{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:LCN3D3TLMZPRE6PBVNFSPHMYSC","short_pith_number":"pith:LCN3D3TL","canonical_record":{"source":{"id":"2501.14555","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-24T14:57:27Z","cross_cats_sorted":["cs.PL"],"title_canon_sha256":"dc5a5015692f2fc0b614e5e643b44509852616e244b1cc1a1f046f05e1db9e76","abstract_canon_sha256":"635ebd55c07624e2da7833b516add7bd148f079abcf6dbfc1015e921d688717c"},"schema_version":"1.0"},"canonical_sha256":"589bb1ee6b665f1279e1ab4b279d9890a852f61ee01d05e55b0053535e0acb60","source":{"kind":"arxiv","id":"2501.14555","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.14555","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"arxiv_version","alias_value":"2501.14555v1","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.14555","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_12","alias_value":"LCN3D3TLMZPR","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_16","alias_value":"LCN3D3TLMZPRE6PB","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_8","alias_value":"LCN3D3TL","created_at":"2026-07-05T10:05:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:LCN3D3TLMZPRE6PBVNFSPHMYSC","target":"record","payload":{"canonical_record":{"source":{"id":"2501.14555","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-24T14:57:27Z","cross_cats_sorted":["cs.PL"],"title_canon_sha256":"dc5a5015692f2fc0b614e5e643b44509852616e244b1cc1a1f046f05e1db9e76","abstract_canon_sha256":"635ebd55c07624e2da7833b516add7bd148f079abcf6dbfc1015e921d688717c"},"schema_version":"1.0"},"canonical_sha256":"589bb1ee6b665f1279e1ab4b279d9890a852f61ee01d05e55b0053535e0acb60","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:05:02.755781Z","signature_b64":"R3yEE4XhktLWrdSZF9elA4hTwMLj2fskZKxeQyR4UxobRZH5namCcJVI+n3aBzJonbGVhyhanl492QmhZVfWDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"589bb1ee6b665f1279e1ab4b279d9890a852f61ee01d05e55b0053535e0acb60","last_reissued_at":"2026-07-05T10:05:02.755387Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:05:02.755387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.14555","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RqxKYw5LJfu5CSiPegodsa79+sZEKycml9Qn+GefEckrVRsuMFu8Qfim4Q6CclWoyBEpepogITTtI2SIaBa8Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:53:57.459521Z"},"content_sha256":"cd93777611d74f402f92cc6f32f24958a101a928a6a86b818d39a422b3313871","schema_version":"1.0","event_id":"sha256:cd93777611d74f402f92cc6f32f24958a101a928a6a86b818d39a422b3313871"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:LCN3D3TLMZPRE6PBVNFSPHMYSC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring Answer Set Programming for Provenance Graph-Based Cyber Threat Detection: A Novel Approach","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.PL"],"primary_cat":"cs.CR","authors_text":"Fang Li, Fei Zuo, Gopal Gupta","submitted_at":"2025-01-24T14:57:27Z","abstract_excerpt":"Provenance graphs are useful and powerful tools for representing system-level activities in cybersecurity; however, existing approaches often struggle with complex queries and flexible reasoning. This paper presents a novel approach using Answer Set Programming (ASP) to model and analyze provenance graphs. We introduce an ASP-based representation that captures intricate relationships between system entities, including temporal and causal dependencies. Our model enables sophisticated analysis capabilities such as attack path tracing, data exfiltration detection, and anomaly identification. The "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.14555","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.14555/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:05:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gT55olGybjMxxl/VVi363M8YE2iqqeOuq3OxWOHhyf+4wlnLZP/3y1+iOZm3/31MHlx6tJtfzLiLFO3bm9n1CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:53:57.460393Z"},"content_sha256":"1a9307b7677424c9faa4e4aaedd83acdbafbad10dda55e93eecf90bdbfc62ddb","schema_version":"1.0","event_id":"sha256:1a9307b7677424c9faa4e4aaedd83acdbafbad10dda55e93eecf90bdbfc62ddb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/bundle.json","state_url":"https://pith.science