{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:PLMMJNKWLCYFE6JJNMSR3EUNAO","short_pith_number":"pith:PLMMJNKW","canonical_record":{"source":{"id":"2506.02859","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T13:25:40Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"84c133bda9f3f60252563725292c06b985638530f23f2cbef2a486e6bb6a4b36","abstract_canon_sha256":"158f8030b98d82ae459c046cfca09753c7039c365609bd6061b491a74b1c4523"},"schema_version":"1.0"},"canonical_sha256":"7ad8c4b55658b05279296b251d928d03b3529b1fc9173d9430f32473fc1372a8","source":{"kind":"arxiv","id":"2506.02859","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02859","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02859v1","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02859","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_12","alias_value":"PLMMJNKWLCYF","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_16","alias_value":"PLMMJNKWLCYFE6JJ","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_8","alias_value":"PLMMJNKW","created_at":"2026-07-05T11:15:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:PLMMJNKWLCYFE6JJNMSR3EUNAO","target":"record","payload":{"canonical_record":{"source":{"id":"2506.02859","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T13:25:40Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"84c133bda9f3f60252563725292c06b985638530f23f2cbef2a486e6bb6a4b36","abstract_canon_sha256":"158f8030b98d82ae459c046cfca09753c7039c365609bd6061b491a74b1c4523"},"schema_version":"1.0"},"canonical_sha256":"7ad8c4b55658b05279296b251d928d03b3529b1fc9173d9430f32473fc1372a8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:15:10.590496Z","signature_b64":"SyzCEe3lpm2fhJ5a8nboEDb2kS8sMaPiespACjcKPddn+i1UAvPqr6Qv4bVUuT3uBRqpvQiK+5M+gG2hghGKCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7ad8c4b55658b05279296b251d928d03b3529b1fc9173d9430f32473fc1372a8","last_reissued_at":"2026-07-05T11:15:10.590028Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:15:10.590028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.02859","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:15:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6mZXV7cGL4z334bM4+YhWlWowDnV+Boll/0kqTZnys0+IfBxT390O65HiaLpB9Ni3LnNtkL5DUbjcps1End+BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T23:14:29.774067Z"},"content_sha256":"bcf0615394841d27471792a395f91ca758d4d95009304dbb940f7ff759465767","schema_version":"1.0","event_id":"sha256:bcf0615394841d27471792a395f91ca758d4d95009304dbb940f7ff759465767"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:PLMMJNKWLCYFE6JJNMSR3EUNAO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Akansha Shukla, Asaf Shabtai, Beni Ifland, David Tayouri, Parth Atulbhai Gandhi, Rami Puzis, Yuval Elovici","submitted_at":"2025-06-03T13:25:40Z","abstract_excerpt":"Evaluating the security of multi-agent systems (MASs) powered by large language models (LLMs) is challenging, primarily because of the systems' complex internal dynamics and the evolving nature of LLM vulnerabilities. Traditional attack graph (AG) methods often lack the specific capabilities to model attacks on LLMs. This paper introduces AI-agent application Threat assessment with Attack Graphs (ATAG), a novel framework designed to systematically analyze the security risks associated with AI-agent applications. ATAG extends the MulVAL logic-based AG generation tool with custom facts and inter"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02859","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.02859/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:15:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LxO6nPv8aeRM50rKno4pAjXlUQExHk6egXX5c0Iy70Jgm1Fe+qJIswoGxSexQ9dt/QKSKLBWB3URVWu+FfbwDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T23:14:29.774450Z"},"content_sha256":"f6719215305be73fdc82acf401bb2b60bb0fb532c20995799bf82472d59ed315","schema_version":"1.0","event_id":"sha256:f6719215305be73fdc82acf401bb2b60bb0fb532c20995799bf82472d59ed315"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/bundle.json","state_url":"https://pith.science/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T23:14:29Z","links":{"resolver":"https://pith.science/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO","bundle":"https://pith.science/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/bundle.json","state":"https://pith.science/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PLMMJNKWLCYFE6JJNMSR3EUNAO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PLMMJNKWLCYFE6JJNMSR3EUNAO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"158f8030b98d82ae459c046cfca09753c7039c365609bd6061b491a74b1c4523","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T13:25:40Z","title_canon_sha256":"84c133bda9f3f60252563725292c06b985638530f23f2cbef2a486e6bb6a4b36"},"schema_version":"1.0","source":{"id":"2506.02859","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.02859","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"arxiv_version","alias_value":"2506.02859v1","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.02859","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_12","alias_value":"PLMMJNKWLCYF","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_16","alias_value":"PLMMJNKWLCYFE6JJ","created_at":"2026-07-05T11:15:10Z"},{"alias_kind":"pith_short_8","alias_value":"PLMMJNKW","created_at":"2026-07-05T11:15:10Z"}],"graph_snapshots":[{"event_id":"sha256:f6719215305be73fdc82acf401bb2b60bb0fb532c20995799bf82472d59ed315","target":"graph","created_at":"2026-07-05T11:15:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.02859/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Evaluating the security of multi-agent systems (MASs) powered by large language models (LLMs) is challenging, primarily because of the systems' complex internal dynamics and the evolving nature of LLM vulnerabilities. Traditional attack graph (AG) methods often lack the specific capabilities to model attacks on LLMs. This paper introduces AI-agent application Threat assessment with Attack Graphs (ATAG), a novel framework designed to systematically analyze the security risks associated with AI-agent applications. ATAG extends the MulVAL logic-based AG generation tool with custom facts and inter","authors_text":"Akansha Shukla, Asaf Shabtai, Beni Ifland, David Tayouri, Parth Atulbhai Gandhi, Rami Puzis, Yuval Elovici","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T13:25:40Z","title":"ATAG: AI-Agent Application Threat Assessment with Attack Graphs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.02859","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bcf0615394841d27471792a395f91ca758d4d95009304dbb940f7ff759465767","target":"record","created_at":"2026-07-05T11:15:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"158f8030b98d82ae459c046cfca09753c7039c365609bd6061b491a74b1c4523","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-06-03T13:25:40Z","title_canon_sha256":"84c133bda9f3f60252563725292c06b985638530f23f2cbef2a486e6bb6a4b36"},"schema_version":"1.0","source":{"id":"2506.02859","kind":"arxiv","version":1}},"canonical_sha256":"7ad8c4b55658b05279296b251d928d03b3529b1fc9173d9430f32473fc1372a8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7ad8c4b55658b05279296b251d928d03b3529b1fc9173d9430f32473fc1372a8","first_computed_at":"2026-07-05T11:15:10.590028Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:15:10.590028Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SyzCEe3lpm2fhJ5a8nboEDb2kS8sMaPiespACjcKPddn+i1UAvPqr6Qv4bVUuT3uBRqpvQiK+5M+gG2hghGKCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:15:10.590496Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.02859","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bcf0615394841d27471792a395f91ca758d4d95009304dbb940f7ff759465767","sha256:f6719215305be73fdc82acf401bb2b60bb0fb532c20995799bf82472d59ed315"],"state_sha256":"43898ba07c8ec30c1cd90e3c3fc1273b33ff52124959d535e48ec3c7394017fb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fU01agd8MlYxF2gNmGym9gl/tf6mLw1zqDAlDTCyDbog4Y9099EuBcNvPyc2Z7FKUZkZY6qbSWQlhzz/0QgBCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T23:14:29.776931Z","bundle_sha256":"e001586de18c1823b1a15391f3910fce51bfbeb13d9d1239ca54b6a333f9e400"}}