{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:KGADYP5PBHNFLDLRFCPM2RJQTO","short_pith_number":"pith:KGADYP5P","canonical_record":{"source":{"id":"2509.05306","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-22T16:50:59Z","cross_cats_sorted":["cs.AI","cs.MA"],"title_canon_sha256":"ec8ea572121a5acd1f86f9c2234cdf8c688dfc983e2ff43ebbaa3920ab7878a2","abstract_canon_sha256":"ff4d8c85f98ff9911acf07bdb71801b14ab2748e49a7c17dfc1d1f01244be07a"},"schema_version":"1.0"},"canonical_sha256":"51803c3faf09da558d71289ecd45309baffb0a9fb7e3683c97d76c0e7dbfcbd0","source":{"kind":"arxiv","id":"2509.05306","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05306","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05306v1","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05306","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_12","alias_value":"KGADYP5PBHNF","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_16","alias_value":"KGADYP5PBHNFLDLR","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_8","alias_value":"KGADYP5P","created_at":"2026-07-05T12:05:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:KGADYP5PBHNFLDLRFCPM2RJQTO","target":"record","payload":{"canonical_record":{"source":{"id":"2509.05306","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-22T16:50:59Z","cross_cats_sorted":["cs.AI","cs.MA"],"title_canon_sha256":"ec8ea572121a5acd1f86f9c2234cdf8c688dfc983e2ff43ebbaa3920ab7878a2","abstract_canon_sha256":"ff4d8c85f98ff9911acf07bdb71801b14ab2748e49a7c17dfc1d1f01244be07a"},"schema_version":"1.0"},"canonical_sha256":"51803c3faf09da558d71289ecd45309baffb0a9fb7e3683c97d76c0e7dbfcbd0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:05:44.662008Z","signature_b64":"iTyiYhpq5kYOfsLBoi5Mwa0MR4EFOPYDWhhdQEjuDZs6q5O9ZJppMJzYdSMVGJ/EYmOFHX/6Wt07ia4BeUCqCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"51803c3faf09da558d71289ecd45309baffb0a9fb7e3683c97d76c0e7dbfcbd0","last_reissued_at":"2026-07-05T12:05:44.661504Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:05:44.661504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.05306","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hdtreGpmNkaTD8tbJZRxI90Iw5YwWKO+hURZKvuns/vF62jh+swZKgZc7+2p049klh11Z/S1fJMXAaXHqNnuDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:47:29.120365Z"},"content_sha256":"0c2da3fb53e15e88a1e49981f07b3667d6fd1d0564d0a41f9f07c4749e9cab19","schema_version":"1.0","event_id":"sha256:0c2da3fb53e15e88a1e49981f07b3667d6fd1d0564d0a41f9f07c4749e9cab19"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:KGADYP5PBHNFLDLRFCPM2RJQTO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Log Analysis with AI Agents: Cowrie Case Study","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.MA"],"primary_cat":"cs.CR","authors_text":"Cagatay Coban, Efe Emir Y\\\"uce, Enis Karaarslan, Esin G\\\"uler","submitted_at":"2025-08-22T16:50:59Z","abstract_excerpt":"The scarcity of real-world attack data significantly hinders progress in cybersecurity research and education. Although honeypots like Cowrie effectively collect live threat intelligence, they generate overwhelming volumes of unstructured and heterogeneous logs, rendering manual analysis impractical. As a first step in our project on secure and efficient AI automation, this study explores the use of AI agents for automated log analysis. We present a lightweight and automated approach to process Cowrie honeypot logs. Our approach leverages AI agents to intelligently parse, summarize, and extrac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05306","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.05306/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:05:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JsLvO8qS9TqfuO4cOtmeuMml973uNAUf8KokGQvBQoDqq5SqqLeyauA2aSNCKQkFs1U6ncyV0KQ+mC0Ac1oSDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T06:47:29.121318Z"},"content_sha256":"5311e28b61f9a76fbfdfbc3f8b2765917b1fcb63092da0e51424b6d17a835a69","schema_version":"1.0","event_id":"sha256:5311e28b61f9a76fbfdfbc3f8b2765917b1fcb63092da0e51424b6d17a835a69"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/bundle.json","state_url":"https://pith.