{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5BREKTVKEVPRYTNY77UTJU7ZQY","short_pith_number":"pith:5BREKTVK","canonical_record":{"source":{"id":"2308.04964","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-08-09T13:58:03Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8104b2710102487f742879ce1aaa4773738bda3ccdb6d0e57743a5f4b4eefdcc","abstract_canon_sha256":"8bfe3de9a67e154eb272b91471769d4a0ee2ed1f54edb6a2a8e893f74f899b6d"},"schema_version":"1.0"},"canonical_sha256":"e862454eaa255f1c4db8ffe934d3f9860a6703e1e98cf159e82948eb50587f3f","source":{"kind":"arxiv","id":"2308.04964","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.04964","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"arxiv_version","alias_value":"2308.04964v4","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.04964","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_12","alias_value":"5BREKTVKEVPR","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_16","alias_value":"5BREKTVKEVPRYTNY","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_8","alias_value":"5BREKTVK","created_at":"2026-07-05T11:33:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5BREKTVKEVPRYTNY77UTJU7ZQY","target":"record","payload":{"canonical_record":{"source":{"id":"2308.04964","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-08-09T13:58:03Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"8104b2710102487f742879ce1aaa4773738bda3ccdb6d0e57743a5f4b4eefdcc","abstract_canon_sha256":"8bfe3de9a67e154eb272b91471769d4a0ee2ed1f54edb6a2a8e893f74f899b6d"},"schema_version":"1.0"},"canonical_sha256":"e862454eaa255f1c4db8ffe934d3f9860a6703e1e98cf159e82948eb50587f3f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:33:56.084108Z","signature_b64":"dF5ovn8I0g+5z3z7pxEJP4wIzYI0NBi3/BB8D1ifpLvcrZbSEscvQ7gr26ad10MXxxee+WeS+uc4QhOHHLvMCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e862454eaa255f1c4db8ffe934d3f9860a6703e1e98cf159e82948eb50587f3f","last_reissued_at":"2026-07-05T11:33:56.083643Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:33:56.083643Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2308.04964","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aOBfg66cByZ0M8LwkTpP5lIWlQfFF5tijYQfXyBJHzy/Ij8fcZ8UUJDfTB04mCwS7gKE4zoth9pE0hi9pOWFAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:45:34.522334Z"},"content_sha256":"c2c54de31163157e85d88dafbe2273f152a48a27c1e339c396002bf0991c5dbe","schema_version":"1.0","event_id":"sha256:c2c54de31163157e85d88dafbe2273f152a48a27c1e339c396002bf0991c5dbe"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5BREKTVKEVPRYTNY77UTJU7ZQY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ModSec-AdvLearn: Countering Adversarial SQL Injections with Robust Machine Learning","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Andrea Valenza, Battista Biggio, Biagio Montaruli, Christian Scano, Davide Ariu, Davide Balzarotti, Giuseppe Floris, Luca Compagna, Luca Demetrio, Luca Piras","submitted_at":"2023-08-09T13:58:03Z","abstract_excerpt":"Many Web Application Firewalls (WAFs) leverage the OWASP CRS to block incoming malicious requests. The CRS consists of different sets of rules designed by domain experts to detect well-known web attack patterns. Both the set of rules and the weights used to combine them are manually defined, yielding four different default configurations of the CRS. In this work, we focus on the detection of SQLi attacks, and show that the manual configurations of the CRS typically yield a suboptimal trade-off between detection and false alarm rates. Furthermore, we show that these configurations are not robus"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.04964","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2308.04964/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:33:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3sz6HqFUSnG787+z7dYJVK+8ZGqY+m+NOig4JOW/JilAZIFoeENGaBJoUoCOxokQb1+bqtQDkfqt3kXbs3AhBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:45:34.523315Z"},"content_sha256":"3913cf0c7a8c1f2560fc7adcc46f9e5b37f91a95ac1bcba23ebb7076635b18e6","schema_version":"1.0","event_id":"sha256:3913cf0c7a8c1f2560fc7adcc46f9e5b37f91a95ac1bcba23ebb7076635b18e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/bundle.json","state