{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XUQEB7HO4WYGEG72UY6A3LIQWY","short_pith_number":"pith:XUQEB7HO","canonical_record":{"source":{"id":"2304.11084","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-17T07:52:00Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"b88fe4289f7960be2e44300112020e9411a4c50aa67ac25fd75917d80d09e3bf","abstract_canon_sha256":"1ac29bea6c4b06dd7d260ca9babe71d5184ed5d10b0bd173ae60f3d16488128b"},"schema_version":"1.0"},"canonical_sha256":"bd2040fceee5b0621bfaa63c0dad10b602261c69612000e7f68fd8e3c3687b36","source":{"kind":"arxiv","id":"2304.11084","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11084","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11084v1","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11084","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_12","alias_value":"XUQEB7HO4WYG","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_16","alias_value":"XUQEB7HO4WYGEG72","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_8","alias_value":"XUQEB7HO","created_at":"2026-07-05T06:03:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XUQEB7HO4WYGEG72UY6A3LIQWY","target":"record","payload":{"canonical_record":{"source":{"id":"2304.11084","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-17T07:52:00Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"b88fe4289f7960be2e44300112020e9411a4c50aa67ac25fd75917d80d09e3bf","abstract_canon_sha256":"1ac29bea6c4b06dd7d260ca9babe71d5184ed5d10b0bd173ae60f3d16488128b"},"schema_version":"1.0"},"canonical_sha256":"bd2040fceee5b0621bfaa63c0dad10b602261c69612000e7f68fd8e3c3687b36","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:03:18.866496Z","signature_b64":"FTa9310pHaVhtAKzkQxM1agCRs4LN4oXRYiC6qnf5YBI/eOZNMFqTZcdgAZWd3/WD87NeS8Nh+cjYLsmNeLoAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bd2040fceee5b0621bfaa63c0dad10b602261c69612000e7f68fd8e3c3687b36","last_reissued_at":"2026-07-05T06:03:18.865993Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:03:18.865993Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2304.11084","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Giy+/hxDy7+95miNuTMK5gyjemd0hoT+fV2zPTJqONcNNDaeQPQY++QMvg6PG1qbNQVxtTP2kLxtGkHBH/s+AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T00:46:34.390828Z"},"content_sha256":"21a74ed04dc1bc86a712f996c2bec8b35f57b2a892a0441f48cd0b546ba07588","schema_version":"1.0","event_id":"sha256:21a74ed04dc1bc86a712f996c2bec8b35f57b2a892a0441f48cd0b546ba07588"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XUQEB7HO4WYGEG72UY6A3LIQWY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Training Automated Defense Strategies Using Graph-based Cyber Attack Simulations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG","cs.NI"],"primary_cat":"cs.CR","authors_text":"Jakob Nyberg, Pontus Johnson","submitted_at":"2023-04-17T07:52:00Z","abstract_excerpt":"We implemented and evaluated an automated cyber defense agent. The agent takes security alerts as input and uses reinforcement learning to learn a policy for executing predefined defensive measures. The defender policies were trained in an environment intended to simulate a cyber attack. In the simulation, an attacking agent attempts to capture targets in the environment, while the defender attempts to protect them by enabling defenses. The environment was modeled using attack graphs based on the Meta Attack Language language. We assumed that defensive measures have downtime costs, meaning tha"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11084","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2304.11084/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:03:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c/+RWZiLjYyIqRTE6fi9fmT67YD2aGQ16SAtexFp0ROK0d3GkbleOqnz/VQxgC3c2k8Sa5xSHc1iu+bZ6OQ5Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T00:46:34.391333Z"},"content_sha256":"fb1fb01289715721edc6b0310db9f5413048274c154be50d0ab2a0d3e7150a13","schema_version":"1.0","event_id":"sha256:fb1fb01289715721edc6b0310db9f5413048274c154be50d0ab2a0d3e7150a13"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/bundle.json","state_url":"https://