{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5MSV3ZNICDNK3ZNHY43JGOG27E","short_pith_number":"pith:5MSV3ZNI","canonical_record":{"source":{"id":"2403.01314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2024-03-02T21:22:36Z","cross_cats_sorted":[],"title_canon_sha256":"b86f16c0277c73ea8cfcfe29541f0637e6a357a2824de9f834cdfa4932b97f3c","abstract_canon_sha256":"404648d74b88c2a404b02e70f32931c76ab9d8e8b74c4c029bab31218da6b49c"},"schema_version":"1.0"},"canonical_sha256":"eb255de5a810daade5a7c7369338daf9262bd783d67b5e8bbb097720af33eb6f","source":{"kind":"arxiv","id":"2403.01314","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.01314","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"arxiv_version","alias_value":"2403.01314v1","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.01314","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_12","alias_value":"5MSV3ZNICDNK","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_16","alias_value":"5MSV3ZNICDNK3ZNH","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_8","alias_value":"5MSV3ZNI","created_at":"2026-07-05T07:51:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5MSV3ZNICDNK3ZNHY43JGOG27E","target":"record","payload":{"canonical_record":{"source":{"id":"2403.01314","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2024-03-02T21:22:36Z","cross_cats_sorted":[],"title_canon_sha256":"b86f16c0277c73ea8cfcfe29541f0637e6a357a2824de9f834cdfa4932b97f3c","abstract_canon_sha256":"404648d74b88c2a404b02e70f32931c76ab9d8e8b74c4c029bab31218da6b49c"},"schema_version":"1.0"},"canonical_sha256":"eb255de5a810daade5a7c7369338daf9262bd783d67b5e8bbb097720af33eb6f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:51:45.233509Z","signature_b64":"KzJrv96AxcIp385vccFQKm4KpWz5s1GOiSEaV9AIIdPM/kG8o8DP9u+ct39shnaI+LDsU2H5QGuOh6VDbLpeDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eb255de5a810daade5a7c7369338daf9262bd783d67b5e8bbb097720af33eb6f","last_reissued_at":"2026-07-05T07:51:45.232956Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:51:45.232956Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.01314","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:51:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jjb1C/2xlz4D7+5nBcO24cyhYeGoNOitYfsbi0JGDMvIu9FPTN7inXXJqYzBdzGn6x/ATJo6OhUvhO+VSYJdBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:10:31.005785Z"},"content_sha256":"9c89f1c399ad4fed069c37ca431315837ead4e2c98e4d45e5a83564d368aa5b9","schema_version":"1.0","event_id":"sha256:9c89f1c399ad4fed069c37ca431315837ead4e2c98e4d45e5a83564d368aa5b9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5MSV3ZNICDNK3ZNHY43JGOG27E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Superflows: A New Tool for Forensic Network Flow Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Dristi Dinesh, Jyotirmoy V. Deshmukh, Michael Collins, Mukund Raghothaman, Srivatsan Ravi, Yuan Xia","submitted_at":"2024-03-02T21:22:36Z","abstract_excerpt":"Network security analysts gather data from diverse sources, from high-level summaries of network flow and traffic volumes to low-level details such as service logs from servers and the contents of individual packets. They validate and check this data against traffic patterns and historical indicators of compromise. Based on the results of this analysis, a decision is made to either automatically manage the traffic or report it to an analyst for further investigation. Unfortunately, due rapidly increasing traffic volumes, there are far more events to check than operational teams can handle for "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.01314","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.01314/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:51:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kq+V6qlppMc1hwiBY0AtlIucWmOnfh3/wR1fYc8Vjd4Xa9t+My3r3Ia514KKmSM0ecaNOc43qOnaCMMW0Z7CCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:10:31.006165Z"},"content_sha256":"ba672701a2975c71b4e6065de56e8b63ac2148c3d8fe7204f943461eae2774da","schema_version":"1.0","event_id":"sha256:ba672701a2975c71b4e6065de56e8b63ac2148c3d8fe7204f943461eae2774da"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