{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5ULJ4R6LQR5BI5INLK5WIVGCPY","short_pith_number":"pith:5ULJ4R6L","canonical_record":{"source":{"id":"2501.05387","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T17:21:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2e125b13eaca9d7b1686481632f5230e5bf1358f876f2d0b6250c1f306dc9f09","abstract_canon_sha256":"2e67d953b9df7080d78ecaeaebbed57c88d9a79dacbf0bf4a55ed0176d2e8b6a"},"schema_version":"1.0"},"canonical_sha256":"ed169e47cb847a14750d5abb6454c27e2a3b6e9b7bb106a818023e06dc291f17","source":{"kind":"arxiv","id":"2501.05387","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.05387","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"arxiv_version","alias_value":"2501.05387v1","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.05387","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_12","alias_value":"5ULJ4R6LQR5B","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_16","alias_value":"5ULJ4R6LQR5BI5IN","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_8","alias_value":"5ULJ4R6L","created_at":"2026-07-05T09:59:09Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5ULJ4R6LQR5BI5INLK5WIVGCPY","target":"record","payload":{"canonical_record":{"source":{"id":"2501.05387","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T17:21:00Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"2e125b13eaca9d7b1686481632f5230e5bf1358f876f2d0b6250c1f306dc9f09","abstract_canon_sha256":"2e67d953b9df7080d78ecaeaebbed57c88d9a79dacbf0bf4a55ed0176d2e8b6a"},"schema_version":"1.0"},"canonical_sha256":"ed169e47cb847a14750d5abb6454c27e2a3b6e9b7bb106a818023e06dc291f17","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:59:09.091045Z","signature_b64":"g0nJhGFbqOTM9epkvBZzJ/eEd2P0RzqMu+rA+fT/7bNGi2vvGu5/kNg4U9uJtmi1o3c0ctAXaHHJbfwAvuuZBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ed169e47cb847a14750d5abb6454c27e2a3b6e9b7bb106a818023e06dc291f17","last_reissued_at":"2026-07-05T09:59:09.090630Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:59:09.090630Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.05387","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:59:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rb5hCf6u5HS3ztLNnjzDBArWwsi0TwU6Y5CLaDanj7jJh6KkbXS6XXtKF1nfdeGSzSbvFdaieAHAwqTLlHeyAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T15:20:17.050595Z"},"content_sha256":"4b795719c9ee2e4245d6639e3e65133416ab48c95c2a4ce9fd9a18c4289e9b86","schema_version":"1.0","event_id":"sha256:4b795719c9ee2e4245d6639e3e65133416ab48c95c2a4ce9fd9a18c4289e9b86"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5ULJ4R6LQR5BI5INLK5WIVGCPY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Integrating Explainable AI for Effective Malware Detection in Encrypted Network Traffic","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Amsalu Fentie Jember, Mario Bochicchio, Sileshi Nibret Zeleke","submitted_at":"2025-01-09T17:21:00Z","abstract_excerpt":"Encrypted network communication ensures confidentiality, integrity, and privacy between endpoints. However, attackers are increasingly exploiting encryption to conceal malicious behavior. Detecting unknown encrypted malicious traffic without decrypting the payloads remains a significant challenge. In this study, we investigate the integration of explainable artificial intelligence (XAI) techniques to detect malicious network traffic. We employ ensemble learning models to identify malicious activity using multi-view features extracted from various aspects of encrypted communication. To effectiv"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.05387","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.05387/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:59:09Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5h49Tq67719WuepVaLbhYiV4s2CDgAmif/DgwBvIArEic8F/CiJGjDXHrPu6PhFBS4Y0m/LD9frDTPrnlL4+Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T15:20:17.051513Z"},"content_sha256":"e919ba646253bf364d0f0a72751645cfd51e11feb2d8d013edb807febee29c3c","schema_version":"1.0","event_id":"sha256:e919ba646253bf364d0f0a72751645cfd51e11feb2d8d013edb807febee29c3c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