{"as_of":"2026-08-10T17:30:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:40b441ec28e66bd7e68b68b821038185bab3511ca2de4f4ee8e20bcaa61638b0","coverage":[{"denominator":12,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":12,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-10T17:48:02.212365Z","state":"measured"},{"denominator":12,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":12,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-10T06:31:04.303077+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2604.09849/citation-record","integrity":"/paper/2604.09849/integrity","json":"/paper/2604.09849/citation-record.json","paper":"/paper/2604.09849"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/s10207-023-00723-w","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Dns exfiltration detection in the presence of adversarial attacks and modified exfiltrator behaviour","venue":"International Journal of Information Security","work_id":"1b2b1331-0ec0-4998-a3d8-9330013ab5d1","year":2023},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:2a8340adac02713b326ddcf98e1328c12678bc3aa46d0682b47cef23e6692e28","observation_id":"fb144641-e967-4cf4-b37a-fa6f481b5a1e","resolution":{"observed_at":"2026-05-10T17:50:41.098550Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2307.02614","last_updated":"2023-07-05T19:33:31Z","snapshot_observed_at":"2026-08-08T16:31:31.847493Z","submitted_at":"2023-07-05T19:33:31Z","title":"Information-Based Heavy Hitters for Real-Time DNS Data Exfiltration Detection and Prevention","version":1},"cited_work":{"arxiv_id":"2307.02614","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2307.02614","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Information-based heavy hitters for real-time dns data exfiltration detection and prevention","venue":null,"work_id":"2d489b57-6aaa-4fe1-8ae9-4a8b577a8599","year":2023},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"cited_paper":"/paper/2307.02614","citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:015d5cf305fe430df078fb56ed28c17a2174e3ad1f91fcb68c292e30af663274","observation_id":"1c557eda-8f6f-4906-b521-248926ad83c2","resolution":{"observed_at":"2026-05-11T06:05:58.993257Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dns exfiltration guided by generative adversarial networks","venue":null,"work_id":"2bddc66f-50d3-4732-9576-213bc1e5307f","year":2024},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:f211226ec14cbc9ea46095b36cd850c586bbed75b61771ef995f57cc733fbb54","observation_id":"3d383de4-bc55-4829-9eb1-61ca77da68ee","resolution":{"observed_at":"2026-05-17T08:59:19.335372Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.09513","last_updated":"2025-08-28T09:40:15Z","snapshot_observed_at":"2026-08-08T22:33:24.038256Z","submitted_at":"2023-04-19T09:04:30Z","title":"NetGPT: Generative Pretrained Transformer for Network Traffic","version":3},"cited_work":{"arxiv_id":"2304.09513","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2304.09513","snapshot_observed_at":"2026-07-02T06:06:41.324990Z","title":"Netgpt: Generative pretrained transformer for network traffic","venue":null,"work_id":"18cdfeae-5727-4d41-9a0f-ff3877ec095e","year":2025},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"cited_paper":"/paper/2304.09513","citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:a3465c9c0c9ce1f857c4de064fb7bf79c3194be9decdff33d45e2cd6642c831d","observation_id":"db29dd6b-a507-486c-91aa-421702930d2d","resolution":{"observed_at":"2026-05-11T06:05:58.985263Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Flowtransformer: A transformer framework for flow-based network intrusion detection systems","venue":null,"work_id":"5a47fd09-8173-4ccf-8179-5327e47415c8","year":null},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:4304f5a6e651563a68f54685277f6d989f95d2eb7d48290544d51f8a3beacca6","observation_id":"23c74925-e534-4c50-b4ed-768f22a77f18","resolution":{"observed_at":"2026-05-17T08:59:19.339921Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2304.14746","last_updated":"2023-04-28T10:40:34Z","snapshot_observed_at":"2026-07-06T15:21:08.450594Z","submitted_at":"2023-04-28T10:40:34Z","title":"FlowTransformer: A Transformer Framework for Flow-based Network Intrusion Detection