_url":"https://pith.science/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:45:34Z","links":{"resolver":"https://pith.science/pith/5BREKTVKEVPRYTNY77UTJU7ZQY","bundle":"https://pith.science/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/bundle.json","state":"https://pith.science/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5BREKTVKEVPRYTNY77UTJU7ZQY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5BREKTVKEVPRYTNY77UTJU7ZQY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8bfe3de9a67e154eb272b91471769d4a0ee2ed1f54edb6a2a8e893f74f899b6d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-08-09T13:58:03Z","title_canon_sha256":"8104b2710102487f742879ce1aaa4773738bda3ccdb6d0e57743a5f4b4eefdcc"},"schema_version":"1.0","source":{"id":"2308.04964","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2308.04964","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"arxiv_version","alias_value":"2308.04964v4","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2308.04964","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_12","alias_value":"5BREKTVKEVPR","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_16","alias_value":"5BREKTVKEVPRYTNY","created_at":"2026-07-05T11:33:56Z"},{"alias_kind":"pith_short_8","alias_value":"5BREKTVK","created_at":"2026-07-05T11:33:56Z"}],"graph_snapshots":[{"event_id":"sha256:3913cf0c7a8c1f2560fc7adcc46f9e5b37f91a95ac1bcba23ebb7076635b18e6","target":"graph","created_at":"2026-07-05T11:33:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2308.04964/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many Web Application Firewalls (WAFs) leverage the OWASP CRS to block incoming malicious requests. The CRS consists of different sets of rules designed by domain experts to detect well-known web attack patterns. Both the set of rules and the weights used to combine them are manually defined, yielding four different default configurations of the CRS. In this work, we focus on the detection of SQLi attacks, and show that the manual configurations of the CRS typically yield a suboptimal trade-off between detection and false alarm rates. Furthermore, we show that these configurations are not robus","authors_text":"Andrea Valenza, Battista Biggio, Biagio Montaruli, Christian Scano, Davide Ariu, Davide Balzarotti, Giuseppe Floris, Luca Compagna, Luca Demetrio, Luca Piras","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-08-09T13:58:03Z","title":"ModSec-AdvLearn: Countering Adversarial SQL Injections with Robust Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2308.04964","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c2c54de31163157e85d88dafbe2273f152a48a27c1e339c396002bf0991c5dbe","target":"record","created_at":"2026-07-05T11:33:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8bfe3de9a67e154eb272b91471769d4a0ee2ed1f54edb6a2a8e893f74f899b6d","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2023-08-09T13:58:03Z","title_canon_sha256":"8104b2710102487f742879ce1aaa4773738bda3ccdb6d0e57743a5f4b4eefdcc"},"schema_version":"1.0","source":{"id":"2308.04964","kind":"arxiv","version":4}},"canonical_sha256":"e862454eaa255f1c4db8ffe934d3f9860a6703e1e98cf159e82948eb50587f3f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e862454eaa255f1c4db8ffe934d3f9860a6703e1e98cf159e82948eb50587f3f","first_computed_at":"2026-07-05T11:33:56.083643Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:33:56.083643Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dF5ovn8I0g+5z3z7pxEJP4wIzYI0NBi3/BB8D1ifpLvcrZbSEscvQ7gr26ad10MXxxee+WeS+uc4QhOHHLvMCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:33:56.084108Z","signed_message":"canonical_sha256_bytes"},"source_id":"2308.04964","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c2c54de31163157e85d88dafbe2273f152a48a27c1e339c396002bf0991c5dbe","sha256:3913cf0c7a8c1f2560fc7adcc46f9e5b37f91a95ac1bcba23ebb7076635b18e6"],"state_sha256":"d1d4f126ae3a1f0752e622828a503c96cf74d89ad941d4f334d4002fb2c57ec6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2cTpIeIBmoKIuny5KO/bEwfU1UZ0zvIo4xGPBMLwTvlruy/kBp4tMps1J3gR6KKjPT8B3eTsPUUuBtDfz04hBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:45:34.529904Z","bundle_sha256":"a62021290d67f94596625cf531c329c719ec2a86336892ae3b7d5285b52c16a1"}}