{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:7GHUJN2AWLDTQ3DRTAWBUFLKQK","short_pith_number":"pith:7GHUJN2A","canonical_record":{"source":{"id":"2607.14832","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2026-07-16T10:51:44Z","cross_cats_sorted":[],"title_canon_sha256":"259e81417d867aebaaa93c8671b66c1de160249e59cc74fe4f516a3bf17e36f2","abstract_canon_sha256":"73664808c60e2d44473066af59f3d2b9aaf31f7c97289c24ec9b294e1db9d3d3"},"schema_version":"1.0"},"canonical_sha256":"f98f44b740b2c7386c71982c1a156a82aba16fc98aee4536046bc9d35b801a3f","source":{"kind":"arxiv","id":"2607.14832","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.14832","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.14832v1","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.14832","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_12","alias_value":"7GHUJN2AWLDT","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_16","alias_value":"7GHUJN2AWLDTQ3DR","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_8","alias_value":"7GHUJN2A","created_at":"2026-07-17T01:21:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:7GHUJN2AWLDTQ3DRTAWBUFLKQK","target":"record","payload":{"canonical_record":{"source":{"id":"2607.14832","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2026-07-16T10:51:44Z","cross_cats_sorted":[],"title_canon_sha256":"259e81417d867aebaaa93c8671b66c1de160249e59cc74fe4f516a3bf17e36f2","abstract_canon_sha256":"73664808c60e2d44473066af59f3d2b9aaf31f7c97289c24ec9b294e1db9d3d3"},"schema_version":"1.0"},"canonical_sha256":"f98f44b740b2c7386c71982c1a156a82aba16fc98aee4536046bc9d35b801a3f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-17T01:21:33.404333Z","signature_b64":"UsSnDwVEfjLweCso1oRdVIaOiKeWEcy+C1FkEgEKzXUTTzJkHDidKOzD8kIiZUSNtuhyomZjgZgfwZUJU1WHDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f98f44b740b2c7386c71982c1a156a82aba16fc98aee4536046bc9d35b801a3f","last_reissued_at":"2026-07-17T01:21:33.403474Z","signature_status":"signed_v1","first_computed_at":"2026-07-17T01:21:33.403474Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.14832","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:21:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iOifvqLV0gg071AFcoeKzdTCd2cdEdV5UwVOC+UsRfbsgJR1Qw8V9KTMRFukvJ7uJwgieUNhkijic0LNaB2HAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:12:52.112141Z"},"content_sha256":"8ff58389b1e6e94da51abdb8f4f3053d8ea43cd84b00dc9c0916de1abc8f53aa","schema_version":"1.0","event_id":"sha256:8ff58389b1e6e94da51abdb8f4f3053d8ea43cd84b00dc9c0916de1abc8f53aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:7GHUJN2AWLDTQ3DRTAWBUFLKQK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Spoofer or Spoofers? Estimating a Lower Bound on the Number of DRDoS Sources Using Anycast Honeypots","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Bas Palinckx, Bernhard Degen, Mattijs Jonker, Raffaele Sommese, Roland van Rijswijk-Deij","submitted_at":"2026-07-16T10:51:44Z","abstract_excerpt":"DDoS attacks remain a significant threat, with distributed reflection denial-of-service (DRDoS) attacks being particularly difficult to trace back to their sources. To better understand attacker behavior and deployment patterns, we present a novel approach for estimating a lower bound on the number of networks involved in generating spoofed traffic. Our approach leverages a global deployment of anycast amplification honeypots that attract requests from topologically nearby sources. Using this infrastructure, we develop two estimators based on the set of honeypots receiving spoofed traffic and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.14832","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.14832/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-17T01:21:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CFQ5BKVmQhXaqltTCPJgHfQi4WXpbDYgOeGsNgHIU1wCHdKpNicKqHCbBuIoRd9fhWmcDy6KUi87aE+WhcSpDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:12:52.112972Z"},"content_sha256":"8eb6543281a3d1bb92eddec962cfc7666292872bf38bed55e1b17d7e79f69184","schema_version":"1.0","event_id":"sha256:8eb6543281a3d1bb92eddec962cfc7666292872bf38bed55e1b17d7e79f69184"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/bundle.json","state_url":"https