/bundle.json","state_url":"https://pith.science/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T19:10:31Z","links":{"resolver":"https://pith.science/pith/5MSV3ZNICDNK3ZNHY43JGOG27E","bundle":"https://pith.science/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/bundle.json","state":"https://pith.science/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5MSV3ZNICDNK3ZNHY43JGOG27E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5MSV3ZNICDNK3ZNHY43JGOG27E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"404648d74b88c2a404b02e70f32931c76ab9d8e8b74c4c029bab31218da6b49c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2024-03-02T21:22:36Z","title_canon_sha256":"b86f16c0277c73ea8cfcfe29541f0637e6a357a2824de9f834cdfa4932b97f3c"},"schema_version":"1.0","source":{"id":"2403.01314","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.01314","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"arxiv_version","alias_value":"2403.01314v1","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.01314","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_12","alias_value":"5MSV3ZNICDNK","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_16","alias_value":"5MSV3ZNICDNK3ZNH","created_at":"2026-07-05T07:51:45Z"},{"alias_kind":"pith_short_8","alias_value":"5MSV3ZNI","created_at":"2026-07-05T07:51:45Z"}],"graph_snapshots":[{"event_id":"sha256:ba672701a2975c71b4e6065de56e8b63ac2148c3d8fe7204f943461eae2774da","target":"graph","created_at":"2026-07-05T07:51:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.01314/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Network security analysts gather data from diverse sources, from high-level summaries of network flow and traffic volumes to low-level details such as service logs from servers and the contents of individual packets. They validate and check this data against traffic patterns and historical indicators of compromise. Based on the results of this analysis, a decision is made to either automatically manage the traffic or report it to an analyst for further investigation. Unfortunately, due rapidly increasing traffic volumes, there are far more events to check than operational teams can handle for ","authors_text":"Dristi Dinesh, Jyotirmoy V. Deshmukh, Michael Collins, Mukund Raghothaman, Srivatsan Ravi, Yuan Xia","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2024-03-02T21:22:36Z","title":"Superflows: A New Tool for Forensic Network Flow Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.01314","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9c89f1c399ad4fed069c37ca431315837ead4e2c98e4d45e5a83564d368aa5b9","target":"record","created_at":"2026-07-05T07:51:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"404648d74b88c2a404b02e70f32931c76ab9d8e8b74c4c029bab31218da6b49c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2024-03-02T21:22:36Z","title_canon_sha256":"b86f16c0277c73ea8cfcfe29541f0637e6a357a2824de9f834cdfa4932b97f3c"},"schema_version":"1.0","source":{"id":"2403.01314","kind":"arxiv","version":1}},"canonical_sha256":"eb255de5a810daade5a7c7369338daf9262bd783d67b5e8bbb097720af33eb6f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eb255de5a810daade5a7c7369338daf9262bd783d67b5e8bbb097720af33eb6f","first_computed_at":"2026-07-05T07:51:45.232956Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:51:45.232956Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KzJrv96AxcIp385vccFQKm4KpWz5s1GOiSEaV9AIIdPM/kG8o8DP9u+ct39shnaI+LDsU2H5QGuOh6VDbLpeDg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:51:45.233509Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.01314","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9c89f1c399ad4fed069c37ca431315837ead4e2c98e4d45e5a83564d368aa5b9","sha256:ba672701a2975c71b4e6065de56e8b63ac2148c3d8fe7204f943461eae2774da"],"state_sha256":"994ab25d6d9cfcdce8ddc2cc147eb3915a06a31d777fd1085b6cab1f62d11a53"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ebnhv0pZlFsdkr34MPQcxFD6YFtss5PrBh/Zn9K0Uj0YjwoYjZB/DFi2l88H7FcMClCEhNOXiVwKH+dFg3m/CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T19:10:31.008075Z","bundle_sha256":"9602b76bdec6b61a5a711fd6d56ab78e314fffe921c1103327eb177dd3b39549"}}