{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:Z2JSO5IJFGW4MHBCLH6RSDZNDP","short_pith_number":"pith:Z2JSO5IJ","canonical_record":{"source":{"id":"2503.02702","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-04T15:18:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"227d436723dd6b639a9b0f194aee761e867af019c20a6e0aa2e3632c11e9a1cc","abstract_canon_sha256":"b8249faff39d01ca91d3fd2cda3314ebd31bb86f5a419c3fab11fdf1b23f3565"},"schema_version":"1.0"},"canonical_sha256":"ce9327750929adc61c2259fd190f2d1bdcbda8baf6da846b25f07a0745ce823f","source":{"kind":"arxiv","id":"2503.02702","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.02702","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"arxiv_version","alias_value":"2503.02702v2","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.02702","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_12","alias_value":"Z2JSO5IJFGW4","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_16","alias_value":"Z2JSO5IJFGW4MHBC","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_8","alias_value":"Z2JSO5IJ","created_at":"2026-07-05T10:30:31Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:Z2JSO5IJFGW4MHBCLH6RSDZNDP","target":"record","payload":{"canonical_record":{"source":{"id":"2503.02702","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-04T15:18:40Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"227d436723dd6b639a9b0f194aee761e867af019c20a6e0aa2e3632c11e9a1cc","abstract_canon_sha256":"b8249faff39d01ca91d3fd2cda3314ebd31bb86f5a419c3fab11fdf1b23f3565"},"schema_version":"1.0"},"canonical_sha256":"ce9327750929adc61c2259fd190f2d1bdcbda8baf6da846b25f07a0745ce823f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:30:31.900150Z","signature_b64":"5LngTW+C6peCjaOr9n7HBB7NIsFDo9UIduxW7Y5UfgF3/pGHUX+xxGbW5QHpdnGD3b+E3ERgPhIpLBzwdtnlDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ce9327750929adc61c2259fd190f2d1bdcbda8baf6da846b25f07a0745ce823f","last_reissued_at":"2026-07-05T10:30:31.899529Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:30:31.899529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2503.02702","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MpzjzBbo0GJIsAc/5CAx/9/5kTgBVJnyH1hwyrTdmigw7s7b6NueVrMEwddD+a8jqCDTwKQ9hEpY1ZmsXsGoBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T10:16:11.730893Z"},"content_sha256":"abc9b63f21778031bd69e821023168a4794d2a8fb55669dd435e1ce85872fc7e","schema_version":"1.0","event_id":"sha256:abc9b63f21778031bd69e821023168a4794d2a8fb55669dd435e1ce85872fc7e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:Z2JSO5IJFGW4MHBCLH6RSDZNDP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"RedChronos: A Large Language Model-Based Log Analysis System for Insider Threat Detection in Enterprises","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chenyu Li, Jiyan He, Xiu Zhang, Zhengjia Zhu","submitted_at":"2025-03-04T15:18:40Z","abstract_excerpt":"Internal threat detection (IDT) aims to address security threats within organizations or enterprises by identifying potential or already occurring malicious threats within vast amounts of logs. Although organizations or enterprises have dedicated personnel responsible for reviewing these logs, it is impossible to manually examine all logs entirely.In response to the vast number of logs, we propose a system called RedChronos, which is a Large Language Model-Based Log Analysis System. This system incorporates innovative improvements over previous research by employing Query-Aware Weighted Voting"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.02702","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2503.02702/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:30:31Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1i1CBYGO6w2rlwEsF2E44BEKcxcsY/eWDPVMBKKg+DIKD9QAhhWcbzE/YdN50675W/bOTZMNxY5tZ0wj6ZTRDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T10:16:11.731397Z"},"content_sha256":"782e9e39cfa4e824b5dd97961776f5c112de76b1172eae9ddf8d2d6daa394df7","schema_version":"1.0","event_id":"sha256:782e9e39cfa4e824b5dd97961776f5c112de76b1172eae9ddf8d2d6daa394df7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/bundle.json","state_url":"https://pith