{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:DAZX4ZYUJFJXLDBP5FHYXKJK2M","short_pith_number":"pith:DAZX4ZYU","canonical_record":{"source":{"id":"2605.22621","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-21T15:31:10Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"eb78104ea05a7eccbb7276fcd38bce2ddb58c9b950ab4563884061d8ce1215c5","abstract_canon_sha256":"36f39f1c6b68b38dd3cb5eef25395ed1e39d5fd79c5530c66b4e27d82539391a"},"schema_version":"1.0"},"canonical_sha256":"18337e67144953758c2fe94f8ba92ad338aa88727ec9e6f699c11463450b2d7b","source":{"kind":"arxiv","id":"2605.22621","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.22621","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"arxiv_version","alias_value":"2605.22621v1","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.22621","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_12","alias_value":"DAZX4ZYUJFJX","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_16","alias_value":"DAZX4ZYUJFJXLDBP","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_8","alias_value":"DAZX4ZYU","created_at":"2026-05-22T01:05:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:DAZX4ZYUJFJXLDBP5FHYXKJK2M","target":"record","payload":{"canonical_record":{"source":{"id":"2605.22621","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-21T15:31:10Z","cross_cats_sorted":["cs.LG","cs.NI"],"title_canon_sha256":"eb78104ea05a7eccbb7276fcd38bce2ddb58c9b950ab4563884061d8ce1215c5","abstract_canon_sha256":"36f39f1c6b68b38dd3cb5eef25395ed1e39d5fd79c5530c66b4e27d82539391a"},"schema_version":"1.0"},"canonical_sha256":"18337e67144953758c2fe94f8ba92ad338aa88727ec9e6f699c11463450b2d7b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-22T01:05:00.906547Z","signature_b64":"5NJN6DnCQ+VY5T9g0sqNjZ9LF3lKuOUHGI5SG/HPlANQnVhTSgKulcENxmQ64xeGZUwJgLMvnYfiVffG625KCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"18337e67144953758c2fe94f8ba92ad338aa88727ec9e6f699c11463450b2d7b","last_reissued_at":"2026-05-22T01:05:00.905743Z","signature_status":"signed_v1","first_computed_at":"2026-05-22T01:05:00.905743Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.22621","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T01:05:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N9GI/cgzqEOWGQIyXVAe4vdgX309FAxQHkOAVQMtaNoczUI4xb3QZdDYBZDctHAJ10SgVyR1Gg3AcT0dH581DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T09:54:23.825982Z"},"content_sha256":"4c244d75b8cd9d5348c4d21a8850ecdd592d531b5bdca40ebddff739116ee5fb","schema_version":"1.0","event_id":"sha256:4c244d75b8cd9d5348c4d21a8850ecdd592d531b5bdca40ebddff739116ee5fb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:DAZX4ZYUJFJXLDBP5FHYXKJK2M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"UNAD+: An Explainable Hybrid Framework for Unknown Network Attack Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG","cs.NI"],"primary_cat":"cs.CR","authors_text":"Frederic Stahl, Saif Alzubi","submitted_at":"2026-05-21T15:31:10Z","abstract_excerpt":"The detection of previously unseen network attacks remains a major challenge for intrusion detection systems. Although supervised learning methods often perform well on known attack classes, they are limited when new attack types are not represented in the training data. Unsupervised methods are more suitable for detecting zero-day attacks, as they do not require labelled attack samples, but they often suffer from high false positive rates, which limits their real-world usefulness. This paper presents UNAD+, an enhanced framework for unknown network attack detection derived from the previously"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.22621","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.22621/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-22T01:05:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JfRIOuYJm0JyNjLF8gOtthETthgquBcECGL51JgcAefxmy1fgET3V4R21oQMATYKnVs/8Jc72PlBRuvme0WLCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T09:54:23.826825Z"},"content_sha256":"c6aac59513ef23d4d9f6ed291e20a6cfb7a1d3254256313200e6fd950d86627e","schema_version":"1.0","event_id":"sha256:c6aac59513ef23d4d9f6ed291e20a6cfb7a1d3254256313200e6fd950d86627e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