{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XNDJTI7ANHWDRN5ISJLU6PVLQO","short_pith_number":"pith:XNDJTI7A","canonical_record":{"source":{"id":"2307.10252","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-17T08:58:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e37d94079d2e13102e64db0331e270af3ef18f03a768d4bcefacdad99e079332","abstract_canon_sha256":"62733031b95832f312964be5b2717647c41d7a2093c4bd62ed0bf4729faa4ffa"},"schema_version":"1.0"},"canonical_sha256":"bb4699a3e069ec38b7a892574f3eab839efcc4c93dbf1fa136df2376fe48f8a2","source":{"kind":"arxiv","id":"2307.10252","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10252","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10252v1","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10252","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_12","alias_value":"XNDJTI7ANHWD","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_16","alias_value":"XNDJTI7ANHWDRN5I","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_8","alias_value":"XNDJTI7A","created_at":"2026-07-05T06:32:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XNDJTI7ANHWDRN5ISJLU6PVLQO","target":"record","payload":{"canonical_record":{"source":{"id":"2307.10252","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-17T08:58:39Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"e37d94079d2e13102e64db0331e270af3ef18f03a768d4bcefacdad99e079332","abstract_canon_sha256":"62733031b95832f312964be5b2717647c41d7a2093c4bd62ed0bf4729faa4ffa"},"schema_version":"1.0"},"canonical_sha256":"bb4699a3e069ec38b7a892574f3eab839efcc4c93dbf1fa136df2376fe48f8a2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:32:55.909196Z","signature_b64":"lzeO0ukQCssOsnrHqLP8AAF9b4vq+wo2FGXWHze2eeMjhIrU7v+KPoMjn/5RHrMyRRFq+fk0fpAkqKI1YL6fBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bb4699a3e069ec38b7a892574f3eab839efcc4c93dbf1fa136df2376fe48f8a2","last_reissued_at":"2026-07-05T06:32:55.908704Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:32:55.908704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.10252","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EXDc8Npe4oocSAKfbz9YLy3cL6/6NUN1Myt3nOrUqw2bovb5gCHfOBI4hDPeRmZjKzgAcYmt7/27RuUF4woqBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T19:39:16.421731Z"},"content_sha256":"4c96e19410c4883ac9c6dac3cc47fbb64bd798c233094e7097f203fd323e41ac","schema_version":"1.0","event_id":"sha256:4c96e19410c4883ac9c6dac3cc47fbb64bd798c233094e7097f203fd323e41ac"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XNDJTI7ANHWDRN5ISJLU6PVLQO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Machine Learning based Empirical Evaluation of Cyber Threat Actors High Level Attack Patterns over Low level Attack Patterns in Attributing Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Rimsha Kanwal, Sawera Shahid, Umara Noor, Zahid Rashid","submitted_at":"2023-07-17T08:58:39Z","abstract_excerpt":"Cyber threat attribution is the process of identifying the actor of an attack incident in cyberspace. An accurate and timely threat attribution plays an important role in deterring future attacks by applying appropriate and timely defense mechanisms. Manual analysis of attack patterns gathered by honeypot deployments, intrusion detection systems, firewalls, and via trace-back procedures is still the preferred method of security analysts for cyber threat attribution. Such attack patterns are low-level Indicators of Compromise (IOC). They represent Tactics, Techniques, Procedures (TTP), and soft"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10252","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.10252/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qwmefheyx0s7LLExrUshiMFz+6xb5mzM/5YTvs2tbKr96kT6yL3HQ3TPCT4IzTvGn/d9jrGTGOMfwm/RaC1aDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T19:39:16.422300Z"},"content_sha256":"7fc75d8d37c637849e80caa54881942e5b8fe51620c4b4252730f2399a9e8800","schema_version":"1.0","event_id":"sha256:7fc75d8d37c637849e80caa54881942e5b8fe51620c4b4252730f2399a9e8800"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/bundle.json","state_url":"https://pith.science/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