{"id":"https://openalex.org/W7160446240","doi":"https://doi.org/10.48550/arxiv.2605.02992","title":"PHANTOM: Polymorphic Honeytoken Adaptation with Narrative-Tailored Organisational Mimicry","display_name":"PHANTOM: Polymorphic Honeytoken Adaptation with Narrative-Tailored Organisational Mimicry","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W7160446240","doi":"https://doi.org/10.48550/arxiv.2605.02992"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.02992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.02992","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5037956466","display_name":"Abraham Itzhak Weinberg","orcid":"https://orcid.org/0000-0002-2505-9653"},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Weinberg, Abraham Itzhak","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5037956466"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12268","display_name":"Deception detection and forensic psychology","score":0.2775999903678894,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T12268","display_name":"Deception detection and forensic psychology","score":0.2775999903678894,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.20880000293254852,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.156700000166893,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.5846999883651733},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5302000045776367},{"id":"https://openalex.org/keywords/phrase","display_name":"Phrase","score":0.44679999351501465},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.43790000677108765},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.43650001287460327},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.396699994802475},{"id":"https://openalex.org/keywords/security-token","display_name":"Security token","score":0.39239999651908875},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.39010000228881836},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.37380000948905945}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6305999755859375},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.5846999883651733},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5302000045776367},{"id":"https://openalex.org/C2776224158","wikidata":"https://www.wikidata.org/wiki/Q187931","display_name":"Phrase","level":2,"score":0.44679999351501465},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.43790000677108765},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.43650001287460327},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.396699994802475},{"id":"https://openalex.org/C48145219","wikidata":"https://www.wikidata.org/wiki/Q1335365","display_name":"Security token","level":2,"score":0.39239999651908875},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.39010000228881836},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.37380000948905945},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36169999837875366},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.35199999809265137},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.3328999876976013},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3280999958515167},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.31790000200271606},{"id":"https://openalex.org/C149364088","wikidata":"https://www.wikidata.org/wiki/Q185917","display_name":"Translation (biology)","level":4,"score":0.3041999936103821},{"id":"https://openalex.org/C130318100","wikidata":"https://www.wikidata.org/wiki/Q2268914","display_name":"Semantic similarity","level":2,"score":0.29760000109672546},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.29420000314712524},{"id":"https://openalex.org/C2781181686","wikidata":"https://www.wikidata.org/wiki/Q4226068","display_name":"Coherence (philosophical gambling strategy)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C104293457","wikidata":"https://www.wikidata.org/wiki/Q28324852","display_name":"Imaging phantom","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.2734000086784363},{"id":"https://openalex.org/C2777632111","wikidata":"https://www.wikidata.org/wiki/Q1937518","display_name":"Reservation","level":2,"score":0.27230000495910645},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.25369998812675476},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.2524999976158142}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.02992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.02992","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.02992","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Honeytokens,":[0],"decoy":[1],"digital":[2],"assets":[3],"planted":[4],"to":[5,99,147,160],"detect":[6],"and":[7,29,35,66,92,106,149,170],"attribute":[8],"unauthorised":[9],"access,":[10],"are":[11,30,209],"a":[12,48,71,80,111],"well-established":[13],"primitive":[14],"in":[15,204,220],"cyber":[16],"deception.":[17],"Existing":[18],"generation":[19,73],"tools":[20],"produce":[21],"static,":[22],"template-based":[23,112],"tokens":[24],"that":[25,50,84,196],"lack":[26],"organisational":[27,108,197],"specificity":[28],"identifiable":[31],"by":[32,55],"statistical,":[33],"syntactic,":[34],"semantic":[36,88,179],"analysis.":[37],"We":[38,75,95],"introduce":[39],"PHANTOM":[40,101,114],"(Polymorphic":[41],"Honeytoken":[42],"Adaptation":[43],"with":[44,174],"Narrative-Tailored":[45],"Organisational":[46],"Mimicry),":[47],"framework":[49],"generates":[51],"contextually":[52],"convincing":[53],"honeytokens":[54],"encoding":[56],"organisation-specific":[57],"knowledge:":[58],"domain":[59],"names,":[60],"service":[61],"naming":[62],"conventions,":[63],"technology-stack":[64],"idioms,":[65],"realistic":[67],"secret-value":[68],"distributions,":[69],"into":[70],"multi-component":[72],"pipeline.":[74],"formalise":[76],"honeytoken":[77],"quality":[78],"through":[79],"four-component":[81],"Believability":[82],"Score":[83],"captures":[85],"syntactic":[86],"validity,":[87],"coherence,":[89],"statistical":[90],"plausibility,":[91],"human":[93],"acceptance.":[94],"use":[96],"this":[97],"metric":[98],"evaluate":[100],"across":[102,162],"8":[103],"token":[104],"types":[105],"4":[107],"contexts":[109],"against":[110],"baseline.":[113],"achieves":[115],"B":[116,122],"=":[117,123,130,133,140,153,184,187],"0.778":[118],"+/-":[119,125],"0.057":[120],"versus":[121],"0.576":[124],"0.058":[126],"for":[127],"templates":[128],"(Delta":[129,182],"+0.203,":[131],"t":[132],"14.07,":[134],"p":[135,175],"<":[136,176],"0.001,":[137],"Cohen's":[138],"d":[139,186],"3.52).":[141],"Human-evaluator":[142],"acceptance":[143],"rises":[144],"from":[145,158],"6.2%":[146],"100%,":[148],"detection":[150],"resistance":[151],"(DR":[152],"1":[154],"-":[155],"Pd)":[156],"improves":[157],"0.609":[159],"0.870":[161],"three":[163],"simulated":[164],"scanner":[165],"models":[166],"(regex,":[167],"entropy":[168],"analysis,":[169],"ML":[171],"classifier),":[172],"each":[173],"0.001.":[177],"The":[178],"coherence":[180],"gap":[181],"Sc":[183],"+0.309,":[185],"4.52)":[188],"is":[189,199],"the":[190,194,200,216],"dominant":[191],"driver,":[192],"confirming":[193],"hypothesis":[195],"context":[198],"critical":[201],"missing":[202],"ingredient":[203],"current":[205],"approaches.":[206],"All":[207],"results":[208],"reproduced":[210],"without":[211],"external":[212],"API":[213],"calls,":[214],"making":[215],"pipeline":[217],"fully":[218],"deployable":[219],"air-gapped":[221],"environments.":[222]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-07T00:00:00"}