{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:H73IJB63BHIBJNZ3P6UQIIPRUD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7b1413ce61887b4172d6c26b9474cfeffdaf293ef786db03f765e6db6c4ff11f","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T14:18:41Z","title_canon_sha256":"d0ee84d8eb65adfa368da9719b492b799906221987082cfc9d22ebbc8e0018e7"},"schema_version":"1.0","source":{"id":"2407.08532","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.08532","created_at":"2026-07-05T08:42:49Z"},{"alias_kind":"arxiv_version","alias_value":"2407.08532v1","created_at":"2026-07-05T08:42:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.08532","created_at":"2026-07-05T08:42:49Z"},{"alias_kind":"pith_short_12","alias_value":"H73IJB63BHIB","created_at":"2026-07-05T08:42:49Z"},{"alias_kind":"pith_short_16","alias_value":"H73IJB63BHIBJNZ3","created_at":"2026-07-05T08:42:49Z"},{"alias_kind":"pith_short_8","alias_value":"H73IJB63","created_at":"2026-07-05T08:42:49Z"}],"graph_snapshots":[{"event_id":"sha256:697bc0c270f641691f3d062ed789a55b7816d7ef48d5a92043ab3790b00da172","target":"graph","created_at":"2026-07-05T08:42:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.08532/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Nowadays, the open-source software (OSS) ecosystem suffers from security threats of software supply chain (SSC) attacks. Interpreted OSS malware plays a vital role in SSC attacks, as criminals have an arsenal of attack vectors to deceive users into installing malware and executing malicious activities. In this paper, we introduce tactics, techniques, and procedures (TTPs) proposed by MITRE ATT\\&CK into the interpreted malware analysis to characterize different phases of an attack lifecycle. Specifically, we propose GENTTP, a zero-shot approach to extracting a TTP of an interpreted malware pack","authors_text":"Haining Wang, Hui Wen, Jiqiang Liu, Qiang Li, Wenjia Niu, Xiaoyan Zhou, Ying Zhang","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T14:18:41Z","title":"Tactics, Techniques, and Procedures (TTPs) in Interpreted Malware: A Zero-Shot Generation with Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.08532","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4db69f28872a294cf2307f6401a86645017bf3a2e27c592015c3aea4fb09d7ed","target":"record","created_at":"2026-07-05T08:42:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7b1413ce61887b4172d6c26b9474cfeffdaf293ef786db03f765e6db6c4ff11f","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-11T14:18:41Z","title_canon_sha256":"d0ee84d8eb65adfa368da9719b492b799906221987082cfc9d22ebbc8e0018e7"},"schema_version":"1.0","source":{"id":"2407.08532","kind":"arxiv","version":1}},"canonical_sha256":"3ff68487db09d014b73b7fa90421f1a0d81435533a2f5331571dbaac6203a801","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ff68487db09d014b73b7fa90421f1a0d81435533a2f5331571dbaac6203a801","first_computed_at":"2026-07-05T08:42:49.535038Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:42:49.535038Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"m3+K0EfpGCwuGH+o6WEcBqRPN+wjlInmTUywGyS5E1LF+D57He17y7GKjXVGffRc+K2g0u3I8ENiZ1lS3lI8AA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:42:49.535492Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.08532","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4db69f28872a294cf2307f6401a86645017bf3a2e27c592015c3aea4fb09d7ed","sha256:697bc0c270f641691f3d062ed789a55b7816d7ef48d5a92043ab3790b00da172"],"state_sha256":"3e64b6ff26b50f4fe0afc6ed744bb5536ada1c4feb0615901c9fba4b324c0fe8"}