{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ILVUB3JT7GWEDXNRM25GAJSB5M","short_pith_number":"pith:ILVUB3JT","canonical_record":{"source":{"id":"2502.08830","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-12T22:38:50Z","cross_cats_sorted":["cs.NI","cs.OS"],"title_canon_sha256":"0d58663120ba02bd92a217825ac945d0e52a7820eaedcb0ab82c083afa714b63","abstract_canon_sha256":"eaf9a044b5c98a36c960bfb56015280a0653ad3710f2a51f847ffca1be5589ac"},"schema_version":"1.0"},"canonical_sha256":"42eb40ed33f9ac41ddb166ba602641eb0c5a2da0e3e482064b7b3b095ccc651f","source":{"kind":"arxiv","id":"2502.08830","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.08830","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"arxiv_version","alias_value":"2502.08830v1","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.08830","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_12","alias_value":"ILVUB3JT7GWE","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_16","alias_value":"ILVUB3JT7GWEDXNR","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_8","alias_value":"ILVUB3JT","created_at":"2026-07-05T10:13:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ILVUB3JT7GWEDXNRM25GAJSB5M","target":"record","payload":{"canonical_record":{"source":{"id":"2502.08830","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-12T22:38:50Z","cross_cats_sorted":["cs.NI","cs.OS"],"title_canon_sha256":"0d58663120ba02bd92a217825ac945d0e52a7820eaedcb0ab82c083afa714b63","abstract_canon_sha256":"eaf9a044b5c98a36c960bfb56015280a0653ad3710f2a51f847ffca1be5589ac"},"schema_version":"1.0"},"canonical_sha256":"42eb40ed33f9ac41ddb166ba602641eb0c5a2da0e3e482064b7b3b095ccc651f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:13:30.366783Z","signature_b64":"c+8VGYlik6t1fsG9FMqN1hiKKtxrBfN4+Qd3cqaBR3OH71ICYsgIvCzXJyCJKV/GHQb/09TUqJ3kNj5UBslgCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"42eb40ed33f9ac41ddb166ba602641eb0c5a2da0e3e482064b7b3b095ccc651f","last_reissued_at":"2026-07-05T10:13:30.366330Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:13:30.366330Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.08830","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:13:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dd5zLSfdkMNnwb/JTkBJ5gBOe+3PWFGSmaJ4qlGAnRIPNbf4SizCxXx77gJZSoR0wax3CgIJyrERei1EhkpSBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:26:16.131962Z"},"content_sha256":"66eed7659b5f3f11ada3004762a67ea6c8f01843954935a819872db91012f6ff","schema_version":"1.0","event_id":"sha256:66eed7659b5f3f11ada3004762a67ea6c8f01843954935a819872db91012f6ff"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ILVUB3JT7GWEDXNRM25GAJSB5M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.NI","cs.OS"],"primary_cat":"cs.CR","authors_text":"Almuthanna Alageel, Imperial College London, Sergio Maffeis","submitted_at":"2025-02-12T22:38:50Z","abstract_excerpt":"The scarcity of data and the high complexity of Advanced Persistent Threats (APTs) attacks have created challenges in comprehending their behavior and hindered the exploration of effective detection techniques. To create an effective APT detection strategy, it is important to examine the Tactics, Techniques, and Procedures (TTPs) that have been reported by the industry. These TTPs can be difficult to classify as either malicious or legitimate. When developing an approach for the next generation of network intrusion detection systems (NIDS), it is necessary to take into account the specific con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.08830","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.08830/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:13:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"20UmjvO/0yKAIiWfMZAYtIQXYUhG/c26HGZdW6qIBEvTdDI0vn4OHEq7i8Y6oqoX7tdJW/n/iOBCvqm+ZesoCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T22:26:16.132907Z"},"content_sha256":"2a316ec9732ac3bc5b6d7fcc508d71e22fcdc3fcc5a401df7f9a528103b7ad6c","schema_version":"1.0","event_id":"sha256:2a316ec9732ac3bc5b6d7fcc508d71e22fcdc3fcc5a401df7f9a528103b7ad6c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/bundle.json","state_url":"https://pith.science/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