{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:KH6QWTDHXNLXVR4QHGUJDGJJF2","short_pith_number":"pith:KH6QWTDH","canonical_record":{"source":{"id":"2102.05571","kind":"arxiv","version":6},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-02-10T17:08:09Z","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"title_canon_sha256":"4b7a02046e0a00d2c65899394e151eede1201d1f71947908beec49bf9696a800","abstract_canon_sha256":"29f63bcdf4b741a66e1981d102263b6aa0212e8f14dc9105208560963b49560c"},"schema_version":"1.0"},"canonical_sha256":"51fd0b4c67bb577ac79039a89199292ea256362ceddde4243dea0c5691511de2","source":{"kind":"arxiv","id":"2102.05571","version":6},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.05571","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"arxiv_version","alias_value":"2102.05571v6","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.05571","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_12","alias_value":"KH6QWTDHXNLX","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_16","alias_value":"KH6QWTDHXNLXVR4Q","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_8","alias_value":"KH6QWTDH","created_at":"2026-07-05T05:34:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:KH6QWTDHXNLXVR4QHGUJDGJJF2","target":"record","payload":{"canonical_record":{"source":{"id":"2102.05571","kind":"arxiv","version":6},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-02-10T17:08:09Z","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"title_canon_sha256":"4b7a02046e0a00d2c65899394e151eede1201d1f71947908beec49bf9696a800","abstract_canon_sha256":"29f63bcdf4b741a66e1981d102263b6aa0212e8f14dc9105208560963b49560c"},"schema_version":"1.0"},"canonical_sha256":"51fd0b4c67bb577ac79039a89199292ea256362ceddde4243dea0c5691511de2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:34:13.153062Z","signature_b64":"ks8qTqhxGlgBXOklhVLu5LlW5O5AAIIEKG4X3YNVsUW954B6hwER5JZGdVHl6s5O/4K7udydnq8rz80nCfDBDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"51fd0b4c67bb577ac79039a89199292ea256362ceddde4243dea0c5691511de2","last_reissued_at":"2026-07-05T05:34:13.152660Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:34:13.152660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.05571","source_version":6,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:34:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U8OLgQbUCbrxaQV2nXkWto21SbyF2vK3qr9KMa469ZSGG8HiJoiCUhPrUHIaqunWQe1SyELB1kFjbl7n1du1BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T18:49:46.003917Z"},"content_sha256":"e0b64497adb17602b9cbe208748c2609467e57eb275482277e3eb063d84bc2f5","schema_version":"1.0","event_id":"sha256:e0b64497adb17602b9cbe208748c2609467e57eb275482277e3eb063d84bc2f5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:KH6QWTDHXNLXVR4QHGUJDGJJF2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TINKER: A framework for Open source Cyberthreat Intelligence","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.IR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alex Gittens, Charu Aggarwal, Mohammed J. Zaki, Nidhi Rastogi, Sharmishtha Dutta","submitted_at":"2021-02-10T17:08:09Z","abstract_excerpt":"Threat intelligence on malware attacks and campaigns is increasingly being shared with other security experts for a cost or for free. Other security analysts use this intelligence to inform them of indicators of compromise, attack techniques, and preventative actions. Security analysts prepare threat analysis reports after investigating an attack, an emerging cyber threat, or a recently discovered vulnerability. Collectively known as cyber threat intelligence (CTI), the reports are typically in an unstructured format and, therefore, challenging to integrate seamlessly into existing intrusion