{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:7DC2IZO7ZSI772FMRSKIPYBMCJ","short_pith_number":"pith:7DC2IZO7","canonical_record":{"source":{"id":"1801.08629","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-01-25T23:23:04Z","cross_cats_sorted":[],"title_canon_sha256":"729f6d6152a32af2d44fa1257bb6dd5eed46c6cd6c2e41ebc9afcd7655ba3888","abstract_canon_sha256":"a75c8fbd1914d6ac07fe63f7dd9d2fbdc0d6f0e0edc5c3397b6dee62f4378eed"},"schema_version":"1.0"},"canonical_sha256":"f8c5a465dfcc91ffe8ac8c9487e02c125c9ceb606d91a050061486588f269086","source":{"kind":"arxiv","id":"1801.08629","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1801.08629","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"arxiv_version","alias_value":"1801.08629v1","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1801.08629","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"pith_short_12","alias_value":"7DC2IZO7ZSI7","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7DC2IZO7ZSI772FM","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7DC2IZO7","created_at":"2026-05-18T12:32:11Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:7DC2IZO7ZSI772FMRSKIPYBMCJ","target":"record","payload":{"canonical_record":{"source":{"id":"1801.08629","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-01-25T23:23:04Z","cross_cats_sorted":[],"title_canon_sha256":"729f6d6152a32af2d44fa1257bb6dd5eed46c6cd6c2e41ebc9afcd7655ba3888","abstract_canon_sha256":"a75c8fbd1914d6ac07fe63f7dd9d2fbdc0d6f0e0edc5c3397b6dee62f4378eed"},"schema_version":"1.0"},"canonical_sha256":"f8c5a465dfcc91ffe8ac8c9487e02c125c9ceb606d91a050061486588f269086","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:25:03.406708Z","signature_b64":"jTBcUhgY2l40NzsbFmiW3r+yyWrDKLBHdtk63eJAzdFry3Sv8cPpkCDAtAIv65LdStvj8AXoiJ9J67Yxiyp1AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f8c5a465dfcc91ffe8ac8c9487e02c125c9ceb606d91a050061486588f269086","last_reissued_at":"2026-05-18T00:25:03.406078Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:25:03.406078Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1801.08629","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:25:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5C4zvOiMTxUcgqGyR6pzw0bZAK5by/HqFuhhtIFP7RQ04F0R3VEikaEccNoVOqrs/4hpIwEwFPDx00K59bRNDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T20:06:45.001539Z"},"content_sha256":"c3e1482310270a598e55207a7d3606cc5f261046ee820120d7f88c94f74fc7c1","schema_version":"1.0","event_id":"sha256:c3e1482310270a598e55207a7d3606cc5f261046ee820120d7f88c94f74fc7c1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:7DC2IZO7ZSI772FMRSKIPYBMCJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Forecasting Suspicious Account Activity at Large-Scale Online Service Providers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Baris Coskun, Hassan Halawa, Konstantin Beznosov, Matei Ripeanu, Meizhu Liu","submitted_at":"2018-01-25T23:23:04Z","abstract_excerpt":"In the face of large-scale automated social engineering attacks to large online services, fast detection and remediation of compromised accounts are crucial to limit the spread of new attacks and to mitigate the overall damage to users, companies, and the public at large. We advocate a fully automated approach based on machine learning: we develop an early warning system that harnesses account activity traces to predict which accounts are likely to be compromised in the future and generate suspicious activity. We hypothesize that this early warning is key for a more timely detection of