{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:K2TOYHFTA2SYX32JE3OPEB22E3","short_pith_number":"pith:K2TOYHFT","canonical_record":{"source":{"id":"2304.07411","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-14T22:10:38Z","cross_cats_sorted":[],"title_canon_sha256":"562a0412fe551053cf555dea7e8ed88a5f26ddd9667850c95c5352f63f9358bc","abstract_canon_sha256":"5d37170a1165131338c5cfc8eccb46a69ad4941c90daa2886b2d56be7e098acd"},"schema_version":"1.0"},"canonical_sha256":"56a6ec1cb306a58bef4926dcf2075a26d559081dd650280024c40210611af6d3","source":{"kind":"arxiv","id":"2304.07411","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.07411","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"arxiv_version","alias_value":"2304.07411v1","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.07411","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_12","alias_value":"K2TOYHFTA2SY","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_16","alias_value":"K2TOYHFTA2SYX32J","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_8","alias_value":"K2TOYHFT","created_at":"2026-07-05T06:01:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:K2TOYHFTA2SYX32JE3OPEB22E3","target":"record","payload":{"canonical_record":{"source":{"id":"2304.07411","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-14T22:10:38Z","cross_cats_sorted":[],"title_canon_sha256":"562a0412fe551053cf555dea7e8ed88a5f26ddd9667850c95c5352f63f9358bc","abstract_canon_sha256":"5d37170a1165131338c5cfc8eccb46a69ad4941c90daa2886b2d56be7e098acd"},"schema_version":"1.0"},"canonical_sha256":"56a6ec1cb306a58bef4926dcf2075a26d559081dd650280024c40210611af6d3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:01:20.900500Z","signature_b64":"NGDwpl0LDNBmOfKGK4rVthRAGEYEHjOSg6NaL7n8r890diGKRnTeLg3o6g14xRLzJilt9M7wZP1dikxBC/qRDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"56a6ec1cb306a58bef4926dcf2075a26d559081dd650280024c40210611af6d3","last_reissued_at":"2026-07-05T06:01:20.900058Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:01:20.900058Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.07411","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:01:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0mXfeMyHWMxGPOLvM/NLItEB4Vij48oIS81zb5qRn7e7zHUTO75uQsWqwGf2tCzfQOX8uAWyLQHO4KC1s43UCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T04:54:27.987387Z"},"content_sha256":"c359cbc290749cdd9c73e9ab11c606242ac2f0749f7dd354727a95411e371b97","schema_version":"1.0","event_id":"sha256:c359cbc290749cdd9c73e9ab11c606242ac2f0749f7dd354727a95411e371b97"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:K2TOYHFTA2SYX32JE3OPEB22E3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SoK: The MITRE ATT&CK Framework in Research and Practice","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Aron Laszka, Cameron Noakes, Emmanouil Panaousis, George Loukas, Sakshyam Panda, Shanto Roy","submitted_at":"2023-04-14T22:10:38Z","abstract_excerpt":"The MITRE ATT&CK framework, a comprehensive knowledge base of adversary tactics and techniques, has been widely adopted by the cybersecurity industry as well as by academic researchers. Its broad range of industry applications include threat intelligence, threat detection, and incident response, some of which go beyond what it was originally designed for. Despite its popularity, there is a lack of a systematic review of the applications and the research on ATT&CK. This systematization of work aims to fill this gap. To this end, it introduces the first taxonomic systematization of the research "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.07411","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.07411/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:01:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EBngx+VsAmaxzWauBehR3bPCBeUl+X61GKlW2jO8hfD3jGtCnd0S5xAyqlEo/pIHykMsoHvehzN64KZGzGWtAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T04:54:27.987759Z"},"content_sha256":"32b6ad1671083480cd7918e64571bdf1ecc743e0c7f4cdf7f43b3a23036a7409","schema_version":"1.0","event_id":"sha256:32b6ad1671083480cd7918e64571bdf1ecc743e0c7f4cdf7f43b3a23036a7409"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K2TOYHFTA2SYX32JE3OPEB22E3/bundle.json","state_url":"https://pith.