{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:EDGWZLB4TWFTQCVW7TNWSIV7FG","short_pith_number":"pith:EDGWZLB4","canonical_record":{"source":{"id":"2307.09002","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-18T06:38:20Z","cross_cats_sorted":[],"title_canon_sha256":"ff03708b2bf001a6b0b53d63c94574a159e4f06d10236f33c7aa7e1a3a1cfd30","abstract_canon_sha256":"d8b5a4572b00cb59ccc71cbd6179ca6ea4eaf46dec0f9503a065aeb67d0eaf75"},"schema_version":"1.0"},"canonical_sha256":"20cd6cac3c9d8b380ab6fcdb6922bf29af4f276bca56f137b53c954a1e1f7352","source":{"kind":"arxiv","id":"2307.09002","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.09002","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"arxiv_version","alias_value":"2307.09002v1","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.09002","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_12","alias_value":"EDGWZLB4TWFT","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_16","alias_value":"EDGWZLB4TWFTQCVW","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_8","alias_value":"EDGWZLB4","created_at":"2026-07-05T06:31:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:EDGWZLB4TWFTQCVW7TNWSIV7FG","target":"record","payload":{"canonical_record":{"source":{"id":"2307.09002","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-18T06:38:20Z","cross_cats_sorted":[],"title_canon_sha256":"ff03708b2bf001a6b0b53d63c94574a159e4f06d10236f33c7aa7e1a3a1cfd30","abstract_canon_sha256":"d8b5a4572b00cb59ccc71cbd6179ca6ea4eaf46dec0f9503a065aeb67d0eaf75"},"schema_version":"1.0"},"canonical_sha256":"20cd6cac3c9d8b380ab6fcdb6922bf29af4f276bca56f137b53c954a1e1f7352","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:31:37.616370Z","signature_b64":"RgEVE9SGLvZAz8EYWqTnvqeAXaFCN5Yx0eMfvm/yrGCV/Z0HrJn8LW0gjlCGhLOp40XGhRBkk85BfYDQI7+wCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"20cd6cac3c9d8b380ab6fcdb6922bf29af4f276bca56f137b53c954a1e1f7352","last_reissued_at":"2026-07-05T06:31:37.615945Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:31:37.615945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.09002","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RPDVaV8kPSzRujFWeiOkbWXxNV7AjGMIX7mJhW2mrpX74ifnp/TJ+/hNtetNSbUI2Cca5pUHVXjXNLIF9PaiDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:32:57.368021Z"},"content_sha256":"6795d1eb8063e01a55d869565d7348870acf538ba6b563d2f427a1eb60f1043a","schema_version":"1.0","event_id":"sha256:6795d1eb8063e01a55d869565d7348870acf538ba6b563d2f427a1eb60f1043a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:EDGWZLB4TWFTQCVW7TNWSIV7FG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"CBSeq: A Channel-level Behavior Sequence For Encrypted Malware Traffic Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Bo Jiang, Cong Dong, Meng Shen, Susu Cui, Yuling Liu, Zhigang Lu","submitted_at":"2023-07-18T06:38:20Z","abstract_excerpt":"Machine learning and neural networks have become increasingly popular solutions for encrypted malware traffic detection. They mine and learn complex traffic patterns, enabling detection by fitting boundaries between malware traffic and benign traffic. Compared with signature-based methods, they have higher scalability and flexibility. However, affected by the frequent variants and updates of malware, current methods suffer from a high false positive rate and do not work well for unknown malware traffic detection. It remains a critical task to achieve effective malware traffic detection. In thi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.09002","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.09002/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:31:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fj0T+b7hF7rcXkw5769r1V4383mlnZJYU8KtHDFe27WsbRIux2kgfA7+izu88v4tsFPwp7Pp8BI1nIM/sBu4Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:32:57.368540Z"},"content_sha256":"2fa22121fa14d4f56a00060ad7cc9a2d3e0c79a98eeb48ff30614f57a7f6afd3","schema_version":"1.0","event_id":"sha256:2fa22121fa14d4f56a00060ad7cc9a2d3e0c79a98eeb48ff30614f57a7f6afd3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/bundle.json","state_url":"https