T22:26:16Z","links":{"resolver":"https://pith.science/pith/ILVUB3JT7GWEDXNRM25GAJSB5M","bundle":"https://pith.science/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/bundle.json","state":"https://pith.science/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ILVUB3JT7GWEDXNRM25GAJSB5M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ILVUB3JT7GWEDXNRM25GAJSB5M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"eaf9a044b5c98a36c960bfb56015280a0653ad3710f2a51f847ffca1be5589ac","cross_cats_sorted":["cs.NI","cs.OS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-12T22:38:50Z","title_canon_sha256":"0d58663120ba02bd92a217825ac945d0e52a7820eaedcb0ab82c083afa714b63"},"schema_version":"1.0","source":{"id":"2502.08830","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.08830","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"arxiv_version","alias_value":"2502.08830v1","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.08830","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_12","alias_value":"ILVUB3JT7GWE","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_16","alias_value":"ILVUB3JT7GWEDXNR","created_at":"2026-07-05T10:13:30Z"},{"alias_kind":"pith_short_8","alias_value":"ILVUB3JT","created_at":"2026-07-05T10:13:30Z"}],"graph_snapshots":[{"event_id":"sha256:2a316ec9732ac3bc5b6d7fcc508d71e22fcdc3fcc5a401df7f9a528103b7ad6c","target":"graph","created_at":"2026-07-05T10:13:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.08830/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The scarcity of data and the high complexity of Advanced Persistent Threats (APTs) attacks have created challenges in comprehending their behavior and hindered the exploration of effective detection techniques. To create an effective APT detection strategy, it is important to examine the Tactics, Techniques, and Procedures (TTPs) that have been reported by the industry. These TTPs can be difficult to classify as either malicious or legitimate. When developing an approach for the next generation of network intrusion detection systems (NIDS), it is necessary to take into account the specific con","authors_text":"Almuthanna Alageel, Imperial College London, Sergio Maffeis","cross_cats":["cs.NI","cs.OS"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-12T22:38:50Z","title":"Investigation of Advanced Persistent Threats Network-based Tactics, Techniques and Procedures"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.08830","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66eed7659b5f3f11ada3004762a67ea6c8f01843954935a819872db91012f6ff","target":"record","created_at":"2026-07-05T10:13:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"eaf9a044b5c98a36c960bfb56015280a0653ad3710f2a51f847ffca1be5589ac","cross_cats_sorted":["cs.NI","cs.OS"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-12T22:38:50Z","title_canon_sha256":"0d58663120ba02bd92a217825ac945d0e52a7820eaedcb0ab82c083afa714b63"},"schema_version":"1.0","source":{"id":"2502.08830","kind":"arxiv","version":1}},"canonical_sha256":"42eb40ed33f9ac41ddb166ba602641eb0c5a2da0e3e482064b7b3b095ccc651f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"42eb40ed33f9ac41ddb166ba602641eb0c5a2da0e3e482064b7b3b095ccc651f","first_computed_at":"2026-07-05T10:13:30.366330Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:13:30.366330Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"c+8VGYlik6t1fsG9FMqN1hiKKtxrBfN4+Qd3cqaBR3OH71ICYsgIvCzXJyCJKV/GHQb/09TUqJ3kNj5UBslgCg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:13:30.366783Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.08830","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66eed7659b5f3f11ada3004762a67ea6c8f01843954935a819872db91012f6ff","sha256:2a316ec9732ac3bc5b6d7fcc508d71e22fcdc3fcc5a401df7f9a528103b7ad6c"],"state_sha256":"b9398fd0d66825d413eb31e9000d357222e6ef38eb41c9b19631e0c832fb5edf"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oIyI00nPF5v2CsxyCP08Lm3M82wsfg9Ie9HdRCSHHFhQAJNZ79TEvbkx8t8RAa/kq0Qx9QRdIpNQByYWsmgmBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T22:26:16.195093Z","bundle_sha256":"eeb0f2099dfef1d86b449007c2fa5f0984a88645c135b9e601e44db483d9b10e"}}