{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:27OMHGW52KP5KQ67WMOHD2MHVH","short_pith_number":"pith:27OMHGW5","canonical_record":{"source":{"id":"1711.00524","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-01T19:56:02Z","cross_cats_sorted":[],"title_canon_sha256":"4ba6573de885b9b6c490d79f4f44545fda15c0e911e3d5e4a9de2382cc81fbc2","abstract_canon_sha256":"cc6c3cd5e15cc8009cb4dc8246ac39191d0de1138464dcd667f60e90ea94d846"},"schema_version":"1.0"},"canonical_sha256":"d7dcc39addd29fd543dfb31c71e987a9d84549a5645256d80ffb916f3bd845e3","source":{"kind":"arxiv","id":"1711.00524","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.00524","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"arxiv_version","alias_value":"1711.00524v1","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.00524","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"pith_short_12","alias_value":"27OMHGW52KP5","created_at":"2026-05-18T12:30:55Z"},{"alias_kind":"pith_short_16","alias_value":"27OMHGW52KP5KQ67","created_at":"2026-05-18T12:30:55Z"},{"alias_kind":"pith_short_8","alias_value":"27OMHGW5","created_at":"2026-05-18T12:30:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:27OMHGW52KP5KQ67WMOHD2MHVH","target":"record","payload":{"canonical_record":{"source":{"id":"1711.00524","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-01T19:56:02Z","cross_cats_sorted":[],"title_canon_sha256":"4ba6573de885b9b6c490d79f4f44545fda15c0e911e3d5e4a9de2382cc81fbc2","abstract_canon_sha256":"cc6c3cd5e15cc8009cb4dc8246ac39191d0de1138464dcd667f60e90ea94d846"},"schema_version":"1.0"},"canonical_sha256":"d7dcc39addd29fd543dfb31c71e987a9d84549a5645256d80ffb916f3bd845e3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:31:30.346703Z","signature_b64":"EcaAlx0qylvNdRL+RmhXXl1SSb5Zz7CRd1lmNnRDmnfLkx0d8ZZ6HgMSQ/TiY4WBzUVGfmRzsRQu6joJ/9qlAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d7dcc39addd29fd543dfb31c71e987a9d84549a5645256d80ffb916f3bd845e3","last_reissued_at":"2026-05-18T00:31:30.345852Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:31:30.345852Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1711.00524","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:31:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U1NBno8BZQILzCN02FbqOZlQQ8c/P16BbfMxQ8tQP/g8TTekWORNYakDcTW+LjJYyTbhOQgsFRvvBNXe5OvIBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T03:29:44.477600Z"},"content_sha256":"13f83cbec3009ad08ce10409915d69cb9cea60304e8e9b3f763ce4cf024619e9","schema_version":"1.0","event_id":"sha256:13f83cbec3009ad08ce10409915d69cb9cea60304e8e9b3f763ce4cf024619e9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:27OMHGW52KP5KQ67WMOHD2MHVH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving SIEM capabilities through an enhanced probe for encrypted Skype traffic detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Cesario Di Sarno, Mario Di Mauro","submitted_at":"2017-11-01T19:56:02Z","abstract_excerpt":"Nowadays, the Security Information and Event Management (SIEM) systems take on great relevance in handling security issues for critical infrastructures as Internet Service Providers. Basically, a SIEM has two main functions: i) the collection and the aggregation of log data and security information from disparate network devices (routers, firewalls, intrusion detection systems, ad hoc probes and others) and ii) the analysis of the gathered data by implementing a set of correlation rules aimed at detecting potential suspicious events as the presence of encrypted real-time traffic. In the presen"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.00524","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:31:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TgMllxreUaNqMC7OsLjgV6gCfvIRe3wt0S12bIr93vKFDfJxTXbHMMSu8eCZ7RvEC+UIItJvHPMASq4TjiJ9Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T03:29:44.478276Z"},"content_sha256":"74e2962259126b594b764a18788293fb8799e5af53a009a2f23793f4c8a56484","schema_version":"1.0","event_id":"sha256:74e2962259126b594b764a18788293fb8799e5af53a009a2f23793f4c8a56484"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/27OMHGW52KP5KQ67WMOHD2MHVH/bundle.json","state_url":"https://pith.science/pith/27OMHGW52KP5KQ67WMOHD2MHVH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/27OMHGW52KP5KQ67WMOHD2MHVH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T03:29:44Z","links":{"resolver":"https://pith.science/pith/27OMHGW52KP5KQ67WMOHD2MHVH","bundle":"https://pith.science/pith/27OMHGW52KP5KQ67WMOHD2MHVH/bundle.json","state":"https://pith.science/pith/27OMHGW52KP5KQ67WMOHD2MHVH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/27OMHGW52KP5KQ67WMOHD2MHVH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:27OMHGW52KP5KQ67WMOHD2MHVH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cc6c3cd5e15cc8009cb4dc8246ac39191d0de1138464dcd667f60e90ea94d846","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-01T19:56:02Z","title_canon_sha256":"4ba6573de885b9b6c490d79f4f44545fda15c0e911e3d5e4a9de2382cc81fbc2"},"schema_version":"1.0","source":{"id":"1711.00524","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1711.00524","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"arxiv_version","alias_value":"1711.00524v1","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1711.00524","created_at":"2026-05-18T00:31:30Z"},{"alias_kind":"pith_short_12","alias_value":"27OMHGW52KP5","created_at":"2026-05-18T12:30:55Z"},{"alias_kind":"pith_short_16","alias_value":"27OMHGW52KP5KQ67","created_at":"2026-05-18T12:30:55Z"},{"alias_kind":"pith_short_8","alias_value":"27OMHGW5","created_at":"2026-05-18T12:30:55Z"}],"graph_snapshots":[{"event_id":"sha256:74e2962259126b594b764a18788293fb8799e5af53a009a2f23793f4c8a56484","target":"graph","created_at":"2026-05-18T00:31:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Nowadays, the Security Information and Event Management (SIEM) systems take on great relevance in handling security issues for critical infrastructures as Internet Service Providers. Basically, a SIEM has two main functions: i) the collection and the aggregation of log data and security information from disparate network devices (routers, firewalls, intrusion detection systems, ad hoc probes and others) and ii) the analysis of the gathered data by implementing a set of correlation rules aimed at detecting potential suspicious events as the presence of encrypted real-time traffic. In the presen","authors_text":"Cesario Di Sarno, Mario Di Mauro","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-01T19:56:02Z","title":"Improving SIEM capabilities through an enhanced probe for encrypted Skype traffic detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1711.00524","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:13f83cbec3009ad08ce10409915d69cb9cea60304e8e9b3f763ce4cf024619e9","target":"record","created_at":"2026-05-18T00:31:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cc6c3cd5e15cc8009cb4dc8246ac39191d0de1138464dcd667f60e90ea94d846","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-11-01T19:56:02Z","title_canon_sha256":"4ba6573de885b9b6c490d79f4f44545fda15c0e911e3d5e4a9de2382cc81fbc2"},"schema_version":"1.0","source":{"id":"1711.00524","kind":"arxiv","version":1}},"canonical_sha256":"d7dcc39addd29fd543dfb31c71e987a9d84549a5645256d80ffb916f3bd845e3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7dcc39addd29fd543dfb31c71e987a9d84549a5645256d80ffb916f3bd845e3","first_computed_at":"2026-05-18T00:31:30.345852Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:31:30.345852Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EcaAlx0qylvNdRL+RmhXXl1SSb5Zz7CRd1lmNnRDmnfLkx0d8ZZ6HgMSQ/TiY4WBzUVGfmRzsRQu6joJ/9qlAQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:31:30.346703Z","signed_message":"canonical_sha256_bytes"},"source_id":"1711.00524","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:13f83cbec3009ad08ce10409915d69cb9cea60304e8e9b3f763ce4cf024619e9","sha256:74e2962259126b594b764a18788293fb8799e5af53a009a2f23793f4c8a56484"],"state_sha256":"89aca6abbdd6914c4de5d845121f7a737565fcdc4575e260e9b36ee04a62f576"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bcTho/Gp9ysUiCKt+tOGd39QVpvZX+QT+Qg6pfqSbukMMQHH0Q6WrHLygiypWsKlx72tMM6TdZezzdi4tdk6CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T03:29:44.481458Z","bundle_sha256":"5300b85c99f92b9dc7fef789530bb36ca35a8758f4302d0165e21d0c03027360"}}