Systems","version":1},"cited_work":{"arxiv_id":"2304.14746","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2304.14746","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Available: https://arxiv.org/abs/2304.14746","venue":null,"work_id":"e5fac3ec-e1c4-4c56-b523-340590c117c6","year":null},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"cited_paper":"/paper/2304.14746","citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:2a69ea6b7b8988bc97c62a1f08c5a31fdbe8f8c79dc6947437e536c23e91513b","observation_id":"93afd9f9-c69a-46c4-b355-e931fdf9e2a6","resolution":{"observed_at":"2026-05-11T06:05:58.973844Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":"2409.09143","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Domurls_bert: Pre-trained bert-based model for malicious domains and urls detection and classification","venue":null,"work_id":"43da3b22-cd20-4efa-8f8b-14bb4ce33fcc","year":2024},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:4f559e9d910e728d9258a8b58cc76e9d3a72a519633889ba6764f856b70ad60a","observation_id":"9de87ce7-f99a-495b-98ad-092945283b55","resolution":{"observed_at":"2026-05-11T06:05:58.979503Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Malicious dns detection by combining improved transformer and cnn","venue":null,"work_id":"72ce30ac-6d02-4fd0-9305-6fd2759599c7","year":2024},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:e4c56de471c0ea71813ddf7f2c6f0db78578eadcc8323a0602af637a6fbd61a2","observation_id":"4cf966e5-d233-4406-9d6c-6f54528a60f1","resolution":{"observed_at":"2026-05-17T08:59:19.323261Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-031-56249-5_6","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Dom-bert: Detecting malicious domains with pre-training model","venue":"Lecture notes in computer science","work_id":"81765584-a711-449e-9621-75cdfb4d8ff4","year":2024},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:3f00b7ebd63e3d85ea7ec945fa727a6c215f1ebded2b079fc4cd27f921c51d3d","observation_id":"3b0929ba-0787-40bf-9b74-1febeb84b38f","resolution":{"observed_at":"2026-05-10T17:50:41.100899Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Dns exfiltration dataset","venue":null,"work_id":"e0fbbbd8-a104-46af-a863-ea0628c850b8","year":null},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:a736675d9011287aa51484dc70645ce6702410cc2d10fb4ed66fdac66e797020","observation_id":"12876c68-af26-43ab-9fc9-fc55996687da","resolution":{"observed_at":"2026-05-17T08:59:19.343804Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.17632/c4n7fckkz3.3","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Available: https://doi.org/10.17632/c4n7fckkz3.3","venue":"Data Archiving and Networked Services (DANS)","work_id":"4f869f19-efb7-4c65-b823-e3b5fa2b92de","year":null},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:ea3709073aad627b3b78cdd9549c7290e4d85420ad43a819f64bb72804fab31b","observation_id":"da1873dc-f779-49aa-9ca6-ab9f1025dd60","resolution":{"observed_at":"2026-05-10T17:50:41.102989Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":"Subdomain Statistics from scanner.ducks.party","venue":null,"work_id":"73e216ac-c016-4c97-ac87-a849dbb7cfb8","year":2025},"citing_paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-05-10T17:48:02.212365Z"},"links":{"citing_paper":"/paper/2604.09849"},"observation_digest":"sha256:aaf70f0fbd1e98a09523ce963e20c5c19f8a7465d3c920fa05319703e2b324b4","observation_id":"0379b8e4-cb62-4a44-8837-f50291893c8a","resolution":{"observed_at":"2026-05-17T08:59:19.330405Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-10T06:31:04.303077+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2604.09849","last_updated":"2026-04-09T15:58:34Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-02T13:12:12.487119Z","submitted_at":"2026-04-09T15:58:34Z","title":"Improving DNS Exfiltration Detection via Transformer Pretraining"},"reference_resolution":{"displayed":12,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":0,"verified_exact":7,"verified_fuzzy":5},"total_outbound_references":12},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-10T06:31:04.303077+00:00","source":"crossref"},{"observed_at":"2026-08-10T06:30:57.382061+00:00","source":"retraction_watch"}],"thesis":"As of 10 August 2026, this Paper Citation Record lists 12 of 12 outbound references and 0 inbound Pith citation observations for arXiv:2604.09849."}