/bundle.json","state_url":"https://pith.science/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T15:20:17Z","links":{"resolver":"https://pith.science/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY","bundle":"https://pith.science/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/bundle.json","state":"https://pith.science/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5ULJ4R6LQR5BI5INLK5WIVGCPY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5ULJ4R6LQR5BI5INLK5WIVGCPY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e67d953b9df7080d78ecaeaebbed57c88d9a79dacbf0bf4a55ed0176d2e8b6a","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T17:21:00Z","title_canon_sha256":"2e125b13eaca9d7b1686481632f5230e5bf1358f876f2d0b6250c1f306dc9f09"},"schema_version":"1.0","source":{"id":"2501.05387","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.05387","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"arxiv_version","alias_value":"2501.05387v1","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.05387","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_12","alias_value":"5ULJ4R6LQR5B","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_16","alias_value":"5ULJ4R6LQR5BI5IN","created_at":"2026-07-05T09:59:09Z"},{"alias_kind":"pith_short_8","alias_value":"5ULJ4R6L","created_at":"2026-07-05T09:59:09Z"}],"graph_snapshots":[{"event_id":"sha256:e919ba646253bf364d0f0a72751645cfd51e11feb2d8d013edb807febee29c3c","target":"graph","created_at":"2026-07-05T09:59:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.05387/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Encrypted network communication ensures confidentiality, integrity, and privacy between endpoints. However, attackers are increasingly exploiting encryption to conceal malicious behavior. Detecting unknown encrypted malicious traffic without decrypting the payloads remains a significant challenge. In this study, we investigate the integration of explainable artificial intelligence (XAI) techniques to detect malicious network traffic. We employ ensemble learning models to identify malicious activity using multi-view features extracted from various aspects of encrypted communication. To effectiv","authors_text":"Amsalu Fentie Jember, Mario Bochicchio, Sileshi Nibret Zeleke","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T17:21:00Z","title":"Integrating Explainable AI for Effective Malware Detection in Encrypted Network Traffic"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.05387","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b795719c9ee2e4245d6639e3e65133416ab48c95c2a4ce9fd9a18c4289e9b86","target":"record","created_at":"2026-07-05T09:59:09Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e67d953b9df7080d78ecaeaebbed57c88d9a79dacbf0bf4a55ed0176d2e8b6a","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-09T17:21:00Z","title_canon_sha256":"2e125b13eaca9d7b1686481632f5230e5bf1358f876f2d0b6250c1f306dc9f09"},"schema_version":"1.0","source":{"id":"2501.05387","kind":"arxiv","version":1}},"canonical_sha256":"ed169e47cb847a14750d5abb6454c27e2a3b6e9b7bb106a818023e06dc291f17","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ed169e47cb847a14750d5abb6454c27e2a3b6e9b7bb106a818023e06dc291f17","first_computed_at":"2026-07-05T09:59:09.090630Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:59:09.090630Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"g0nJhGFbqOTM9epkvBZzJ/eEd2P0RzqMu+rA+fT/7bNGi2vvGu5/kNg4U9uJtmi1o3c0ctAXaHHJbfwAvuuZBg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:59:09.091045Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.05387","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b795719c9ee2e4245d6639e3e65133416ab48c95c2a4ce9fd9a18c4289e9b86","sha256:e919ba646253bf364d0f0a72751645cfd51e11feb2d8d013edb807febee29c3c"],"state_sha256":"6bd1ce6fadd820e73cc7fb149454e066306f27d56eb618e79e9639c7de0b2894"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"g+66sRfkxpWshZjUUbnytTe3WtaljcBVE0TfAkwLt4Rrtdu6wpkost3tROBZJ06ItIarg/rtsYiXgNFT1LGpBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T15:20:17.134001Z","bundle_sha256":"09b0c1d23c7d14aa088296f8eb94dbd60476523f4c53975141b25302919a207c"}}