://pith.science/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T17:32:57Z","links":{"resolver":"https://pith.science/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG","bundle":"https://pith.science/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/bundle.json","state":"https://pith.science/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EDGWZLB4TWFTQCVW7TNWSIV7FG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:EDGWZLB4TWFTQCVW7TNWSIV7FG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d8b5a4572b00cb59ccc71cbd6179ca6ea4eaf46dec0f9503a065aeb67d0eaf75","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-18T06:38:20Z","title_canon_sha256":"ff03708b2bf001a6b0b53d63c94574a159e4f06d10236f33c7aa7e1a3a1cfd30"},"schema_version":"1.0","source":{"id":"2307.09002","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.09002","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"arxiv_version","alias_value":"2307.09002v1","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.09002","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_12","alias_value":"EDGWZLB4TWFT","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_16","alias_value":"EDGWZLB4TWFTQCVW","created_at":"2026-07-05T06:31:37Z"},{"alias_kind":"pith_short_8","alias_value":"EDGWZLB4","created_at":"2026-07-05T06:31:37Z"}],"graph_snapshots":[{"event_id":"sha256:2fa22121fa14d4f56a00060ad7cc9a2d3e0c79a98eeb48ff30614f57a7f6afd3","target":"graph","created_at":"2026-07-05T06:31:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.09002/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning and neural networks have become increasingly popular solutions for encrypted malware traffic detection. They mine and learn complex traffic patterns, enabling detection by fitting boundaries between malware traffic and benign traffic. Compared with signature-based methods, they have higher scalability and flexibility. However, affected by the frequent variants and updates of malware, current methods suffer from a high false positive rate and do not work well for unknown malware traffic detection. It remains a critical task to achieve effective malware traffic detection. In thi","authors_text":"Bo Jiang, Cong Dong, Meng Shen, Susu Cui, Yuling Liu, Zhigang Lu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-18T06:38:20Z","title":"CBSeq: A Channel-level Behavior Sequence For Encrypted Malware Traffic Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.09002","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6795d1eb8063e01a55d869565d7348870acf538ba6b563d2f427a1eb60f1043a","target":"record","created_at":"2026-07-05T06:31:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d8b5a4572b00cb59ccc71cbd6179ca6ea4eaf46dec0f9503a065aeb67d0eaf75","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-07-18T06:38:20Z","title_canon_sha256":"ff03708b2bf001a6b0b53d63c94574a159e4f06d10236f33c7aa7e1a3a1cfd30"},"schema_version":"1.0","source":{"id":"2307.09002","kind":"arxiv","version":1}},"canonical_sha256":"20cd6cac3c9d8b380ab6fcdb6922bf29af4f276bca56f137b53c954a1e1f7352","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"20cd6cac3c9d8b380ab6fcdb6922bf29af4f276bca56f137b53c954a1e1f7352","first_computed_at":"2026-07-05T06:31:37.615945Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:31:37.615945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RgEVE9SGLvZAz8EYWqTnvqeAXaFCN5Yx0eMfvm/yrGCV/Z0HrJn8LW0gjlCGhLOp40XGhRBkk85BfYDQI7+wCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:31:37.616370Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.09002","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6795d1eb8063e01a55d869565d7348870acf538ba6b563d2f427a1eb60f1043a","sha256:2fa22121fa14d4f56a00060ad7cc9a2d3e0c79a98eeb48ff30614f57a7f6afd3"],"state_sha256":"b245f93bbdc73837edbefa9730e254877170f845203e9c9de55799f78403c84f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ltWFNGQypVA1LKKEBanYGQ/s35bHyr2LXF1bNDB/yS3L9d0PXBjDfa/+eODhI7tX7epOIFpK4ay21syE0u15Ag==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T17:32:57.372752Z","bundle_sha256":"f7066e75b4792b655eaa067a35304b03e6c1e6bd7e716b65c7a3fa7e41be580a"}}