pith.science/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T00:46:34Z","links":{"resolver":"https://pith.science/pith/XUQEB7HO4WYGEG72UY6A3LIQWY","bundle":"https://pith.science/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/bundle.json","state":"https://pith.science/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XUQEB7HO4WYGEG72UY6A3LIQWY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XUQEB7HO4WYGEG72UY6A3LIQWY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1ac29bea6c4b06dd7d260ca9babe71d5184ed5d10b0bd173ae60f3d16488128b","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-17T07:52:00Z","title_canon_sha256":"b88fe4289f7960be2e44300112020e9411a4c50aa67ac25fd75917d80d09e3bf"},"schema_version":"1.0","source":{"id":"2304.11084","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2304.11084","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"arxiv_version","alias_value":"2304.11084v1","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2304.11084","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_12","alias_value":"XUQEB7HO4WYG","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_16","alias_value":"XUQEB7HO4WYGEG72","created_at":"2026-07-05T06:03:18Z"},{"alias_kind":"pith_short_8","alias_value":"XUQEB7HO","created_at":"2026-07-05T06:03:18Z"}],"graph_snapshots":[{"event_id":"sha256:fb1fb01289715721edc6b0310db9f5413048274c154be50d0ab2a0d3e7150a13","target":"graph","created_at":"2026-07-05T06:03:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2304.11084/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We implemented and evaluated an automated cyber defense agent. The agent takes security alerts as input and uses reinforcement learning to learn a policy for executing predefined defensive measures. The defender policies were trained in an environment intended to simulate a cyber attack. In the simulation, an attacking agent attempts to capture targets in the environment, while the defender attempts to protect them by enabling defenses. The environment was modeled using attack graphs based on the Meta Attack Language language. We assumed that defensive measures have downtime costs, meaning tha","authors_text":"Jakob Nyberg, Pontus Johnson","cross_cats":["cs.LG","cs.NI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-17T07:52:00Z","title":"Training Automated Defense Strategies Using Graph-based Cyber Attack Simulations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2304.11084","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21a74ed04dc1bc86a712f996c2bec8b35f57b2a892a0441f48cd0b546ba07588","target":"record","created_at":"2026-07-05T06:03:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1ac29bea6c4b06dd7d260ca9babe71d5184ed5d10b0bd173ae60f3d16488128b","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-04-17T07:52:00Z","title_canon_sha256":"b88fe4289f7960be2e44300112020e9411a4c50aa67ac25fd75917d80d09e3bf"},"schema_version":"1.0","source":{"id":"2304.11084","kind":"arxiv","version":1}},"canonical_sha256":"bd2040fceee5b0621bfaa63c0dad10b602261c69612000e7f68fd8e3c3687b36","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"bd2040fceee5b0621bfaa63c0dad10b602261c69612000e7f68fd8e3c3687b36","first_computed_at":"2026-07-05T06:03:18.865993Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:03:18.865993Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FTa9310pHaVhtAKzkQxM1agCRs4LN4oXRYiC6qnf5YBI/eOZNMFqTZcdgAZWd3/WD87NeS8Nh+cjYLsmNeLoAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:03:18.866496Z","signed_message":"canonical_sha256_bytes"},"source_id":"2304.11084","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21a74ed04dc1bc86a712f996c2bec8b35f57b2a892a0441f48cd0b546ba07588","sha256:fb1fb01289715721edc6b0310db9f5413048274c154be50d0ab2a0d3e7150a13"],"state_sha256":"b8e8fe7f9cec7dbdafd1b1aa4dad3191315b71496a78f1f33b6cd46b1892ac2d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/mxAYmVEF2anSlDpVy39v8trnDlHNSlv7DO6aUKZWdtJKtub+Dp+bog+ydsgmBP5cxCUNSwtQHd/rRtNK+VdAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T00:46:34.395719Z","bundle_sha256":"258ec0caddf2773c7eb0150fd0746d4793b99a63a15209e4138aa3e0641409b3"}}