{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2013:A7WP5VGKX7IMJYZCKVOHKPDVPD","short_pith_number":"pith:A7WP5VGK","canonical_record":{"source":{"id":"1309.4844","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2013-09-19T03:09:33Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"651db2b45eb398d6b4bae4a2b6f0a0f1fa5b19def781624ca5fb34487bb7b6dd","abstract_canon_sha256":"2fb7f1b190312d09ef505d2cdeb0ebdc1caaef53e4d6517a8a2eda88b48d8a4d"},"schema_version":"1.0"},"canonical_sha256":"07ecfed4cabfd0c4e322555c753c7578d2cbb4220f803df8dfe99b514d8263ee","source":{"kind":"arxiv","id":"1309.4844","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1309.4844","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"arxiv_version","alias_value":"1309.4844v1","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1309.4844","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"pith_short_12","alias_value":"A7WP5VGKX7IM","created_at":"2026-05-18T12:27:38Z"},{"alias_kind":"pith_short_16","alias_value":"A7WP5VGKX7IMJYZC","created_at":"2026-05-18T12:27:38Z"},{"alias_kind":"pith_short_8","alias_value":"A7WP5VGK","created_at":"2026-05-18T12:27:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2013:A7WP5VGKX7IMJYZCKVOHKPDVPD","target":"record","payload":{"canonical_record":{"source":{"id":"1309.4844","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2013-09-19T03:09:33Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"651db2b45eb398d6b4bae4a2b6f0a0f1fa5b19def781624ca5fb34487bb7b6dd","abstract_canon_sha256":"2fb7f1b190312d09ef505d2cdeb0ebdc1caaef53e4d6517a8a2eda88b48d8a4d"},"schema_version":"1.0"},"canonical_sha256":"07ecfed4cabfd0c4e322555c753c7578d2cbb4220f803df8dfe99b514d8263ee","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:12:57.177145Z","signature_b64":"5OUPpHXRAftQGZeshPn6GOV/FryqzwHA0sw32w7aguoGs3HVzj3LahM8ZQGdAGb9jmH+b48q+BNG5f/BdFtECQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"07ecfed4cabfd0c4e322555c753c7578d2cbb4220f803df8dfe99b514d8263ee","last_reissued_at":"2026-05-18T03:12:57.176250Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:12:57.176250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1309.4844","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:12:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zM4IyLMkMcRNIwau6rpP76/rbV4YwM2Myb5J/vvSbaHscF76PEiX0+bermCb8A/q4aeyxQE79yW/Ey28IS4kDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T14:28:16.908270Z"},"content_sha256":"4c6110d5413886c28fd37b8ed9975327b9077ed92bbc69a3c771693dc2373437","schema_version":"1.0","event_id":"sha256:4c6110d5413886c28fd37b8ed9975327b9077ed92bbc69a3c771693dc2373437"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2013:A7WP5VGKX7IMJYZCKVOHKPDVPD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Network Anomaly Detection: A Survey and Comparative Analysis of Stochastic and Deterministic Methods","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG","cs.NI"],"primary_cat":"stat.ML","authors_text":"Christos G. Cassandras, Daniel Rossell, Ioannis Ch. Paschalidis, Jing Wang","submitted_at":"2013-09-19T03:09:33Z","abstract_excerpt":"We present five methods to the problem of network anomaly detection. These methods cover most of the common techniques in the anomaly detection field, including Statistical Hypothesis Tests (SHT), Support Vector Machines (SVM) and clustering analysis. We evaluate all methods in a simulated network that consists of nominal data, three flow-level anomalies and one packet-level attack. Through analyzing the results, we point out the advantages and disadvantages of each method and conclude that combining the results of the individual methods can yield improved anomaly detection results."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1309.4844","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:12:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z+jXmRSmpIG4l0JLKLye45ScdT0gnc1o+LjCmk4g5BiwFJugV3ahEUeoqRVySXlKkw9yTELVYfQTaQbT36P/Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T14:28:16.908952Z"},"content_sha256":"0b0b6518c3d5d5b8b7c6f07afb5352a757a97b96d53f2ce69950f489b98c630b","schema_version":"1.0","event_id":"sha256:0b0b6518c3d5d5b8b7c6f07afb5352a757a97b96d53f2ce69950f489b98c630b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/bundle.json","state_url":"https://pith.science/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T14:28:16Z","links":{"resolver":"https://pith.science/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD","bundle":"https://pith.science/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/bundle.json","state":"https://pith.science/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/A7WP5VGKX7IMJYZCKVOHKPDVPD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2013:A7WP5VGKX7IMJYZCKVOHKPDVPD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2fb7f1b190312d09ef505d2cdeb0ebdc1caaef53e4d6517a8a2eda88b48d8a4d","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2013-09-19T03:09:33Z","title_canon_sha256":"651db2b45eb398d6b4bae4a2b6f0a0f1fa5b19def781624ca5fb34487bb7b6dd"},"schema_version":"1.0","source":{"id":"1309.4844","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1309.4844","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"arxiv_version","alias_value":"1309.4844v1","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1309.4844","created_at":"2026-05-18T03:12:57Z"},{"alias_kind":"pith_short_12","alias_value":"A7WP5VGKX7IM","created_at":"2026-05-18T12:27:38Z"},{"alias_kind":"pith_short_16","alias_value":"A7WP5VGKX7IMJYZC","created_at":"2026-05-18T12:27:38Z"},{"alias_kind":"pith_short_8","alias_value":"A7WP5VGK","created_at":"2026-05-18T12:27:38Z"}],"graph_snapshots":[{"event_id":"sha256:0b0b6518c3d5d5b8b7c6f07afb5352a757a97b96d53f2ce69950f489b98c630b","target":"graph","created_at":"2026-05-18T03:12:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We present five methods to the problem of network anomaly detection. These methods cover most of the common techniques in the anomaly detection field, including Statistical Hypothesis Tests (SHT), Support Vector Machines (SVM) and clustering analysis. We evaluate all methods in a simulated network that consists of nominal data, three flow-level anomalies and one packet-level attack. Through analyzing the results, we point out the advantages and disadvantages of each method and conclude that combining the results of the individual methods can yield improved anomaly detection results.","authors_text":"Christos G. Cassandras, Daniel Rossell, Ioannis Ch. Paschalidis, Jing Wang","cross_cats":["cs.LG","cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2013-09-19T03:09:33Z","title":"Network Anomaly Detection: A Survey and Comparative Analysis of Stochastic and Deterministic Methods"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1309.4844","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4c6110d5413886c28fd37b8ed9975327b9077ed92bbc69a3c771693dc2373437","target":"record","created_at":"2026-05-18T03:12:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2fb7f1b190312d09ef505d2cdeb0ebdc1caaef53e4d6517a8a2eda88b48d8a4d","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2013-09-19T03:09:33Z","title_canon_sha256":"651db2b45eb398d6b4bae4a2b6f0a0f1fa5b19def781624ca5fb34487bb7b6dd"},"schema_version":"1.0","source":{"id":"1309.4844","kind":"arxiv","version":1}},"canonical_sha256":"07ecfed4cabfd0c4e322555c753c7578d2cbb4220f803df8dfe99b514d8263ee","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"07ecfed4cabfd0c4e322555c753c7578d2cbb4220f803df8dfe99b514d8263ee","first_computed_at":"2026-05-18T03:12:57.176250Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:12:57.176250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5OUPpHXRAftQGZeshPn6GOV/FryqzwHA0sw32w7aguoGs3HVzj3LahM8ZQGdAGb9jmH+b48q+BNG5f/BdFtECQ==","signature_status":"signed_v1","signed_at":"2026-05-18T03:12:57.177145Z","signed_message":"canonical_sha256_bytes"},"source_id":"1309.4844","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4c6110d5413886c28fd37b8ed9975327b9077ed92bbc69a3c771693dc2373437","sha256:0b0b6518c3d5d5b8b7c6f07afb5352a757a97b96d53f2ce69950f489b98c630b"],"state_sha256":"af5c148733199a4bd96bbfdc3d4e14c60eb5e87d7d587af76654a52d3747028c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5cd+LbjNEt/vomPcBAS5O+aQt7fHVnvD/xrP6VyaNBeVdmV4KIo79SDs1LD8ZzvCwxnEFFkHzoe5BGpbEK7wAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T14:28:16.911281Z","bundle_sha256":"7ffd239201f122068a352340c32ce4e4a78b71c97acd10a97a64f42f3a30e39b"}}