d"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.05571","kind":"arxiv","version":6},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.05571/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:34:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LwItxT19jWDBGw68h2+WmYGDzV19N3l34NQbYwu+LwrbFa4vUUffICspRIJ/zr3qBufwtDZWBjvXgfATlJhRAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-18T18:49:46.004723Z"},"content_sha256":"37e52d134f6efa2f8af5e4e42a68e8ac00372610fb14710537afdad3882b1aeb","schema_version":"1.0","event_id":"sha256:37e52d134f6efa2f8af5e4e42a68e8ac00372610fb14710537afdad3882b1aeb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/bundle.json","state_url":"https://pith.science/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-18T18:49:46Z","links":{"resolver":"https://pith.science/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2","bundle":"https://pith.science/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/bundle.json","state":"https://pith.science/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KH6QWTDHXNLXVR4QHGUJDGJJF2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:KH6QWTDHXNLXVR4QHGUJDGJJF2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"29f63bcdf4b741a66e1981d102263b6aa0212e8f14dc9105208560963b49560c","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-02-10T17:08:09Z","title_canon_sha256":"4b7a02046e0a00d2c65899394e151eede1201d1f71947908beec49bf9696a800"},"schema_version":"1.0","source":{"id":"2102.05571","kind":"arxiv","version":6}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.05571","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"arxiv_version","alias_value":"2102.05571v6","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.05571","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_12","alias_value":"KH6QWTDHXNLX","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_16","alias_value":"KH6QWTDHXNLXVR4Q","created_at":"2026-07-05T05:34:13Z"},{"alias_kind":"pith_short_8","alias_value":"KH6QWTDH","created_at":"2026-07-05T05:34:13Z"}],"graph_snapshots":[{"event_id":"sha256:37e52d134f6efa2f8af5e4e42a68e8ac00372610fb14710537afdad3882b1aeb","target":"graph","created_at":"2026-07-05T05:34:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.05571/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Threat intelligence on malware attacks and campaigns is increasingly being shared with other security experts for a cost or for free. Other security analysts use this intelligence to inform them of indicators of compromise, attack techniques, and preventative actions. Security analysts prepare threat analysis reports after investigating an attack, an emerging cyber threat, or a recently discovered vulnerability. Collectively known as cyber threat intelligence (CTI), the reports are typically in an unstructured format and, therefore, challenging to integrate seamlessly into existing intrusion d","authors_text":"Alex Gittens, Charu Aggarwal, Mohammed J. Zaki, Nidhi Rastogi, Sharmishtha Dutta","cross_cats":["cs.AI","cs.IR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-02-10T17:08:09Z","title":"TINKER: A framework for Open source Cyberthreat Intelligence"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.05571","kind":"arxiv","version":6},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e0b64497adb17602b9cbe208748c2609467e57eb275482277e3eb063d84bc2f5","target":"record","created_at":"2026-07-05T05:34:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"29f63bcdf4b741a66e1981d102263b6aa0212e8f14dc9105208560963b49560c","cross_cats_sorted":["cs.AI","cs.IR","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-02-10T17:08:09Z","title_canon_sha256":"4b7a02046e0a00d2c65899394e151eede1201d1f71947908beec49bf9696a800"},"schema_version":"1.0","source":{"id":"2102.05571","kind":"arxiv","version":6}},"canonical_sha256":"51fd0b4c67bb577ac79039a89199292ea256362ceddde4243dea0c5691511de2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"51fd0b4c67bb577ac79039a89199292ea256362ceddde4243dea0c5691511de2","first_computed_at":"2026-07-05T05:34:13.152660Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:34:13.152660Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ks8qTqhxGlgBXOklhVLu5LlW5O5AAIIEKG4X3YNVsUW954B6hwER5JZGdVHl6s5O/4K7udydnq8rz80nCfDBDg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:34:13.153062Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.05571","source_kind":"arxiv","source_version":6}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e0b64497adb17602b9cbe208748c2609467e57eb275482277e3eb063d84bc2f5","sha256:37e52d134f6efa2f8af5e4e42a68e8ac00372610fb14710537afdad3882b1aeb"],"state_sha256":"5ae548af2de1d40749d5a4cb1ccc657d824012ed3003dbeb44c7e0a9ffc097cd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NR+bbzYDMmbHDyzNdxivaG21AhhclOCuitIwF8z6l2hSqhhefnzmq6nSoQesUaSiXTLBtniJadWLc5hdouFrDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-18T18:49:46.011085Z","bundle_sha256":"2addec2af606cdd58c99acaf563c6555b03a91fe8a0644e544c7568accd7c717"}}