{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:DNHKLAJAVQ32ZCVBMWOZ6V3QWW","short_pith_number":"pith:DNHKLAJA","canonical_record":{"source":{"id":"2309.09498","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-18T05:46:11Z","cross_cats_sorted":[],"title_canon_sha256":"d1f0a711f52776f39fc0265cbd6ee6ea560fc694eccb41fad596b3431c29c59a","abstract_canon_sha256":"d5ae2050fd09fbde2cfea771844073e383e322fafde4b9b1a662753e830c93e5"},"schema_version":"1.0"},"canonical_sha256":"1b4ea58120ac37ac8aa1659d9f5770b5a69859c011f27af8705bb7fc9a1fe21c","source":{"kind":"arxiv","id":"2309.09498","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.09498","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2309.09498v2","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.09498","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"DNHKLAJAVQ32","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"DNHKLAJAVQ32ZCVB","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"DNHKLAJA","created_at":"2026-07-05T08:09:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:DNHKLAJAVQ32ZCVBMWOZ6V3QWW","target":"record","payload":{"canonical_record":{"source":{"id":"2309.09498","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-18T05:46:11Z","cross_cats_sorted":[],"title_canon_sha256":"d1f0a711f52776f39fc0265cbd6ee6ea560fc694eccb41fad596b3431c29c59a","abstract_canon_sha256":"d5ae2050fd09fbde2cfea771844073e383e322fafde4b9b1a662753e830c93e5"},"schema_version":"1.0"},"canonical_sha256":"1b4ea58120ac37ac8aa1659d9f5770b5a69859c011f27af8705bb7fc9a1fe21c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:09:25.157622Z","signature_b64":"iLtQlhI9MM6g5dMpp7mRnvcoSyUU/wevZyfL7aBE5qcOvd8D7jpa7q75IW+puEDx5feGicteZGvdeDkHdy1iDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b4ea58120ac37ac8aa1659d9f5770b5a69859c011f27af8705bb7fc9a1fe21c","last_reissued_at":"2026-07-05T08:09:25.157124Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:09:25.157124Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.09498","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1TBnx11zS6yMXDbQFIzzWoUsYthSjOgPIe+x4Vp4FUxSwrCQ4yul7gHUXQLHyRfn/2HvR1cbfPQ53+8utNl/AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:26:27.083211Z"},"content_sha256":"d1506a9e8c793f1a94d357bbee499059b498c3dbc4b87b79714ff9ff07db43ef","schema_version":"1.0","event_id":"sha256:d1506a9e8c793f1a94d357bbee499059b498c3dbc4b87b79714ff9ff07db43ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:DNHKLAJAVQ32ZCVBMWOZ6V3QWW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Combating Advanced Persistent Threats: Challenges and Solutions","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Han Liu, Jiliang Li, Yuntao Wang, Zhendong Li, Zhou Su","submitted_at":"2023-09-18T05:46:11Z","abstract_excerpt":"The rise of advanced persistent threats (APTs) has marked a significant cybersecurity challenge, characterized by sophisticated orchestration, stealthy execution, extended persistence, and targeting valuable assets across diverse sectors. Provenance graph-based kernel-level auditing has emerged as a promising approach to enhance visibility and traceability within intricate network environments. However, it still faces challenges including reconstructing complex lateral attack chains, detecting dynamic evasion behaviors, and defending smart adversarial subgraphs. To bridge the research gap, thi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.09498","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.09498/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EqHIuKEZ5JgBUZWjJi+iTUS/uSLBWQc8Wt7rJzjrVXJeKZ185TwyVHB4XkJnHmp5jpbpXEJKN14y78sWOj4UDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:26:27.083746Z"},"content_sha256":"f2f0ecce015ae15aa377bb00c4e7906d83408edb2720064b87940f2e1b9e3080","schema_version":"1.0","event_id":"sha256:f2f0ecce015ae15aa377bb00c4e7906d83408edb2720064b87940f2e1b9e3080"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/bundle.json","state_url":"https://pith.science/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