{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:OUJAUTYODVRWVHQ4EYQY5ZRNUN","short_pith_number":"pith:OUJAUTYO","canonical_record":{"source":{"id":"2509.10682","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-12T20:26:16Z","cross_cats_sorted":["cs.AI","cs.CL","cs.ET","cs.LG"],"title_canon_sha256":"ec42c6aea1a8b8f989b18d7f1619e9b0d28aae2f22671f4a3b961f555cf0de12","abstract_canon_sha256":"45d97e8040fd902b975d5a738a8613817d15d8008df9e37ec11ec4cf810d1195"},"schema_version":"1.0"},"canonical_sha256":"75120a4f0e1d636a9e1c26218ee62da360b2efc6885d6d4a8f50f8c538925363","source":{"kind":"arxiv","id":"2509.10682","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.10682","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"arxiv_version","alias_value":"2509.10682v1","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.10682","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_12","alias_value":"OUJAUTYODVRW","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_16","alias_value":"OUJAUTYODVRWVHQ4","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_8","alias_value":"OUJAUTYO","created_at":"2026-07-05T12:11:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:OUJAUTYODVRWVHQ4EYQY5ZRNUN","target":"record","payload":{"canonical_record":{"source":{"id":"2509.10682","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-12T20:26:16Z","cross_cats_sorted":["cs.AI","cs.CL","cs.ET","cs.LG"],"title_canon_sha256":"ec42c6aea1a8b8f989b18d7f1619e9b0d28aae2f22671f4a3b961f555cf0de12","abstract_canon_sha256":"45d97e8040fd902b975d5a738a8613817d15d8008df9e37ec11ec4cf810d1195"},"schema_version":"1.0"},"canonical_sha256":"75120a4f0e1d636a9e1c26218ee62da360b2efc6885d6d4a8f50f8c538925363","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:11:25.863012Z","signature_b64":"iWG3QrbfKej0xSLYoapvyAoCnYcVCgLw+gLDLJ3gP74SW0inyvJgME2lRTB91+hZ3QudB22SN5FgheF0jcPABg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"75120a4f0e1d636a9e1c26218ee62da360b2efc6885d6d4a8f50f8c538925363","last_reissued_at":"2026-07-05T12:11:25.862463Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:11:25.862463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.10682","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:11:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AzOicWIZaTsBuSQkW5L5w3l1xKEiLtCSSHhzX2vzi5XHoomDr3exkjSbD71VFO3MDlXcPuaYSADP3bR6OXkCDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:31:38.432265Z"},"content_sha256":"29f666dd772207137290867edcdb4ecf6435fdbd7749705be69e0e90459885d4","schema_version":"1.0","event_id":"sha256:29f666dd772207137290867edcdb4ecf6435fdbd7749705be69e0e90459885d4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:OUJAUTYODVRWVHQ4EYQY5ZRNUN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CL","cs.ET","cs.LG"],"primary_cat":"cs.CR","authors_text":"Briland Hitaj, Gabriel Antonio Fontes Rebello, Igor Jochem Sanz, Rodrigo Duarte de Meneses, Ulf Lindqvist, Vitor Hugo Galhardo Moia","submitted_at":"2025-09-12T20:26:16Z","abstract_excerpt":"The success and wide adoption of generative AI (GenAI), particularly large language models (LLMs), has attracted the attention of cybercriminals seeking to abuse models, steal sensitive data, or disrupt services. Moreover, providing security to LLM-based systems is a great challenge, as both traditional threats to software applications and threats targeting LLMs and their integration must be mitigated. In this survey, we shed light on security and privacy concerns of such LLM-based systems by performing a systematic review and comprehensive categorization of threats and defensive strategies co"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.10682","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.10682/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:11:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pTiPCBLQJqZTsaxR87DKC4QUYb0UoEx3WxNj/xB2+M9YGa4pTK0xH7pL5LeX0ZgnJ/54B7iihFBqckeui6qsDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T14:31:38.433415Z"},"content_sha256":"820f66c88c32122abb4b6a9fcc4f8ba0d3e6f3c9dce600fa6d6918c8ddc2bc58","schema_version":"1.0","event_id":"sha256:820f66c88c32122abb4b6a9fcc4f8ba0d3e6f3c9dce600fa6d6918c8ddc2bc58"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/bundle.json","state_url":"https://pith.science