{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:DG22IZZGCBG3USFBR7BKKZT3JG","short_pith_number":"pith:DG22IZZG","canonical_record":{"source":{"id":"2112.09008","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:42:46Z","cross_cats_sorted":[],"title_canon_sha256":"f6ba46ee7050c64a7feb856656e693157eb22095ddea9ac8b280f9314c4454d5","abstract_canon_sha256":"73dc001ce44d18fff004950ac81ee0ea6235bdbdfb01ed7111476fc3f3b87253"},"schema_version":"1.0"},"canonical_sha256":"19b5a46726104dba48a18fc2a5667b49b3d36c22886b3ad7c5a2b2d581bef908","source":{"kind":"arxiv","id":"2112.09008","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.09008","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"arxiv_version","alias_value":"2112.09008v2","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.09008","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_12","alias_value":"DG22IZZGCBG3","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_16","alias_value":"DG22IZZGCBG3USFB","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_8","alias_value":"DG22IZZG","created_at":"2026-07-05T03:41:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:DG22IZZGCBG3USFBR7BKKZT3JG","target":"record","payload":{"canonical_record":{"source":{"id":"2112.09008","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:42:46Z","cross_cats_sorted":[],"title_canon_sha256":"f6ba46ee7050c64a7feb856656e693157eb22095ddea9ac8b280f9314c4454d5","abstract_canon_sha256":"73dc001ce44d18fff004950ac81ee0ea6235bdbdfb01ed7111476fc3f3b87253"},"schema_version":"1.0"},"canonical_sha256":"19b5a46726104dba48a18fc2a5667b49b3d36c22886b3ad7c5a2b2d581bef908","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:41:42.947636Z","signature_b64":"APUcULWIo13IrwsOKOLhTe9/ZJgo2D7RMfJBy+r1Dk3tAGHHG6Ygr58eRlSkN4tv/7kpuG48i4gVSpm8EXKLDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"19b5a46726104dba48a18fc2a5667b49b3d36c22886b3ad7c5a2b2d581bef908","last_reissued_at":"2026-07-05T03:41:42.947173Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:41:42.947173Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.09008","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wyZAuSpMrOfKgOai6I1tEbKUJhIXVlLOccDqMGeklGr4RUuUXHesH5r6XjIwPM/Uk4VJhzpOgb7+b1x7va6oBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:20:03.518288Z"},"content_sha256":"8e21343a2712c6c83a5465f9c986c6d7d2bec2afb8a2ae94b4bff0d8dce196ac","schema_version":"1.0","event_id":"sha256:8e21343a2712c6c83a5465f9c986c6d7d2bec2afb8a2ae94b4bff0d8dce196ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:DG22IZZGCBG3USFBR7BKKZT3JG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"APTSHIELD: A Stable, Efficient and Real-time APT Detection System for Linux Hosts","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiayu Wang, Jie Ying, Jinkai Yu, Mingqi Lv, Tiantian Zhu, Tieming Chen, Ting Wang, Yan Chen, Ye Tian, Yuan Fan","submitted_at":"2021-12-16T16:42:46Z","abstract_excerpt":"Advanced Persistent Threat (APT) attack usually refers to the form of long-term, covert and sustained attack on specific targets, with an adversary using advanced attack techniques to destroy the key facilities of an organization. APT attacks have caused serious security threats and massive financial loss worldwide. Academics and industry thereby have proposed a series of solutions to detect APT attacks, such as dynamic/static code analysis, traffic detection, sandbox technology, endpoint detection and response (EDR), etc. However, existing defenses are failed to accurately and effectively def"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.09008","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.09008/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fBji642w4PB/7/xBVAcF9toNcZowAChQqpMN9mrNFVIsKcxZC3MfbMenu+3Sie4GQGtZ86wJZdeKVIKsOJmxCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T09:20:03.518843Z"},"content_sha256":"b2fd842004eee4c6abf77377d1b80739eff66d65b84d1a732d84ebb8429a083c","schema_version":"1.0","event_id":"sha256:b2fd842004eee4c6abf77377d1b80739eff66d65b84d1a732d84ebb8429a083c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DG22IZZGCBG3USFBR7BKKZT3JG/bundle.json","state_url":"https://pith.science/pith/DG22IZZGCBG3USFBR7BKKZT3JG