science/pith/K2TOYHFTA2SYX32JE3OPEB22E3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K2TOYHFTA2SYX32JE3OPEB22E3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-18T04:54:27Z","links":{"resolver":"https://pith.science/pith/K2TOYHFTA2SYX32JE3OPEB22E3","bundle":"https://pith.science/pith/K2TOYHFTA2SYX32JE3OPEB22E3/bundle.json","state":"https://pith.science/pith/K2TOYHFTA2SYX32JE3OPEB22E3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K2TOYHFTA2SYX32JE3OPEB22E3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:K2TOYHFTA2SYX32JE3OPEB22E3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5d37170a1165131338c5cfc8eccb46a69ad4941c90daa2886b2d56be7e098acd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-14T22:10:38Z","title_canon_sha256":"562a0412fe551053cf555dea7e8ed88a5f26ddd9667850c95c5352f63f9358bc"},"schema_version":"1.0","source":{"id":"2304.07411","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.07411","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"arxiv_version","alias_value":"2304.07411v1","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.07411","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_12","alias_value":"K2TOYHFTA2SY","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_16","alias_value":"K2TOYHFTA2SYX32J","created_at":"2026-07-05T06:01:20Z"},{"alias_kind":"pith_short_8","alias_value":"K2TOYHFT","created_at":"2026-07-05T06:01:20Z"}],"graph_snapshots":[{"event_id":"sha256:32b6ad1671083480cd7918e64571bdf1ecc743e0c7f4cdf7f43b3a23036a7409","target":"graph","created_at":"2026-07-05T06:01:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.07411/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The MITRE ATT&CK framework, a comprehensive knowledge base of adversary tactics and techniques, has been widely adopted by the cybersecurity industry as well as by academic researchers. Its broad range of industry applications include threat intelligence, threat detection, and incident response, some of which go beyond what it was originally designed for. Despite its popularity, there is a lack of a systematic review of the applications and the research on ATT&CK. This systematization of work aims to fill this gap. To this end, it introduces the first taxonomic systematization of the research ","authors_text":"Aron Laszka, Cameron Noakes, Emmanouil Panaousis, George Loukas, Sakshyam Panda, Shanto Roy","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-14T22:10:38Z","title":"SoK: The MITRE ATT&CK Framework in Research and Practice"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.07411","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c359cbc290749cdd9c73e9ab11c606242ac2f0749f7dd354727a95411e371b97","target":"record","created_at":"2026-07-05T06:01:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5d37170a1165131338c5cfc8eccb46a69ad4941c90daa2886b2d56be7e098acd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-04-14T22:10:38Z","title_canon_sha256":"562a0412fe551053cf555dea7e8ed88a5f26ddd9667850c95c5352f63f9358bc"},"schema_version":"1.0","source":{"id":"2304.07411","kind":"arxiv","version":1}},"canonical_sha256":"56a6ec1cb306a58bef4926dcf2075a26d559081dd650280024c40210611af6d3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"56a6ec1cb306a58bef4926dcf2075a26d559081dd650280024c40210611af6d3","first_computed_at":"2026-07-05T06:01:20.900058Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:01:20.900058Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NGDwpl0LDNBmOfKGK4rVthRAGEYEHjOSg6NaL7n8r890diGKRnTeLg3o6g14xRLzJilt9M7wZP1dikxBC/qRDg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:01:20.900500Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.07411","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c359cbc290749cdd9c73e9ab11c606242ac2f0749f7dd354727a95411e371b97","sha256:32b6ad1671083480cd7918e64571bdf1ecc743e0c7f4cdf7f43b3a23036a7409"],"state_sha256":"d6cbf7b220a0cfca4b6fefaab22593fed24f2f83e92f2cb8c8e7747d19bad376"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U1S4qkY7C3CF4zt7Rqp/c9NixNEaVKJbNu29CxQxJtDYDUEcZCmVDGFK35bq312GeM0W5s3/PW+3z1nh28LwAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-18T04:54:27.989936Z","bundle_sha256":"01c762e4b0f8d67951dd23b8d85075acedfb0a9bf56deb1d2db73e1c371f2259"}}