{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:TNOBZ4O6KQG5K5W6MI3YV45DBW","short_pith_number":"pith:TNOBZ4O6","canonical_record":{"source":{"id":"2010.00533","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-01T16:31:46Z","cross_cats_sorted":[],"title_canon_sha256":"2eaeefe944bceb23c2415a630bf1b776ce0e1c7445a77934bbafdb6cdc6d26a9","abstract_canon_sha256":"598f52852285a7a5923b406c663d9b479a692880652048a20f5c01fb110666b5"},"schema_version":"1.0"},"canonical_sha256":"9b5c1cf1de540dd576de62378af3a30d9b9e5e8a430536968003db0fed465f98","source":{"kind":"arxiv","id":"2010.00533","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.00533","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2010.00533v2","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.00533","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"TNOBZ4O6KQG5","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"TNOBZ4O6KQG5K5W6","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"TNOBZ4O6","created_at":"2026-07-05T02:14:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:TNOBZ4O6KQG5K5W6MI3YV45DBW","target":"record","payload":{"canonical_record":{"source":{"id":"2010.00533","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-01T16:31:46Z","cross_cats_sorted":[],"title_canon_sha256":"2eaeefe944bceb23c2415a630bf1b776ce0e1c7445a77934bbafdb6cdc6d26a9","abstract_canon_sha256":"598f52852285a7a5923b406c663d9b479a692880652048a20f5c01fb110666b5"},"schema_version":"1.0"},"canonical_sha256":"9b5c1cf1de540dd576de62378af3a30d9b9e5e8a430536968003db0fed465f98","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:14:11.316493Z","signature_b64":"dKBkwsqMkJZFq5j15Myhdg/PP3dJ8vkUPDdR+Yghgp/maydKeAU1RJZ6nbZ+i7M1smjsaVDT4uK2Vb8kKdLKAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b5c1cf1de540dd576de62378af3a30d9b9e5e8a430536968003db0fed465f98","last_reissued_at":"2026-07-05T02:14:11.316090Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:14:11.316090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.00533","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F2kSsHGhRTrUKu2+AuxAVSoYgR/7BWkBgWkijmZZOlyYYnRY7PcPJ/4ax+a7WH938VXFph04sIPZeQn5fFQaDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:50:21.667080Z"},"content_sha256":"defb5ca091d10620763b09d2843bd628a9a2fb29732cd01eb0981b6a30a3e872","schema_version":"1.0","event_id":"sha256:defb5ca091d10620763b09d2843bd628a9a2fb29732cd01eb0981b6a30a3e872"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:TNOBZ4O6KQG5K5W6MI3YV45DBW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bryn Reinstadler, Erik Hemberg, Jonathan Kelly, Katherine Xu, Michal Shlapentokh-Rothman, Nick Rutar, Una-May O'Reilly","submitted_at":"2020-10-01T16:31:46Z","abstract_excerpt":"Many public sources of cyber threat and vulnerability information exist to help defend cyber systems. This paper links MITRE's ATT&CK MATRIX of Tactics and Techniques, NIST's Common Weakness Enumerations (CWE), Common Vulnerabilities and Exposures (CVE), and Common Attack Pattern Enumeration and Classification list (CAPEC), to gain further insight from alerts, threats and vulnerabilities. We preserve all entries and relations of the sources, while enabling bi-directional, relational path tracing within an aggregate data graph called BRON. In one example, we use BRON to enhance the information "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.00533","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.00533/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:14:11Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NT++OK0o9ivs2H28AstQ5jBUZrXC2/JJ6DDlvrTo3/pSA/ivQmZeb9ZAt+mLDnRg6EbNGo55Luo+9WzAtFFnBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:50:21.667472Z"},"content_sha256":"d61cfd9e9918809322d03ae4b1283c62c8be9376f99ca89de102a73bb413f266","schema_version":"1.0","event_id":"sha256:d61cfd9e9918809322d03ae4b1283c62c8be9376f99ca89de102a73bb413f266"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/bundle.json","state_url":"https://pith.science/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T05:50:21Z","links":{"resolver":"https://pith.science/