/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T14:31:38Z","links":{"resolver":"https://pith.science/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN","bundle":"https://pith.science/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/bundle.json","state":"https://pith.science/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OUJAUTYODVRWVHQ4EYQY5ZRNUN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:OUJAUTYODVRWVHQ4EYQY5ZRNUN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"45d97e8040fd902b975d5a738a8613817d15d8008df9e37ec11ec4cf810d1195","cross_cats_sorted":["cs.AI","cs.CL","cs.ET","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-12T20:26:16Z","title_canon_sha256":"ec42c6aea1a8b8f989b18d7f1619e9b0d28aae2f22671f4a3b961f555cf0de12"},"schema_version":"1.0","source":{"id":"2509.10682","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.10682","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"arxiv_version","alias_value":"2509.10682v1","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.10682","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_12","alias_value":"OUJAUTYODVRW","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_16","alias_value":"OUJAUTYODVRWVHQ4","created_at":"2026-07-05T12:11:25Z"},{"alias_kind":"pith_short_8","alias_value":"OUJAUTYO","created_at":"2026-07-05T12:11:25Z"}],"graph_snapshots":[{"event_id":"sha256:820f66c88c32122abb4b6a9fcc4f8ba0d3e6f3c9dce600fa6d6918c8ddc2bc58","target":"graph","created_at":"2026-07-05T12:11:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.10682/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The success and wide adoption of generative AI (GenAI), particularly large language models (LLMs), has attracted the attention of cybercriminals seeking to abuse models, steal sensitive data, or disrupt services. Moreover, providing security to LLM-based systems is a great challenge, as both traditional threats to software applications and threats targeting LLMs and their integration must be mitigated. In this survey, we shed light on security and privacy concerns of such LLM-based systems by performing a systematic review and comprehensive categorization of threats and defensive strategies co","authors_text":"Briland Hitaj, Gabriel Antonio Fontes Rebello, Igor Jochem Sanz, Rodrigo Duarte de Meneses, Ulf Lindqvist, Vitor Hugo Galhardo Moia","cross_cats":["cs.AI","cs.CL","cs.ET","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-12T20:26:16Z","title":"LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.10682","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:29f666dd772207137290867edcdb4ecf6435fdbd7749705be69e0e90459885d4","target":"record","created_at":"2026-07-05T12:11:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"45d97e8040fd902b975d5a738a8613817d15d8008df9e37ec11ec4cf810d1195","cross_cats_sorted":["cs.AI","cs.CL","cs.ET","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-09-12T20:26:16Z","title_canon_sha256":"ec42c6aea1a8b8f989b18d7f1619e9b0d28aae2f22671f4a3b961f555cf0de12"},"schema_version":"1.0","source":{"id":"2509.10682","kind":"arxiv","version":1}},"canonical_sha256":"75120a4f0e1d636a9e1c26218ee62da360b2efc6885d6d4a8f50f8c538925363","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"75120a4f0e1d636a9e1c26218ee62da360b2efc6885d6d4a8f50f8c538925363","first_computed_at":"2026-07-05T12:11:25.862463Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:11:25.862463Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iWG3QrbfKej0xSLYoapvyAoCnYcVCgLw+gLDLJ3gP74SW0inyvJgME2lRTB91+hZ3QudB22SN5FgheF0jcPABg==","signature_status":"signed_v1","signed_at":"2026-07-05T12:11:25.863012Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.10682","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:29f666dd772207137290867edcdb4ecf6435fdbd7749705be69e0e90459885d4","sha256:820f66c88c32122abb4b6a9fcc4f8ba0d3e6f3c9dce600fa6d6918c8ddc2bc58"],"state_sha256":"82c0447cdd611ad7538dcff605d310a6345743e948119383e50d8cb73a47cfe9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OtlNtoBqy+WX53Tzv6t4opK/Xo783jUIM4VscbSiHdbay5ihinJ0E4n0fBUkifksgSbDYLrcwLHtEQHwr+zaDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T14:31:38.442469Z","bundle_sha256":"59d3ccb7e5a26368a579d56b113d494545bae9727197a634958df1e01a1824fa"}}