T14:26:27Z","links":{"resolver":"https://pith.science/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW","bundle":"https://pith.science/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/bundle.json","state":"https://pith.science/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DNHKLAJAVQ32ZCVBMWOZ6V3QWW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:DNHKLAJAVQ32ZCVBMWOZ6V3QWW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d5ae2050fd09fbde2cfea771844073e383e322fafde4b9b1a662753e830c93e5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-18T05:46:11Z","title_canon_sha256":"d1f0a711f52776f39fc0265cbd6ee6ea560fc694eccb41fad596b3431c29c59a"},"schema_version":"1.0","source":{"id":"2309.09498","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.09498","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"arxiv_version","alias_value":"2309.09498v2","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.09498","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_12","alias_value":"DNHKLAJAVQ32","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_16","alias_value":"DNHKLAJAVQ32ZCVB","created_at":"2026-07-05T08:09:25Z"},{"alias_kind":"pith_short_8","alias_value":"DNHKLAJA","created_at":"2026-07-05T08:09:25Z"}],"graph_snapshots":[{"event_id":"sha256:f2f0ecce015ae15aa377bb00c4e7906d83408edb2720064b87940f2e1b9e3080","target":"graph","created_at":"2026-07-05T08:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.09498/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rise of advanced persistent threats (APTs) has marked a significant cybersecurity challenge, characterized by sophisticated orchestration, stealthy execution, extended persistence, and targeting valuable assets across diverse sectors. Provenance graph-based kernel-level auditing has emerged as a promising approach to enhance visibility and traceability within intricate network environments. However, it still faces challenges including reconstructing complex lateral attack chains, detecting dynamic evasion behaviors, and defending smart adversarial subgraphs. To bridge the research gap, thi","authors_text":"Han Liu, Jiliang Li, Yuntao Wang, Zhendong Li, Zhou Su","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-18T05:46:11Z","title":"Combating Advanced Persistent Threats: Challenges and Solutions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.09498","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1506a9e8c793f1a94d357bbee499059b498c3dbc4b87b79714ff9ff07db43ef","target":"record","created_at":"2026-07-05T08:09:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d5ae2050fd09fbde2cfea771844073e383e322fafde4b9b1a662753e830c93e5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-18T05:46:11Z","title_canon_sha256":"d1f0a711f52776f39fc0265cbd6ee6ea560fc694eccb41fad596b3431c29c59a"},"schema_version":"1.0","source":{"id":"2309.09498","kind":"arxiv","version":2}},"canonical_sha256":"1b4ea58120ac37ac8aa1659d9f5770b5a69859c011f27af8705bb7fc9a1fe21c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b4ea58120ac37ac8aa1659d9f5770b5a69859c011f27af8705bb7fc9a1fe21c","first_computed_at":"2026-07-05T08:09:25.157124Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:09:25.157124Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iLtQlhI9MM6g5dMpp7mRnvcoSyUU/wevZyfL7aBE5qcOvd8D7jpa7q75IW+puEDx5feGicteZGvdeDkHdy1iDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:09:25.157622Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.09498","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1506a9e8c793f1a94d357bbee499059b498c3dbc4b87b79714ff9ff07db43ef","sha256:f2f0ecce015ae15aa377bb00c4e7906d83408edb2720064b87940f2e1b9e3080"],"state_sha256":"8d3b96a7640da0892823f810426740b4c04e4f8a93542c74c680362593130130"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"523u/sEvTYlUU/QEU/H0RcSyPCM8442JoO3wyxmM3D9MMt4Nz/lbOS+8jTyYg1Ors2Blt4cBcYo3rXStL3idCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T14:26:27.086012Z","bundle_sha256":"92f8d15f84505129578bf345d7dd1d22dd7bf9664949417d8164a93c5ee73e98"}}