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW","bundle":"https://pith.science/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/bundle.json","state":"https://pith.science/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TNOBZ4O6KQG5K5W6MI3YV45DBW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:TNOBZ4O6KQG5K5W6MI3YV45DBW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"598f52852285a7a5923b406c663d9b479a692880652048a20f5c01fb110666b5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-01T16:31:46Z","title_canon_sha256":"2eaeefe944bceb23c2415a630bf1b776ce0e1c7445a77934bbafdb6cdc6d26a9"},"schema_version":"1.0","source":{"id":"2010.00533","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.00533","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"arxiv_version","alias_value":"2010.00533v2","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.00533","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_12","alias_value":"TNOBZ4O6KQG5","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_16","alias_value":"TNOBZ4O6KQG5K5W6","created_at":"2026-07-05T02:14:11Z"},{"alias_kind":"pith_short_8","alias_value":"TNOBZ4O6","created_at":"2026-07-05T02:14:11Z"}],"graph_snapshots":[{"event_id":"sha256:d61cfd9e9918809322d03ae4b1283c62c8be9376f99ca89de102a73bb413f266","target":"graph","created_at":"2026-07-05T02:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.00533/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many public sources of cyber threat and vulnerability information exist to help defend cyber systems. This paper links MITRE's ATT&CK MATRIX of Tactics and Techniques, NIST's Common Weakness Enumerations (CWE), Common Vulnerabilities and Exposures (CVE), and Common Attack Pattern Enumeration and Classification list (CAPEC), to gain further insight from alerts, threats and vulnerabilities. We preserve all entries and relations of the sources, while enabling bi-directional, relational path tracing within an aggregate data graph called BRON. In one example, we use BRON to enhance the information ","authors_text":"Bryn Reinstadler, Erik Hemberg, Jonathan Kelly, Katherine Xu, Michal Shlapentokh-Rothman, Nick Rutar, Una-May O'Reilly","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-01T16:31:46Z","title":"Linking Threat Tactics, Techniques, and Patterns with Defensive Weaknesses, Vulnerabilities and Affected Platform Configurations for Cyber Hunting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.00533","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:defb5ca091d10620763b09d2843bd628a9a2fb29732cd01eb0981b6a30a3e872","target":"record","created_at":"2026-07-05T02:14:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"598f52852285a7a5923b406c663d9b479a692880652048a20f5c01fb110666b5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-10-01T16:31:46Z","title_canon_sha256":"2eaeefe944bceb23c2415a630bf1b776ce0e1c7445a77934bbafdb6cdc6d26a9"},"schema_version":"1.0","source":{"id":"2010.00533","kind":"arxiv","version":2}},"canonical_sha256":"9b5c1cf1de540dd576de62378af3a30d9b9e5e8a430536968003db0fed465f98","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b5c1cf1de540dd576de62378af3a30d9b9e5e8a430536968003db0fed465f98","first_computed_at":"2026-07-05T02:14:11.316090Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:14:11.316090Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dKBkwsqMkJZFq5j15Myhdg/PP3dJ8vkUPDdR+Yghgp/maydKeAU1RJZ6nbZ+i7M1smjsaVDT4uK2Vb8kKdLKAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:14:11.316493Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.00533","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:defb5ca091d10620763b09d2843bd628a9a2fb29732cd01eb0981b6a30a3e872","sha256:d61cfd9e9918809322d03ae4b1283c62c8be9376f99ca89de102a73bb413f266"],"state_sha256":"3a47d50832f732a8be970bcdc5b86e9e7e4f63e99d3c471ef75bbe3758a826b9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xkb+f2dFRKYGkYqod3R+vnXuQ+xK+kR2/rLUNRyxf58uwHzNxBlms6YRW3KmyI8NPfk6NPOfiXXfeQxZI15UDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T05:50:21.669999Z","bundle_sha256":"63fe569d330f8e9fe2e83bad40adbb5cb3e1bde572245b4312a9c2610b3105a9"}}