comprom"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1801.08629","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:25:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5dWs15iGxQeD0XqjWpq8MzKTGH/pNA1dgMCeP4xedOTnIOTA9eXh0IIJJdxf4JLNuwH7v6dPKDur0Ap3qTHeAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T20:06:45.001922Z"},"content_sha256":"98166aa0d437e46045388c32b4d59bed4cc9edc1dc4662b3a23d3df8751dc45c","schema_version":"1.0","event_id":"sha256:98166aa0d437e46045388c32b4d59bed4cc9edc1dc4662b3a23d3df8751dc45c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/bundle.json","state_url":"https://pith.science/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T20:06:45Z","links":{"resolver":"https://pith.science/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ","bundle":"https://pith.science/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/bundle.json","state":"https://pith.science/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7DC2IZO7ZSI772FMRSKIPYBMCJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:7DC2IZO7ZSI772FMRSKIPYBMCJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a75c8fbd1914d6ac07fe63f7dd9d2fbdc0d6f0e0edc5c3397b6dee62f4378eed","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-01-25T23:23:04Z","title_canon_sha256":"729f6d6152a32af2d44fa1257bb6dd5eed46c6cd6c2e41ebc9afcd7655ba3888"},"schema_version":"1.0","source":{"id":"1801.08629","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1801.08629","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"arxiv_version","alias_value":"1801.08629v1","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1801.08629","created_at":"2026-05-18T00:25:03Z"},{"alias_kind":"pith_short_12","alias_value":"7DC2IZO7ZSI7","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_16","alias_value":"7DC2IZO7ZSI772FM","created_at":"2026-05-18T12:32:11Z"},{"alias_kind":"pith_short_8","alias_value":"7DC2IZO7","created_at":"2026-05-18T12:32:11Z"}],"graph_snapshots":[{"event_id":"sha256:98166aa0d437e46045388c32b4d59bed4cc9edc1dc4662b3a23d3df8751dc45c","target":"graph","created_at":"2026-05-18T00:25:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In the face of large-scale automated social engineering attacks to large online services, fast detection and remediation of compromised accounts are crucial to limit the spread of new attacks and to mitigate the overall damage to users, companies, and the public at large. We advocate a fully automated approach based on machine learning: we develop an early warning system that harnesses account activity traces to predict which accounts are likely to be compromised in the future and generate suspicious activity. We hypothesize that this early warning is key for a more timely detection of comprom","authors_text":"Baris Coskun, Hassan Halawa, Konstantin Beznosov, Matei Ripeanu, Meizhu Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-01-25T23:23:04Z","title":"Forecasting Suspicious Account Activity at Large-Scale Online Service Providers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1801.08629","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c3e1482310270a598e55207a7d3606cc5f261046ee820120d7f88c94f74fc7c1","target":"record","created_at":"2026-05-18T00:25:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a75c8fbd1914d6ac07fe63f7dd9d2fbdc0d6f0e0edc5c3397b6dee62f4378eed","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-01-25T23:23:04Z","title_canon_sha256":"729f6d6152a32af2d44fa1257bb6dd5eed46c6cd6c2e41ebc9afcd7655ba3888"},"schema_version":"1.0","source":{"id":"1801.08629","kind":"arxiv","version":1}},"canonical_sha256":"f8c5a465dfcc91ffe8ac8c9487e02c125c9ceb606d91a050061486588f269086","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f8c5a465dfcc91ffe8ac8c9487e02c125c9ceb606d91a050061486588f269086","first_computed_at":"2026-05-18T00:25:03.406078Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:25:03.406078Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jTBcUhgY2l40NzsbFmiW3r+yyWrDKLBHdtk63eJAzdFry3Sv8cPpkCDAtAIv65LdStvj8AXoiJ9J67Yxiyp1AQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:25:03.406708Z","signed_message":"canonical_sha256_bytes"},"source_id":"1801.08629","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c3e1482310270a598e55207a7d3606cc5f261046ee820120d7f88c94f74fc7c1","sha256:98166aa0d437e46045388c32b4d59bed4cc9edc1dc4662b3a23d3df8751dc45c"],"state_sha256":"f3bc8568018327df52f96a4cba2a5523f6df66b6361f7186851ba30d53457330"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W9XilSGS3K2GiK5ESYv5nlOkkGgnfmcqu5C72FExZtKopAeC6MIBJrVpuNq7tPz2K4K/mgOgU99KpCwC1FJADg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T20:06:45.005399Z","bundle_sha256":"3a9d4b0b3387635689352e4d02da367b42d1d8e91983ce2395fad2e4f4a876a5"}}