text":"Ashton Woiwood, Daniel Sadoc Menasch\\'e, Enrico Lovat, Kajal Patel, Mateus Nogueira, Matheus Martins, Taimur Kashif, Zubair Shafiq","submitted_at":"2024-09-12T02:25:41Z","abstract_excerpt":"Many organizations rely on Threat Intelligence (TI) feeds to assess the risk associated with security threats. Due to the volume and heterogeneity of data, it is prohibitive to manually analyze the threat information available in different loosely structured TI feeds. Thus, there is a need to develop automated methods to vet and extract actionable information from TI feeds. To this end, we present a machine learning pipeline to automatically detect vulnerability exploitation from TI feeds. We first model threat vocabulary in loosely structured TI feeds using state-of-the-art embedding techniqu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07709","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.07709/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:06:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"juM8Oc+GaRCsjr4JE4TDSiO4fz3mpaVn9fbjTWI2iWuGDHX5JzFpIIcFFT9LScoEVaadp8aqZS+xefnzALKADQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T12:41:40.242434Z"},"content_sha256":"eb4e9f6f22e26e7e47f19125eacdf8a70b1df820c760c7d3ab070c16cf6b229b","schema_version":"1.0","event_id":"sha256:eb4e9f6f22e26e7e47f19125eacdf8a70b1df820c760c7d3ab070c16cf6b229b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/bundle.json","state_url":"https://pith.science/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T12:41:40Z","links":{"resolver":"https://pith.science/pith/DEPRMVRLROVCSN5WCYWTPAC7UL","bundle":"https://pith.science/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/bundle.json","state":"https://pith.science/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DEPRMVRLROVCSN5WCYWTPAC7UL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DEPRMVRLROVCSN5WCYWTPAC7UL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68ea8dbb8111346f6b8b2b1f2071c9c909e4ce2c7073c61f03f03a88d34f331c","cross_cats_sorted":["cs.IR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-12T02:25:41Z","title_canon_sha256":"acdc0e9942d0ded393ac70c27d818c15cdd3fcf6c6b5e6a10891ceee6bcad794"},"schema_version":"1.0","source":{"id":"2409.07709","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.07709","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"arxiv_version","alias_value":"2409.07709v1","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.07709","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_12","alias_value":"DEPRMVRLROVC","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_16","alias_value":"DEPRMVRLROVCSN5W","created_at":"2026-07-05T09:06:13Z"},{"alias_kind":"pith_short_8","alias_value":"DEPRMVRL","created_at":"2026-07-05T09:06:13Z"}],"graph_snapshots":[{"event_id":"sha256:eb4e9f6f22e26e7e47f19125eacdf8a70b1df820c760c7d3ab070c16cf6b229b","target":"graph","created_at":"2026-07-05T09:06:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.07709/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many organizations rely on Threat Intelligence (TI) feeds to assess the risk associated with security threats. Due to the volume and heterogeneity of data, it is prohibitive to manually analyze the threat information available in different loosely structured TI feeds. Thus, there is a need to develop automated methods to vet and extract actionable information from TI feeds. To this end, we present a machine learning pipeline to automatically detect vulnerability exploitation from TI feeds. We first model threat vocabulary in loosely structured TI feeds using state-of-the-art embedding techniqu","authors_text":"Ashton Woiwood, Daniel Sadoc Menasch\\'e, Enrico Lovat, Kajal Patel, Mateus Nogueira, Matheus Martins, Taimur Kashif, Zubair Shafiq","cross_cats":["cs.IR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-12T02:25:41Z","title":"Harnessing TI Feeds for Exploitation Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.07709","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd07b0d417465822ae0843d0617f799e2c69dfd22619ed71025081ca0eee9bac","target":"record","created_at":"2026-07-05T09:06:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68ea8dbb8111346f6b8b2b1f2071c9c909e4ce2c7073c61f03f03a88d34f331c","cross_cats_sorted":["cs.IR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-12T02:25:41Z","title_canon_sha256":"acdc0e9942d0ded393ac70c27d818c15cdd3fcf6c6b5e6a10891ceee6bcad794"},"schema_version":"1.0","source":{"id":"2409.07709","kind":"arxiv","version":1}},"canonical_sha256":"191f16562b8baa2937b6162d37805fa2ce25b0837a24a241d84d60296113d0a6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"191f16562b8baa2937b6162d37805fa2ce25b0837a24a241d84d60296113d0a6","first_computed_at":"2026-07-05T09:06:13.869058Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:06:13.869058Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KLxLlMbiA6x5Yd1NhbR8L9cnCVPTvrxjso3D8/MrDVheqWKwq3rQj/TB5kGT9uxF8THHnY0YR+fCplAaWh1HAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:06:13.869585Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.07709","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd07b0d417465822ae0843d0617f799e2c69dfd22619ed71025081ca0eee9bac","sha256:eb4e9f6f22e26e7e47f19125eacdf8a70b1df820c760c7d3ab070c16cf6b229b"],"state_sha256":"cf277a7683b646c5cba56ccf3c14344a8febc002be481fc03036a5b0033d909e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FAmMlsErRVm0+KAFmfGPJ7xys6Pvm9pFx1peCNivCPcsY//XGk3TIi7f+ftSpDVWzhIROV3AtBLYMigtijP0Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T12:41:40.248124Z","bundle_sha256":"bf1b8e4c56c2af9bc8754c3ef8e4a6fbc1abe5a509996e7a854f5c0a0849074b"}}