/bundle.json","state_url":"https://pith.science/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T09:54:23Z","links":{"resolver":"https://pith.science/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M","bundle":"https://pith.science/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/bundle.json","state":"https://pith.science/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DAZX4ZYUJFJXLDBP5FHYXKJK2M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:DAZX4ZYUJFJXLDBP5FHYXKJK2M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36f39f1c6b68b38dd3cb5eef25395ed1e39d5fd79c5530c66b4e27d82539391a","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-21T15:31:10Z","title_canon_sha256":"eb78104ea05a7eccbb7276fcd38bce2ddb58c9b950ab4563884061d8ce1215c5"},"schema_version":"1.0","source":{"id":"2605.22621","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.22621","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"arxiv_version","alias_value":"2605.22621v1","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.22621","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_12","alias_value":"DAZX4ZYUJFJX","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_16","alias_value":"DAZX4ZYUJFJXLDBP","created_at":"2026-05-22T01:05:00Z"},{"alias_kind":"pith_short_8","alias_value":"DAZX4ZYU","created_at":"2026-05-22T01:05:00Z"}],"graph_snapshots":[{"event_id":"sha256:c6aac59513ef23d4d9f6ed291e20a6cfb7a1d3254256313200e6fd950d86627e","target":"graph","created_at":"2026-05-22T01:05:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.22621/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The detection of previously unseen network attacks remains a major challenge for intrusion detection systems. Although supervised learning methods often perform well on known attack classes, they are limited when new attack types are not represented in the training data. Unsupervised methods are more suitable for detecting zero-day attacks, as they do not require labelled attack samples, but they often suffer from high false positive rates, which limits their real-world usefulness. This paper presents UNAD+, an enhanced framework for unknown network attack detection derived from the previously","authors_text":"Frederic Stahl, Saif Alzubi","cross_cats":["cs.LG","cs.NI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-21T15:31:10Z","title":"UNAD+: An Explainable Hybrid Framework for Unknown Network Attack Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.22621","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4c244d75b8cd9d5348c4d21a8850ecdd592d531b5bdca40ebddff739116ee5fb","target":"record","created_at":"2026-05-22T01:05:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36f39f1c6b68b38dd3cb5eef25395ed1e39d5fd79c5530c66b4e27d82539391a","cross_cats_sorted":["cs.LG","cs.NI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-21T15:31:10Z","title_canon_sha256":"eb78104ea05a7eccbb7276fcd38bce2ddb58c9b950ab4563884061d8ce1215c5"},"schema_version":"1.0","source":{"id":"2605.22621","kind":"arxiv","version":1}},"canonical_sha256":"18337e67144953758c2fe94f8ba92ad338aa88727ec9e6f699c11463450b2d7b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"18337e67144953758c2fe94f8ba92ad338aa88727ec9e6f699c11463450b2d7b","first_computed_at":"2026-05-22T01:05:00.905743Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-22T01:05:00.905743Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5NJN6DnCQ+VY5T9g0sqNjZ9LF3lKuOUHGI5SG/HPlANQnVhTSgKulcENxmQ64xeGZUwJgLMvnYfiVffG625KCQ==","signature_status":"signed_v1","signed_at":"2026-05-22T01:05:00.906547Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.22621","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4c244d75b8cd9d5348c4d21a8850ecdd592d531b5bdca40ebddff739116ee5fb","sha256:c6aac59513ef23d4d9f6ed291e20a6cfb7a1d3254256313200e6fd950d86627e"],"state_sha256":"3904c5717fd9838f0723c574798253dba4f2994e5dc8823b0c6f22163708ef32"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9xrhtbsbAhfCwhk2lLuC1JfwRnvplOUpt/DTI3FEPUVzpduAGuQqudgQLXagaunS3RLzMJTDLnsqUHSGCrqiCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T09:54:23.831094Z","bundle_sha256":"62ca4f3e1d53e23b3c473b6dbeaf41e35cb2d575d13828d6f76448dda573f61a"}}