{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:G5MJ2OP3322TJY6JZXKZX2XJ2E","short_pith_number":"pith:G5MJ2OP3","schema_version":"1.0","canonical_sha256":"37589d39fbdeb534e3c9cdd59beae9d1114a47ad8cb1158ccb1232d744a229a4","source":{"kind":"arxiv","id":"2109.14303","version":1},"attestation_state":"computed","paper":{"title":"Towards event aggregation for reducing the volume of logged events during IKC stages of APT attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Abbas Ghaemi-Bafghi, Abbas Rasoolzadegan, Ali Ahmadian Ramaki","submitted_at":"2021-09-29T09:36:54Z","abstract_excerpt":"Nowadays, targeted attacks like Advanced Persistent Threats (APTs) has become one of the major concern of many enterprise networks. As a common approach to counter these attacks, security staff deploy a variety of security and non-security sensors at different lines of defense (Network, Host, and Application) to track the attacker's behaviors during their kill chain. However, one of the drawbacks of this approach is the huge amount of events raised by heterogeneous security and non-security sensors which makes it difficult to analyze logged events for later processing i.e. event correlation fo"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2109.14303","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-09-29T09:36:54Z","cross_cats_sorted":[],"title_canon_sha256":"97f9d8eb89ba2c4a35b3dd07e4d6e1d17ae1fd99817c9e7e8b87c6e362c4f985","abstract_canon_sha256":"9b9db66b8dc12813e44f64cefe4272b2e7dca31848ad340a305b48628eaf27cf"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:18:33.917434Z","signature_b64":"91qSPPFcP1oA2jD8U7HIQaCDctsnYv5NG17os5f9UrzE9duUYBNzNmJSWY9ahlWxukInZgwPxcPhhEqahAGlAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"37589d39fbdeb534e3c9cdd59beae9d1114a47ad8cb1158ccb1232d744a229a4","last_reissued_at":"2026-07-05T03:18:33.916922Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:18:33.916922Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Towards event aggregation for reducing the volume of logged events during IKC stages of APT attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Abbas Ghaemi-Bafghi, Abbas Rasoolzadegan, Ali Ahmadian Ramaki","submitted_at":"2021-09-29T09:36:54Z","abstract_excerpt":"Nowadays, targeted attacks like Advanced Persistent Threats (APTs) has become one of the major concern of many enterprise networks. As a common approach to counter these attacks, security staff deploy a variety of security and non-security sensors at different lines of defense (Network, Host, and Application) to track the attacker's behaviors during their kill chain. However, one of the drawbacks of this approach is the huge amount of events raised by heterogeneous security and non-security sensors which makes it difficult to analyze logged events for later processing i.e. event correlation fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.14303","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.14303/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2109.14303","created_at":"2026-07-05T03:18:33.916993+00:00"},{"alias_kind":"arxiv_version","alias_value":"2109.14303v1","created_at":"2026-07-05T03:18:33.916993+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.14303","created_at":"2026-07-05T03:18:33.916993+00:00"},{"alias_kind":"pith_short_12","alias_value":"G5MJ2OP3322T","created_at":"2026-07-05T03:18:33.916993+00:00"},{"alias_kind":"pith_short_16","alias_value":"G5MJ2OP3322TJY6J","created_at":"2026-07-05T03:18:33.916993+00:00"},{"alias_kind":"pith_short_8","alias_value":"G5MJ2OP3","created_at":"2026-07-05T03:18:33.916993+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E","json":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E.json","graph_json":"https://pith.science/api/pith-number/G5MJ2OP3322TJY6JZXKZX2XJ2E/graph.json","events_json":"https://pith.science/api/pith-number/G5MJ2OP3322TJY6JZXKZX2XJ2E/events.json","paper":"https://pith.science/paper/G5MJ2OP3"},"agent_actions":{"view_html":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E","download_json":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E.json","view_paper":"https://pith.science/paper/G5MJ2OP3","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2109.14303&json=true","fetch_graph":"https://pith.science/api/pith-number/G5MJ2OP3322TJY6JZXKZX2XJ2E/graph.json","fetch_events":"https://pith.science/api/pith-number/G5MJ2OP3322TJY6JZXKZX2XJ2E/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E/action/timestamp_anchor","attest_storage":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E/action/storage_attestation","attest_author":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E/action/author_attestation","sign_citation":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E/action/citation_signature","submit_replication":"https://pith.science/pith/G5MJ2OP3322TJY6JZXKZX2XJ2E/action/replication_record"}},"created_at":"2026-07-05T03:18:33.916993+00:00","updated_at":"2026-07-05T03:18:33.916993+00:00"}