science/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T06:47:29Z","links":{"resolver":"https://pith.science/pith/KGADYP5PBHNFLDLRFCPM2RJQTO","bundle":"https://pith.science/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/bundle.json","state":"https://pith.science/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KGADYP5PBHNFLDLRFCPM2RJQTO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:KGADYP5PBHNFLDLRFCPM2RJQTO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ff4d8c85f98ff9911acf07bdb71801b14ab2748e49a7c17dfc1d1f01244be07a","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-22T16:50:59Z","title_canon_sha256":"ec8ea572121a5acd1f86f9c2234cdf8c688dfc983e2ff43ebbaa3920ab7878a2"},"schema_version":"1.0","source":{"id":"2509.05306","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.05306","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"arxiv_version","alias_value":"2509.05306v1","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.05306","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_12","alias_value":"KGADYP5PBHNF","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_16","alias_value":"KGADYP5PBHNFLDLR","created_at":"2026-07-05T12:05:44Z"},{"alias_kind":"pith_short_8","alias_value":"KGADYP5P","created_at":"2026-07-05T12:05:44Z"}],"graph_snapshots":[{"event_id":"sha256:5311e28b61f9a76fbfdfbc3f8b2765917b1fcb63092da0e51424b6d17a835a69","target":"graph","created_at":"2026-07-05T12:05:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.05306/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The scarcity of real-world attack data significantly hinders progress in cybersecurity research and education. Although honeypots like Cowrie effectively collect live threat intelligence, they generate overwhelming volumes of unstructured and heterogeneous logs, rendering manual analysis impractical. As a first step in our project on secure and efficient AI automation, this study explores the use of AI agents for automated log analysis. We present a lightweight and automated approach to process Cowrie honeypot logs. Our approach leverages AI agents to intelligently parse, summarize, and extrac","authors_text":"Cagatay Coban, Efe Emir Y\\\"uce, Enis Karaarslan, Esin G\\\"uler","cross_cats":["cs.AI","cs.MA"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-22T16:50:59Z","title":"Towards Log Analysis with AI Agents: Cowrie Case Study"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.05306","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0c2da3fb53e15e88a1e49981f07b3667d6fd1d0564d0a41f9f07c4749e9cab19","target":"record","created_at":"2026-07-05T12:05:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ff4d8c85f98ff9911acf07bdb71801b14ab2748e49a7c17dfc1d1f01244be07a","cross_cats_sorted":["cs.AI","cs.MA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-22T16:50:59Z","title_canon_sha256":"ec8ea572121a5acd1f86f9c2234cdf8c688dfc983e2ff43ebbaa3920ab7878a2"},"schema_version":"1.0","source":{"id":"2509.05306","kind":"arxiv","version":1}},"canonical_sha256":"51803c3faf09da558d71289ecd45309baffb0a9fb7e3683c97d76c0e7dbfcbd0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"51803c3faf09da558d71289ecd45309baffb0a9fb7e3683c97d76c0e7dbfcbd0","first_computed_at":"2026-07-05T12:05:44.661504Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:05:44.661504Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iTyiYhpq5kYOfsLBoi5Mwa0MR4EFOPYDWhhdQEjuDZs6q5O9ZJppMJzYdSMVGJ/EYmOFHX/6Wt07ia4BeUCqCw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:05:44.662008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.05306","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0c2da3fb53e15e88a1e49981f07b3667d6fd1d0564d0a41f9f07c4749e9cab19","sha256:5311e28b61f9a76fbfdfbc3f8b2765917b1fcb63092da0e51424b6d17a835a69"],"state_sha256":"03d567c98928833b9dda0c1859eaece5d1345f3943fe8c792ad42d6700f91c72"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xWF3sXvRw9RSD3okLgJCBBSPOrv9p6eiQP+vKk6Ow9xYkS7ln6DBTT4y3UvzU4s/Fdx+G9vYU5dnwEdvWhLKCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T06:47:29.128451Z","bundle_sha256":"7b915db4382761bc455f320dc24f075c98bb8296d4f1c37a584c1c2c51aa590e"}}