.science/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T10:16:11Z","links":{"resolver":"https://pith.science/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP","bundle":"https://pith.science/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/bundle.json","state":"https://pith.science/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Z2JSO5IJFGW4MHBCLH6RSDZNDP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:Z2JSO5IJFGW4MHBCLH6RSDZNDP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b8249faff39d01ca91d3fd2cda3314ebd31bb86f5a419c3fab11fdf1b23f3565","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-04T15:18:40Z","title_canon_sha256":"227d436723dd6b639a9b0f194aee761e867af019c20a6e0aa2e3632c11e9a1cc"},"schema_version":"1.0","source":{"id":"2503.02702","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2503.02702","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"arxiv_version","alias_value":"2503.02702v2","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2503.02702","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_12","alias_value":"Z2JSO5IJFGW4","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_16","alias_value":"Z2JSO5IJFGW4MHBC","created_at":"2026-07-05T10:30:31Z"},{"alias_kind":"pith_short_8","alias_value":"Z2JSO5IJ","created_at":"2026-07-05T10:30:31Z"}],"graph_snapshots":[{"event_id":"sha256:782e9e39cfa4e824b5dd97961776f5c112de76b1172eae9ddf8d2d6daa394df7","target":"graph","created_at":"2026-07-05T10:30:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2503.02702/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Internal threat detection (IDT) aims to address security threats within organizations or enterprises by identifying potential or already occurring malicious threats within vast amounts of logs. Although organizations or enterprises have dedicated personnel responsible for reviewing these logs, it is impossible to manually examine all logs entirely.In response to the vast number of logs, we propose a system called RedChronos, which is a Large Language Model-Based Log Analysis System. This system incorporates innovative improvements over previous research by employing Query-Aware Weighted Voting","authors_text":"Chenyu Li, Jiyan He, Xiu Zhang, Zhengjia Zhu","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-04T15:18:40Z","title":"RedChronos: A Large Language Model-Based Log Analysis System for Insider Threat Detection in Enterprises"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2503.02702","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:abc9b63f21778031bd69e821023168a4794d2a8fb55669dd435e1ce85872fc7e","target":"record","created_at":"2026-07-05T10:30:31Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b8249faff39d01ca91d3fd2cda3314ebd31bb86f5a419c3fab11fdf1b23f3565","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-03-04T15:18:40Z","title_canon_sha256":"227d436723dd6b639a9b0f194aee761e867af019c20a6e0aa2e3632c11e9a1cc"},"schema_version":"1.0","source":{"id":"2503.02702","kind":"arxiv","version":2}},"canonical_sha256":"ce9327750929adc61c2259fd190f2d1bdcbda8baf6da846b25f07a0745ce823f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ce9327750929adc61c2259fd190f2d1bdcbda8baf6da846b25f07a0745ce823f","first_computed_at":"2026-07-05T10:30:31.899529Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:30:31.899529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5LngTW+C6peCjaOr9n7HBB7NIsFDo9UIduxW7Y5UfgF3/pGHUX+xxGbW5QHpdnGD3b+E3ERgPhIpLBzwdtnlDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:30:31.900150Z","signed_message":"canonical_sha256_bytes"},"source_id":"2503.02702","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:abc9b63f21778031bd69e821023168a4794d2a8fb55669dd435e1ce85872fc7e","sha256:782e9e39cfa4e824b5dd97961776f5c112de76b1172eae9ddf8d2d6daa394df7"],"state_sha256":"b8774d3ab73441318fc73db870c26e0bb4f784cf2a838d764ac81f58d4692a76"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ryM8ohnb19r9syTOvYS2itBqWqZMN9cQXsOFsHrP/0EMgXqUFRGtavM5k1djo0BlVjFQc6E8tTozJxbcanOCAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T10:16:11.736814Z","bundle_sha256":"5480716ac632394724f3bacef61810a2bfe4eedb861180b5cf3ac8d57000e424"}}