T19:39:16Z","links":{"resolver":"https://pith.science/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO","bundle":"https://pith.science/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/bundle.json","state":"https://pith.science/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XNDJTI7ANHWDRN5ISJLU6PVLQO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XNDJTI7ANHWDRN5ISJLU6PVLQO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"62733031b95832f312964be5b2717647c41d7a2093c4bd62ed0bf4729faa4ffa","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-17T08:58:39Z","title_canon_sha256":"e37d94079d2e13102e64db0331e270af3ef18f03a768d4bcefacdad99e079332"},"schema_version":"1.0","source":{"id":"2307.10252","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.10252","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"arxiv_version","alias_value":"2307.10252v1","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.10252","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_12","alias_value":"XNDJTI7ANHWD","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_16","alias_value":"XNDJTI7ANHWDRN5I","created_at":"2026-07-05T06:32:55Z"},{"alias_kind":"pith_short_8","alias_value":"XNDJTI7A","created_at":"2026-07-05T06:32:55Z"}],"graph_snapshots":[{"event_id":"sha256:7fc75d8d37c637849e80caa54881942e5b8fe51620c4b4252730f2399a9e8800","target":"graph","created_at":"2026-07-05T06:32:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.10252/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Cyber threat attribution is the process of identifying the actor of an attack incident in cyberspace. An accurate and timely threat attribution plays an important role in deterring future attacks by applying appropriate and timely defense mechanisms. Manual analysis of attack patterns gathered by honeypot deployments, intrusion detection systems, firewalls, and via trace-back procedures is still the preferred method of security analysts for cyber threat attribution. Such attack patterns are low-level Indicators of Compromise (IOC). They represent Tactics, Techniques, Procedures (TTP), and soft","authors_text":"Rimsha Kanwal, Sawera Shahid, Umara Noor, Zahid Rashid","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-17T08:58:39Z","title":"A Machine Learning based Empirical Evaluation of Cyber Threat Actors High Level Attack Patterns over Low level Attack Patterns in Attributing Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.10252","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4c96e19410c4883ac9c6dac3cc47fbb64bd798c233094e7097f203fd323e41ac","target":"record","created_at":"2026-07-05T06:32:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"62733031b95832f312964be5b2717647c41d7a2093c4bd62ed0bf4729faa4ffa","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-17T08:58:39Z","title_canon_sha256":"e37d94079d2e13102e64db0331e270af3ef18f03a768d4bcefacdad99e079332"},"schema_version":"1.0","source":{"id":"2307.10252","kind":"arxiv","version":1}},"canonical_sha256":"bb4699a3e069ec38b7a892574f3eab839efcc4c93dbf1fa136df2376fe48f8a2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bb4699a3e069ec38b7a892574f3eab839efcc4c93dbf1fa136df2376fe48f8a2","first_computed_at":"2026-07-05T06:32:55.908704Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:32:55.908704Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lzeO0ukQCssOsnrHqLP8AAF9b4vq+wo2FGXWHze2eeMjhIrU7v+KPoMjn/5RHrMyRRFq+fk0fpAkqKI1YL6fBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:32:55.909196Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.10252","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4c96e19410c4883ac9c6dac3cc47fbb64bd798c233094e7097f203fd323e41ac","sha256:7fc75d8d37c637849e80caa54881942e5b8fe51620c4b4252730f2399a9e8800"],"state_sha256":"d3ca98fc791274b52579b8a784c9c9db38a258ffeb591f3a29fd9c7bc18afb2a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1e2UxGBB72ivM8c+KKN21hFRweKwcI1IW3+ioMvKwU9bmk98mczTNcCTmvz+4/+Dkj3MpI34XXoF4FKRB2KjDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T19:39:16.426434Z","bundle_sha256":"7379906e66288d2332d8e714616152669625b435bf6e6db120f607ec25e78322"}}