{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:FIVMD65FIHQWG2KRA6GC2ODFST","short_pith_number":"pith:FIVMD65F","canonical_record":{"source":{"id":"2112.12595","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-21T07:40:27Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"48adc395f352ff1e38d0fdcc3f4cd291636d641f65b8b9223b569da4a6cba1e4","abstract_canon_sha256":"e6648f7411b13fe3d0eb766e03cfa72fc1e426a5ca936031af3b8cc26839ec1f"},"schema_version":"1.0"},"canonical_sha256":"2a2ac1fba541e1636951078c2d386594e0fdec9617e86576cb6309bd685f4ecb","source":{"kind":"arxiv","id":"2112.12595","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12595","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12595v1","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12595","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_12","alias_value":"FIVMD65FIHQW","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_16","alias_value":"FIVMD65FIHQWG2KR","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_8","alias_value":"FIVMD65F","created_at":"2026-07-05T03:43:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:FIVMD65FIHQWG2KRA6GC2ODFST","target":"record","payload":{"canonical_record":{"source":{"id":"2112.12595","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-21T07:40:27Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"48adc395f352ff1e38d0fdcc3f4cd291636d641f65b8b9223b569da4a6cba1e4","abstract_canon_sha256":"e6648f7411b13fe3d0eb766e03cfa72fc1e426a5ca936031af3b8cc26839ec1f"},"schema_version":"1.0"},"canonical_sha256":"2a2ac1fba541e1636951078c2d386594e0fdec9617e86576cb6309bd685f4ecb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:43:29.171515Z","signature_b64":"F3bf6gUOTvWFLcTHoV60RgMSHZ2d6flAJnGEEqQgUZ1L3XR+25B2HL4tSmIBmWVyfvMyNRNwNfYBtZmoL0ZSCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2a2ac1fba541e1636951078c2d386594e0fdec9617e86576cb6309bd685f4ecb","last_reissued_at":"2026-07-05T03:43:29.171112Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:43:29.171112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.12595","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:43:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8b+5xUe0hWUX/lFugzNEOoca6jz8PKGRrMuG72+YajKtfPHr/oxrJAknmznCh9zXb0r/GtIOr6gTJbxaCVv6AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T02:41:26.922736Z"},"content_sha256":"72b325e8e2859a791db9f4c603993a638094c3fa74380d29bbf78828b064d47d","schema_version":"1.0","event_id":"sha256:72b325e8e2859a791db9f4c603993a638094c3fa74380d29bbf78828b064d47d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:FIVMD65FIHQWG2KRA6GC2ODFST","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"KGSecConfig: A Knowledge Graph Based Approach for Secured Container Orchestrator Configuration","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"M. Ali Babar, M. Mehdi Kholoosi, Mubin Ul Haque","submitted_at":"2021-12-21T07:40:27Z","abstract_excerpt":"Container Orchestrator (CO) is a vital technology for managing clusters of containers, which may form a virtualized infrastructure for developing and operating software systems. Like any other software system, securing CO is critical, but can be quite challenging task due to large number of configurable options. Manual configuration is not only knowledge intensive and time consuming, but also is error prone. For automating security configuration of CO, we propose a novel Knowledge Graph based Security Configuration, KGSecConfig, approach. Our solution leverages keyword and learning models to s"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12595","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.12595/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:43:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+sBk8ClgCb0OpdQulYTJlHQHXX4DHlirfi9yB/461ZEWo01ukGny6QiAUQ9+wfqMxZeuFt0ki/MaEd8K4N1iAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-12T02:41:26.923121Z"},"content_sha256":"ff3a8c6559667dfacdb886613c56484425edf15e90292a0bcf655bd1834bdc79","schema_version":"1.0","event_id":"sha256:ff3a8c6559667dfacdb886613c56484425edf15e90292a0bcf655bd1834bdc79"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FIVMD65FIHQWG2KRA6GC2ODFST/bundle.json","state_url":"https://pith.science/pith/FIVMD65FIHQWG2KRA6GC2ODFST/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FIVMD65FIHQWG2KRA6GC2ODFST/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-12T02:41:26Z","links":{"resolver":"https://pith.science/pith/FIVMD65FIHQWG2KRA6GC2ODFST","bundle":"https://pith.science/pith/FIVMD65FIHQWG2KRA6GC2ODFST/bundle.json","state":"https://pith.science/pith/FIVMD65FIHQWG2KRA6GC2ODFST/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FIVMD65FIHQWG2KRA6GC2ODFST/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:FIVMD65FIHQWG2KRA6GC2ODFST","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e6648f7411b13fe3d0eb766e03cfa72fc1e426a5ca936031af3b8cc26839ec1f","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-21T07:40:27Z","title_canon_sha256":"48adc395f352ff1e38d0fdcc3f4cd291636d641f65b8b9223b569da4a6cba1e4"},"schema_version":"1.0","source":{"id":"2112.12595","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.12595","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"arxiv_version","alias_value":"2112.12595v1","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.12595","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_12","alias_value":"FIVMD65FIHQW","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_16","alias_value":"FIVMD65FIHQWG2KR","created_at":"2026-07-05T03:43:29Z"},{"alias_kind":"pith_short_8","alias_value":"FIVMD65F","created_at":"2026-07-05T03:43:29Z"}],"graph_snapshots":[{"event_id":"sha256:ff3a8c6559667dfacdb886613c56484425edf15e90292a0bcf655bd1834bdc79","target":"graph","created_at":"2026-07-05T03:43:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.12595/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Container Orchestrator (CO) is a vital technology for managing clusters of containers, which may form a virtualized infrastructure for developing and operating software systems. Like any other software system, securing CO is critical, but can be quite challenging task due to large number of configurable options. Manual configuration is not only knowledge intensive and time consuming, but also is error prone. For automating security configuration of CO, we propose a novel Knowledge Graph based Security Configuration, KGSecConfig, approach. Our solution leverages keyword and learning models to s","authors_text":"M. Ali Babar, M. Mehdi Kholoosi, Mubin Ul Haque","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-21T07:40:27Z","title":"KGSecConfig: A Knowledge Graph Based Approach for Secured Container Orchestrator Configuration"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.12595","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:72b325e8e2859a791db9f4c603993a638094c3fa74380d29bbf78828b064d47d","target":"record","created_at":"2026-07-05T03:43:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e6648f7411b13fe3d0eb766e03cfa72fc1e426a5ca936031af3b8cc26839ec1f","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-21T07:40:27Z","title_canon_sha256":"48adc395f352ff1e38d0fdcc3f4cd291636d641f65b8b9223b569da4a6cba1e4"},"schema_version":"1.0","source":{"id":"2112.12595","kind":"arxiv","version":1}},"canonical_sha256":"2a2ac1fba541e1636951078c2d386594e0fdec9617e86576cb6309bd685f4ecb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2a2ac1fba541e1636951078c2d386594e0fdec9617e86576cb6309bd685f4ecb","first_computed_at":"2026-07-05T03:43:29.171112Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:43:29.171112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F3bf6gUOTvWFLcTHoV60RgMSHZ2d6flAJnGEEqQgUZ1L3XR+25B2HL4tSmIBmWVyfvMyNRNwNfYBtZmoL0ZSCA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:43:29.171515Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.12595","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:72b325e8e2859a791db9f4c603993a638094c3fa74380d29bbf78828b064d47d","sha256:ff3a8c6559667dfacdb886613c56484425edf15e90292a0bcf655bd1834bdc79"],"state_sha256":"30919b98bb649ccea0a81a54140614684ede13c952fa520c55145811fb0acf80"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dMdVR9WGnsjpdA+A6HY8Gp0b+iWLadlaTuuu9rZvBZQniwsoBS4iKgZr6wXEcS13KaKxuMovDvxgQP+CnxItAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-12T02:41:26.925271Z","bundle_sha256":"c639ab791f68630bdcd81d00d279c3c022033c89a264c2496f194bc5dd174a61"}}