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DG22IZZGCBG3USFBR7BKKZT3JG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T09:20:03Z","links":{"resolver":"https://pith.science/pith/DG22IZZGCBG3USFBR7BKKZT3JG","bundle":"https://pith.science/pith/DG22IZZGCBG3USFBR7BKKZT3JG/bundle.json","state":"https://pith.science/pith/DG22IZZGCBG3USFBR7BKKZT3JG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DG22IZZGCBG3USFBR7BKKZT3JG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:DG22IZZGCBG3USFBR7BKKZT3JG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"73dc001ce44d18fff004950ac81ee0ea6235bdbdfb01ed7111476fc3f3b87253","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:42:46Z","title_canon_sha256":"f6ba46ee7050c64a7feb856656e693157eb22095ddea9ac8b280f9314c4454d5"},"schema_version":"1.0","source":{"id":"2112.09008","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.09008","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"arxiv_version","alias_value":"2112.09008v2","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.09008","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_12","alias_value":"DG22IZZGCBG3","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_16","alias_value":"DG22IZZGCBG3USFB","created_at":"2026-07-05T03:41:42Z"},{"alias_kind":"pith_short_8","alias_value":"DG22IZZG","created_at":"2026-07-05T03:41:42Z"}],"graph_snapshots":[{"event_id":"sha256:b2fd842004eee4c6abf77377d1b80739eff66d65b84d1a732d84ebb8429a083c","target":"graph","created_at":"2026-07-05T03:41:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.09008/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Advanced Persistent Threat (APT) attack usually refers to the form of long-term, covert and sustained attack on specific targets, with an adversary using advanced attack techniques to destroy the key facilities of an organization. APT attacks have caused serious security threats and massive financial loss worldwide. Academics and industry thereby have proposed a series of solutions to detect APT attacks, such as dynamic/static code analysis, traffic detection, sandbox technology, endpoint detection and response (EDR), etc. However, existing defenses are failed to accurately and effectively def","authors_text":"Jiayu Wang, Jie Ying, Jinkai Yu, Mingqi Lv, Tiantian Zhu, Tieming Chen, Ting Wang, Yan Chen, Ye Tian, Yuan Fan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:42:46Z","title":"APTSHIELD: A Stable, Efficient and Real-time APT Detection System for Linux Hosts"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.09008","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8e21343a2712c6c83a5465f9c986c6d7d2bec2afb8a2ae94b4bff0d8dce196ac","target":"record","created_at":"2026-07-05T03:41:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"73dc001ce44d18fff004950ac81ee0ea6235bdbdfb01ed7111476fc3f3b87253","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:42:46Z","title_canon_sha256":"f6ba46ee7050c64a7feb856656e693157eb22095ddea9ac8b280f9314c4454d5"},"schema_version":"1.0","source":{"id":"2112.09008","kind":"arxiv","version":2}},"canonical_sha256":"19b5a46726104dba48a18fc2a5667b49b3d36c22886b3ad7c5a2b2d581bef908","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"19b5a46726104dba48a18fc2a5667b49b3d36c22886b3ad7c5a2b2d581bef908","first_computed_at":"2026-07-05T03:41:42.947173Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:41:42.947173Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"APUcULWIo13IrwsOKOLhTe9/ZJgo2D7RMfJBy+r1Dk3tAGHHG6Ygr58eRlSkN4tv/7kpuG48i4gVSpm8EXKLDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:41:42.947636Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.09008","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8e21343a2712c6c83a5465f9c986c6d7d2bec2afb8a2ae94b4bff0d8dce196ac","sha256:b2fd842004eee4c6abf77377d1b80739eff66d65b84d1a732d84ebb8429a083c"],"state_sha256":"19d74cc5ac05113187afecd3f2ecc5d84cee4d8b33380307583b68fcb95141ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"axo4uxKOFTRyH6AHem6Y/ci6urghEJkWJP56wrmLu54BUGKaWp3NN/r52s0KOc88kyKaS4mENz07sO233R/sDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T09:20:03.524586Z","bundle_sha256":"cfa14f2e902c57358ae7f1e351c5ba14b9c350b6068c99cb7fb0e98a31d7ac2a"}}