/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T07:53:57Z","links":{"resolver":"https://pith.science/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC","bundle":"https://pith.science/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/bundle.json","state":"https://pith.science/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LCN3D3TLMZPRE6PBVNFSPHMYSC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:LCN3D3TLMZPRE6PBVNFSPHMYSC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"635ebd55c07624e2da7833b516add7bd148f079abcf6dbfc1015e921d688717c","cross_cats_sorted":["cs.PL"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-24T14:57:27Z","title_canon_sha256":"dc5a5015692f2fc0b614e5e643b44509852616e244b1cc1a1f046f05e1db9e76"},"schema_version":"1.0","source":{"id":"2501.14555","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.14555","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"arxiv_version","alias_value":"2501.14555v1","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.14555","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_12","alias_value":"LCN3D3TLMZPR","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_16","alias_value":"LCN3D3TLMZPRE6PB","created_at":"2026-07-05T10:05:02Z"},{"alias_kind":"pith_short_8","alias_value":"LCN3D3TL","created_at":"2026-07-05T10:05:02Z"}],"graph_snapshots":[{"event_id":"sha256:1a9307b7677424c9faa4e4aaedd83acdbafbad10dda55e93eecf90bdbfc62ddb","target":"graph","created_at":"2026-07-05T10:05:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.14555/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Provenance graphs are useful and powerful tools for representing system-level activities in cybersecurity; however, existing approaches often struggle with complex queries and flexible reasoning. This paper presents a novel approach using Answer Set Programming (ASP) to model and analyze provenance graphs. We introduce an ASP-based representation that captures intricate relationships between system entities, including temporal and causal dependencies. Our model enables sophisticated analysis capabilities such as attack path tracing, data exfiltration detection, and anomaly identification. The ","authors_text":"Fang Li, Fei Zuo, Gopal Gupta","cross_cats":["cs.PL"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-24T14:57:27Z","title":"Exploring Answer Set Programming for Provenance Graph-Based Cyber Threat Detection: A Novel Approach"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.14555","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cd93777611d74f402f92cc6f32f24958a101a928a6a86b818d39a422b3313871","target":"record","created_at":"2026-07-05T10:05:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"635ebd55c07624e2da7833b516add7bd148f079abcf6dbfc1015e921d688717c","cross_cats_sorted":["cs.PL"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-24T14:57:27Z","title_canon_sha256":"dc5a5015692f2fc0b614e5e643b44509852616e244b1cc1a1f046f05e1db9e76"},"schema_version":"1.0","source":{"id":"2501.14555","kind":"arxiv","version":1}},"canonical_sha256":"589bb1ee6b665f1279e1ab4b279d9890a852f61ee01d05e55b0053535e0acb60","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"589bb1ee6b665f1279e1ab4b279d9890a852f61ee01d05e55b0053535e0acb60","first_computed_at":"2026-07-05T10:05:02.755387Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:05:02.755387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"R3yEE4XhktLWrdSZF9elA4hTwMLj2fskZKxeQyR4UxobRZH5namCcJVI+n3aBzJonbGVhyhanl492QmhZVfWDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:05:02.755781Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.14555","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cd93777611d74f402f92cc6f32f24958a101a928a6a86b818d39a422b3313871","sha256:1a9307b7677424c9faa4e4aaedd83acdbafbad10dda55e93eecf90bdbfc62ddb"],"state_sha256":"4e29c750dc4dc2defac8c0c7c70a80f2b79e417ca45189ab762a329fe17d4df6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HdMYEzSFFxLZNv+dgbeyEkOKMGJlnC1xLqnlA6ZkQwtHvLh03KtuCDCwNJcU8hYPe/zjo39A1jj417XWHk+vCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T07:53:57.466771Z","bundle_sha256":"12b1815c4315290358ed05e0a603c26f46521499a0096e81ee40af910fb82615"}}