{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:GWV2GI7X4K4WFIS2UXQTFFBIIK","short_pith_number":"pith:GWV2GI7X","canonical_record":{"source":{"id":"2112.08986","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:03:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b49e10170ee72f67fe85f0836fb9590f5a52eff1a200584ae15dde5455ef6bae","abstract_canon_sha256":"6701cadaad5f4f2a77aa6241a044d6a728b97c12e303c3c714a40a419302330e"},"schema_version":"1.0"},"canonical_sha256":"35aba323f7e2b962a25aa5e132942842b987fbbdedf7cf07fd932f7facbfc840","source":{"kind":"arxiv","id":"2112.08986","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.08986","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"arxiv_version","alias_value":"2112.08986v1","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.08986","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_12","alias_value":"GWV2GI7X4K4W","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_16","alias_value":"GWV2GI7X4K4WFIS2","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_8","alias_value":"GWV2GI7X","created_at":"2026-07-05T03:41:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:GWV2GI7X4K4WFIS2UXQTFFBIIK","target":"record","payload":{"canonical_record":{"source":{"id":"2112.08986","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:03:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b49e10170ee72f67fe85f0836fb9590f5a52eff1a200584ae15dde5455ef6bae","abstract_canon_sha256":"6701cadaad5f4f2a77aa6241a044d6a728b97c12e303c3c714a40a419302330e"},"schema_version":"1.0"},"canonical_sha256":"35aba323f7e2b962a25aa5e132942842b987fbbdedf7cf07fd932f7facbfc840","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:41:34.920829Z","signature_b64":"fCoe2g2BRsdTrLfRSEpib8FhUcCgESHfCx9tdqkRek9k7p2qozDTCMOeJ0yN4BCrJurDNFg3lZe9678VmW1qDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"35aba323f7e2b962a25aa5e132942842b987fbbdedf7cf07fd932f7facbfc840","last_reissued_at":"2026-07-05T03:41:34.920420Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:41:34.920420Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.08986","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jSx2IplkbVu4qiVru8/kdr596d0tPme2ZkxW/IzpmZqDMiyTZ6+hziQODNJmJqf3XWKuOorbXMJg8kDN8WFoBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:51:10.229601Z"},"content_sha256":"0970a798df564cdea6903333c1eca02476b2261800719a0077a1d7fe1b67f57c","schema_version":"1.0","event_id":"sha256:0970a798df564cdea6903333c1eca02476b2261800719a0077a1d7fe1b67f57c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:GWV2GI7X4K4WFIS2UXQTFFBIIK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Heterogeneous Graph Learning Model for Cyber-Attack Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chengyu Dong, Mingqi Lv, Qijie Song, Tiantian Zhu, Tieming Chen, Yuan Fan","submitted_at":"2021-12-16T16:03:39Z","abstract_excerpt":"A cyber-attack is a malicious attempt by experienced hackers to breach the target information system. Usually, the cyber-attacks are characterized as hybrid TTPs (Tactics, Techniques, and Procedures) and long-term adversarial behaviors, making the traditional intrusion detection methods ineffective. Most existing cyber-attack detection systems are implemented based on manually designed rules by referring to domain knowledge (e.g., threat models, threat intelligences). However, this process is lack of intelligence and generalization ability. Aiming at this limitation, this paper proposes an int"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.08986","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.08986/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:41:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cJV9lzt5h9ADYGMrvcW5MDvmsbRDB1USDJfkewvZyYn8vWOTBWDMdL79ocZ8VKj1c5VUDLl+3l/uuwRHcw1aAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:51:10.230280Z"},"content_sha256":"fb55ad399b7c6d02c4da69f605d5f8d0faf5ab97c9a59473126371da017c535c","schema_version":"1.0","event_id":"sha256:fb55ad399b7c6d02c4da69f605d5f8d0faf5ab97c9a59473126371da017c535c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/bundle.json","state_url":"https://pith.science/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:51:10Z","links":{"resolver":"https://pith.science/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK","bundle":"https://pith.science/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/bundle.json","state":"https://pith.science/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GWV2GI7X4K4WFIS2UXQTFFBIIK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:GWV2GI7X4K4WFIS2UXQTFFBIIK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6701cadaad5f4f2a77aa6241a044d6a728b97c12e303c3c714a40a419302330e","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:03:39Z","title_canon_sha256":"b49e10170ee72f67fe85f0836fb9590f5a52eff1a200584ae15dde5455ef6bae"},"schema_version":"1.0","source":{"id":"2112.08986","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.08986","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"arxiv_version","alias_value":"2112.08986v1","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.08986","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_12","alias_value":"GWV2GI7X4K4W","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_16","alias_value":"GWV2GI7X4K4WFIS2","created_at":"2026-07-05T03:41:34Z"},{"alias_kind":"pith_short_8","alias_value":"GWV2GI7X","created_at":"2026-07-05T03:41:34Z"}],"graph_snapshots":[{"event_id":"sha256:fb55ad399b7c6d02c4da69f605d5f8d0faf5ab97c9a59473126371da017c535c","target":"graph","created_at":"2026-07-05T03:41:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.08986/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A cyber-attack is a malicious attempt by experienced hackers to breach the target information system. Usually, the cyber-attacks are characterized as hybrid TTPs (Tactics, Techniques, and Procedures) and long-term adversarial behaviors, making the traditional intrusion detection methods ineffective. Most existing cyber-attack detection systems are implemented based on manually designed rules by referring to domain knowledge (e.g., threat models, threat intelligences). However, this process is lack of intelligence and generalization ability. Aiming at this limitation, this paper proposes an int","authors_text":"Chengyu Dong, Mingqi Lv, Qijie Song, Tiantian Zhu, Tieming Chen, Yuan Fan","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:03:39Z","title":"A Heterogeneous Graph Learning Model for Cyber-Attack Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.08986","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0970a798df564cdea6903333c1eca02476b2261800719a0077a1d7fe1b67f57c","target":"record","created_at":"2026-07-05T03:41:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6701cadaad5f4f2a77aa6241a044d6a728b97c12e303c3c714a40a419302330e","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-12-16T16:03:39Z","title_canon_sha256":"b49e10170ee72f67fe85f0836fb9590f5a52eff1a200584ae15dde5455ef6bae"},"schema_version":"1.0","source":{"id":"2112.08986","kind":"arxiv","version":1}},"canonical_sha256":"35aba323f7e2b962a25aa5e132942842b987fbbdedf7cf07fd932f7facbfc840","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"35aba323f7e2b962a25aa5e132942842b987fbbdedf7cf07fd932f7facbfc840","first_computed_at":"2026-07-05T03:41:34.920420Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:41:34.920420Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fCoe2g2BRsdTrLfRSEpib8FhUcCgESHfCx9tdqkRek9k7p2qozDTCMOeJ0yN4BCrJurDNFg3lZe9678VmW1qDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:41:34.920829Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.08986","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0970a798df564cdea6903333c1eca02476b2261800719a0077a1d7fe1b67f57c","sha256:fb55ad399b7c6d02c4da69f605d5f8d0faf5ab97c9a59473126371da017c535c"],"state_sha256":"8463e442ca41a91e53b9271ac2558b578f4cd1fff78854c6fd57308d3e57adb9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zNigcq+i3TFQrRKtTfpEhXOk2m/Y1hcV3k19z0luJrHWr+LSzoEiIpbj3Mu5Wh8oYM3psgqajjacrMpbTCTPBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:51:10.235628Z","bundle_sha256":"1a5948e5509b9ca4f18b599984fdd575569beb71fb3089b6172195aa755f646c"}}