://pith.science/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:12:52Z","links":{"resolver":"https://pith.science/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK","bundle":"https://pith.science/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/bundle.json","state":"https://pith.science/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7GHUJN2AWLDTQ3DRTAWBUFLKQK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:7GHUJN2AWLDTQ3DRTAWBUFLKQK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"73664808c60e2d44473066af59f3d2b9aaf31f7c97289c24ec9b294e1db9d3d3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2026-07-16T10:51:44Z","title_canon_sha256":"259e81417d867aebaaa93c8671b66c1de160249e59cc74fe4f516a3bf17e36f2"},"schema_version":"1.0","source":{"id":"2607.14832","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.14832","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"arxiv_version","alias_value":"2607.14832v1","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.14832","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_12","alias_value":"7GHUJN2AWLDT","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_16","alias_value":"7GHUJN2AWLDTQ3DR","created_at":"2026-07-17T01:21:33Z"},{"alias_kind":"pith_short_8","alias_value":"7GHUJN2A","created_at":"2026-07-17T01:21:33Z"}],"graph_snapshots":[{"event_id":"sha256:8eb6543281a3d1bb92eddec962cfc7666292872bf38bed55e1b17d7e79f69184","target":"graph","created_at":"2026-07-17T01:21:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.14832/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DDoS attacks remain a significant threat, with distributed reflection denial-of-service (DRDoS) attacks being particularly difficult to trace back to their sources. To better understand attacker behavior and deployment patterns, we present a novel approach for estimating a lower bound on the number of networks involved in generating spoofed traffic. Our approach leverages a global deployment of anycast amplification honeypots that attract requests from topologically nearby sources. Using this infrastructure, we develop two estimators based on the set of honeypots receiving spoofed traffic and ","authors_text":"Bas Palinckx, Bernhard Degen, Mattijs Jonker, Raffaele Sommese, Roland van Rijswijk-Deij","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2026-07-16T10:51:44Z","title":"Spoofer or Spoofers? Estimating a Lower Bound on the Number of DRDoS Sources Using Anycast Honeypots"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.14832","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8ff58389b1e6e94da51abdb8f4f3053d8ea43cd84b00dc9c0916de1abc8f53aa","target":"record","created_at":"2026-07-17T01:21:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"73664808c60e2d44473066af59f3d2b9aaf31f7c97289c24ec9b294e1db9d3d3","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.NI","submitted_at":"2026-07-16T10:51:44Z","title_canon_sha256":"259e81417d867aebaaa93c8671b66c1de160249e59cc74fe4f516a3bf17e36f2"},"schema_version":"1.0","source":{"id":"2607.14832","kind":"arxiv","version":1}},"canonical_sha256":"f98f44b740b2c7386c71982c1a156a82aba16fc98aee4536046bc9d35b801a3f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f98f44b740b2c7386c71982c1a156a82aba16fc98aee4536046bc9d35b801a3f","first_computed_at":"2026-07-17T01:21:33.403474Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-17T01:21:33.403474Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UsSnDwVEfjLweCso1oRdVIaOiKeWEcy+C1FkEgEKzXUTTzJkHDidKOzD8kIiZUSNtuhyomZjgZgfwZUJU1WHDw==","signature_status":"signed_v1","signed_at":"2026-07-17T01:21:33.404333Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.14832","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8ff58389b1e6e94da51abdb8f4f3053d8ea43cd84b00dc9c0916de1abc8f53aa","sha256:8eb6543281a3d1bb92eddec962cfc7666292872bf38bed55e1b17d7e79f69184"],"state_sha256":"7c18fbc5bab56e069e751f37c85b5941d6a1185985a8948c11d12c2e0f6e989d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AkC+OUGaq5bJ2TTAdnkCUb0MJfiYVFrkhDTwUk6INNoXAUk1ND0gsY+EPQKRcCTGMqBm8lmOQux7cowb9YZvCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:12:52.121019Z","bundle_sha256":"b577f8fb701bc5bb684d995afd3a7b575b118df434efcb0e51c57168a2df0682"}}