{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:YBRTFUQ363J7GVEUEZXGDPGVC7","short_pith_number":"pith:YBRTFUQ3","canonical_record":{"source":{"id":"2506.23446","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","cross_cats_sorted":[],"title_canon_sha256":"c0845adbb1054a1cdd1987bfe68bc6277cd6c776596b66466fd41ca9d519aba3","abstract_canon_sha256":"b1395a614db644b4a60f679f69c942090b4767d2f1b7d8f6f3376b5717e9f5a8"},"schema_version":"1.0"},"canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","source":{"kind":"arxiv","id":"2506.23446","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23446","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23446v2","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23446","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_12","alias_value":"YBRTFUQ363J7","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_16","alias_value":"YBRTFUQ363J7GVEU","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_8","alias_value":"YBRTFUQ3","created_at":"2026-07-05T11:34:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:YBRTFUQ363J7GVEUEZXGDPGVC7","target":"record","payload":{"canonical_record":{"source":{"id":"2506.23446","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","cross_cats_sorted":[],"title_canon_sha256":"c0845adbb1054a1cdd1987bfe68bc6277cd6c776596b66466fd41ca9d519aba3","abstract_canon_sha256":"b1395a614db644b4a60f679f69c942090b4767d2f1b7d8f6f3376b5717e9f5a8"},"schema_version":"1.0"},"canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:52.633865Z","signature_b64":"GQyT+Y8jvOYpNSidAEWxXGIL43viGS8fj9MW5c/fI5KlcSih58Ovc3Y5+GrZN7EMGgtEmmZyl1TmYKqX3EkOCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","last_reissued_at":"2026-07-05T11:34:52.633248Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:52.633248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.23446","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"68wrXakSouWYeJx9XgNnZH1T/qVPlq/3W/UfSoZQEuyfY0umRglK6gFajG2htjDE48m8egRcMM1KQ64BUHtTDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T23:49:42.769998Z"},"content_sha256":"5922384f0ed941d48f68ab311b8038814d733f69baf32d420dfb0f710554a01f","schema_version":"1.0","event_id":"sha256:5922384f0ed941d48f68ab311b8038814d733f69baf32d420dfb0f710554a01f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:YBRTFUQ363J7GVEUEZXGDPGVC7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"User-Based Sequential Modeling with Transformer Encoders for Insider Threat Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adewale Akinfaderin, Mohamed Elbasheer","submitted_at":"2025-06-30T00:47:31Z","abstract_excerpt":"Insider threat detection presents unique challenges due to the authorized status of malicious actors and the subtlety of anomalous behaviors. Existing machine learning methods often treat user activity as isolated events, thereby failing to leverage sequential dependencies in user behavior. In this study, we propose a User-Based Sequencing (UBS) methodology, transforming the CERT insider threat dataset into structured temporal sequences suitable for deep sequential modeling. We deploy a Transformer Encoder architecture to model benign user activity and employ its reconstruction errors as anoma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23446","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.23446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:34:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TXms46av4i/+BCJaGhtmRXX+bMHLaXcBoVG4UxeEn+6TY24La5u2oYMO5RURebk8WzfrWOrD6hhiYwR+hY8fAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-19T23:49:42.770373Z"},"content_sha256":"eca97d6043c20d42e31d0e36a97768ff2d88e153c0dd782d87e9f0d6a6de37d2","schema_version":"1.0","event_id":"sha256:eca97d6043c20d42e31d0e36a97768ff2d88e153c0dd782d87e9f0d6a6de37d2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/bundle.json","state_url":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-19T23:49:42Z","links":{"resolver":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7","bundle":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/bundle.json","state":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:YBRTFUQ363J7GVEUEZXGDPGVC7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b1395a614db644b4a60f679f69c942090b4767d2f1b7d8f6f3376b5717e9f5a8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","title_canon_sha256":"c0845adbb1054a1cdd1987bfe68bc6277cd6c776596b66466fd41ca9d519aba3"},"schema_version":"1.0","source":{"id":"2506.23446","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.23446","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"arxiv_version","alias_value":"2506.23446v2","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23446","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_12","alias_value":"YBRTFUQ363J7","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_16","alias_value":"YBRTFUQ363J7GVEU","created_at":"2026-07-05T11:34:52Z"},{"alias_kind":"pith_short_8","alias_value":"YBRTFUQ3","created_at":"2026-07-05T11:34:52Z"}],"graph_snapshots":[{"event_id":"sha256:eca97d6043c20d42e31d0e36a97768ff2d88e153c0dd782d87e9f0d6a6de37d2","target":"graph","created_at":"2026-07-05T11:34:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.23446/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Insider threat detection presents unique challenges due to the authorized status of malicious actors and the subtlety of anomalous behaviors. Existing machine learning methods often treat user activity as isolated events, thereby failing to leverage sequential dependencies in user behavior. In this study, we propose a User-Based Sequencing (UBS) methodology, transforming the CERT insider threat dataset into structured temporal sequences suitable for deep sequential modeling. We deploy a Transformer Encoder architecture to model benign user activity and employ its reconstruction errors as anoma","authors_text":"Adewale Akinfaderin, Mohamed Elbasheer","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","title":"User-Based Sequential Modeling with Transformer Encoders for Insider Threat Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23446","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5922384f0ed941d48f68ab311b8038814d733f69baf32d420dfb0f710554a01f","target":"record","created_at":"2026-07-05T11:34:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b1395a614db644b4a60f679f69c942090b4767d2f1b7d8f6f3376b5717e9f5a8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","title_canon_sha256":"c0845adbb1054a1cdd1987bfe68bc6277cd6c776596b66466fd41ca9d519aba3"},"schema_version":"1.0","source":{"id":"2506.23446","kind":"arxiv","version":2}},"canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","first_computed_at":"2026-07-05T11:34:52.633248Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:34:52.633248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GQyT+Y8jvOYpNSidAEWxXGIL43viGS8fj9MW5c/fI5KlcSih58Ovc3Y5+GrZN7EMGgtEmmZyl1TmYKqX3EkOCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:34:52.633865Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.23446","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5922384f0ed941d48f68ab311b8038814d733f69baf32d420dfb0f710554a01f","sha256:eca97d6043c20d42e31d0e36a97768ff2d88e153c0dd782d87e9f0d6a6de37d2"],"state_sha256":"50bc30f1ff401ce97bbceeb15cf4fe3b1f028deb7e81e0825d9bdbc8f53651c2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RcDuOZASGyMScCeXgoUoPISiGOBqJnXJ9Tb2RccnvFGFtTHD9blHOEzkCvcX3eaal/CSHNNomxdqDPhh1imYBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-19T23:49:42.772736Z","bundle_sha256":"15e7d4d2b9e34511924e04b7f6c2d3f34d05d32494fc1e0cfe159b58152c46f9"}}