{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:FOB6LJXUP2PKHD46NCBBVZPQVM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"750a0934eea2b1a61be37edb03dc687aab3ed9c48efb02b893f1c2b5c1c27ec0","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-08T13:26:11Z","title_canon_sha256":"9f61b8ffddc12faf2ba8881c8076919b286d8f61c2688e3145c83d05fffc0e8d"},"schema_version":"1.0","source":{"id":"1612.02636","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1612.02636","created_at":"2026-05-18T00:55:33Z"},{"alias_kind":"arxiv_version","alias_value":"1612.02636v1","created_at":"2026-05-18T00:55:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1612.02636","created_at":"2026-05-18T00:55:33Z"},{"alias_kind":"pith_short_12","alias_value":"FOB6LJXUP2PK","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"FOB6LJXUP2PKHD46","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"FOB6LJXU","created_at":"2026-05-18T12:30:15Z"}],"graph_snapshots":[{"event_id":"sha256:4dc18aeb9eacc5b00c540095f428f6b261edd4775e9e0c36a7d733d1005d7a47","target":"graph","created_at":"2026-05-18T00:55:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Motivated by a recent new type of randomized Distributed Denial of Service (DDoS) attacks on the Domain Name Service (DNS), we develop novel and efficient distinct heavy hitters algorithms and build an attack identification system that uses our algorithms. Heavy hitter detection in streams is a fundamental problem with many applications, including detecting certain DDoS attacks and anomalies. A (classic) heavy hitter (HH) in a stream of elements is a key (e.g., the domain of a query) which appears in many elements (e.g., requests). When stream elements consist of a <key; subkey> pairs, (<domai","authors_text":"Anat Bremler-Barr, Edith Cohen, Michal Shagam, Shir Landau Feibish, Yehuda Afek","cross_cats":["cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-08T13:26:11Z","title":"Efficient Distinct Heavy Hitters for DNS DDoS Attack Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1612.02636","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:18edaffba9f215435dd6e45d4c16b6c6a3927e76582959b9279b976e22be7899","target":"record","created_at":"2026-05-18T00:55:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"750a0934eea2b1a61be37edb03dc687aab3ed9c48efb02b893f1c2b5c1c27ec0","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-08T13:26:11Z","title_canon_sha256":"9f61b8ffddc12faf2ba8881c8076919b286d8f61c2688e3145c83d05fffc0e8d"},"schema_version":"1.0","source":{"id":"1612.02636","kind":"arxiv","version":1}},"canonical_sha256":"2b83e5a6f47e9ea38f9e68821ae5f0ab2f54eb524cdff91b1e58730fea517a77","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2b83e5a6f47e9ea38f9e68821ae5f0ab2f54eb524cdff91b1e58730fea517a77","first_computed_at":"2026-05-18T00:55:33.207747Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:55:33.207747Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ISukc8c8DPIy4fdJkzF70rWcSFpL/2tlAagVKjfvys2gdUBk3+Z0TApV2wpQc986Kjhaw3+U+gOQagL+4172BA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:55:33.208169Z","signed_message":"canonical_sha256_bytes"},"source_id":"1612.02636","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:18edaffba9f215435dd6e45d4c16b6c6a3927e76582959b9279b976e22be7899","sha256:4dc18aeb9eacc5b00c540095f428f6b261edd4775e9e0c36a7d733d1005d7a47"],"state_sha256":"f788f759c0d0f3a9f4967d9ef1c95df028db073b84dd21e92be8e694dc55ca2c"}