{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:FWOEKVMNA53AIN3H2QXB4UKM5U","short_pith_number":"pith:FWOEKVMN","canonical_record":{"source":{"id":"1608.07679","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-27T08:24:18Z","cross_cats_sorted":[],"title_canon_sha256":"57f73ad9257fadb6503f82cfa01503ff0ff603678ee8f7d8e6d8d24fe25616cb","abstract_canon_sha256":"744412a621b6c81779a1e5225725e5b7aae62c767d448b353594b2130128ceef"},"schema_version":"1.0"},"canonical_sha256":"2d9c45558d0776043767d42e1e514ced0dca5bd7405b63c8e540513bcffc532d","source":{"kind":"arxiv","id":"1608.07679","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.07679","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"arxiv_version","alias_value":"1608.07679v1","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.07679","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"pith_short_12","alias_value":"FWOEKVMNA53A","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"FWOEKVMNA53AIN3H","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"FWOEKVMN","created_at":"2026-05-18T12:30:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:FWOEKVMNA53AIN3H2QXB4UKM5U","target":"record","payload":{"canonical_record":{"source":{"id":"1608.07679","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-27T08:24:18Z","cross_cats_sorted":[],"title_canon_sha256":"57f73ad9257fadb6503f82cfa01503ff0ff603678ee8f7d8e6d8d24fe25616cb","abstract_canon_sha256":"744412a621b6c81779a1e5225725e5b7aae62c767d448b353594b2130128ceef"},"schema_version":"1.0"},"canonical_sha256":"2d9c45558d0776043767d42e1e514ced0dca5bd7405b63c8e540513bcffc532d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:07:50.132646Z","signature_b64":"xlxJpa5pZseEeZiRL8ck4sDordrmWuHZsF8beaBk6Jmw2OkQ3MKuwXqZ3n89ikuuqEhlRr6HD2tsV3kK0aLEBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2d9c45558d0776043767d42e1e514ced0dca5bd7405b63c8e540513bcffc532d","last_reissued_at":"2026-05-18T01:07:50.132229Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:07:50.132229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1608.07679","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:07:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nJsZ1i6vWdV3AiHCH3ngMQ3MJkaGpkdNIyHxjhA7dGkSxtyJX88nlN8ErQP2ozefn7BNlWbX/VctencnsO/nBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:16:22.036133Z"},"content_sha256":"d62e223f6537b598d5950babe4d184f54e950621d6ec9e9f72215d913f86f261","schema_version":"1.0","event_id":"sha256:d62e223f6537b598d5950babe4d184f54e950621d6ec9e9f72215d913f86f261"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:FWOEKVMNA53AIN3H2QXB4UKM5U","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Passive Fingerprinting of SCADA in Critical Infrastructure Network without Deep Packet Inspection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jeong-Han Yun, Seungoh Choi, Sungho Jeon, Woo-Nyon Kim","submitted_at":"2016-08-27T08:24:18Z","abstract_excerpt":"We present the first technique of passive fingerprinting for Supervisory Control And Data Acquisition (SCADA) networks without Deep Packet Inspection (DPI) and experience on real environment. Unlike existing work, our method does not rely on the functions of a specific product or DPI of the SCADA protocol. Our inference method, which is based on the intrinsic characteristics of SCADA, first identifies the network port used for the SCADA protocol, then consecutively infers the field devices and master server. We evaluated the effectiveness of our method using two network traces collected from a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.07679","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:07:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"So9V6STHSNRMewfabjHmLarz9/6s6b+TF3ALu15BUI8gnlhi60vCozYrkKd7gaWrVNzNFvzuE4mM4yHFLjWICQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T22:16:22.036588Z"},"content_sha256":"07c5df0793f0bf62301ffcd3e67c406db97ade543fb411047105e0e1000243dc","schema_version":"1.0","event_id":"sha256:07c5df0793f0bf62301ffcd3e67c406db97ade543fb411047105e0e1000243dc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/bundle.json","state_url":"https://pith.science/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T22:16:22Z","links":{"resolver":"https://pith.science/pith/FWOEKVMNA53AIN3H2QXB4UKM5U","bundle":"https://pith.science/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/bundle.json","state":"https://pith.science/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FWOEKVMNA53AIN3H2QXB4UKM5U/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:FWOEKVMNA53AIN3H2QXB4UKM5U","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"744412a621b6c81779a1e5225725e5b7aae62c767d448b353594b2130128ceef","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-27T08:24:18Z","title_canon_sha256":"57f73ad9257fadb6503f82cfa01503ff0ff603678ee8f7d8e6d8d24fe25616cb"},"schema_version":"1.0","source":{"id":"1608.07679","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.07679","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"arxiv_version","alias_value":"1608.07679v1","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.07679","created_at":"2026-05-18T01:07:50Z"},{"alias_kind":"pith_short_12","alias_value":"FWOEKVMNA53A","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_16","alias_value":"FWOEKVMNA53AIN3H","created_at":"2026-05-18T12:30:15Z"},{"alias_kind":"pith_short_8","alias_value":"FWOEKVMN","created_at":"2026-05-18T12:30:15Z"}],"graph_snapshots":[{"event_id":"sha256:07c5df0793f0bf62301ffcd3e67c406db97ade543fb411047105e0e1000243dc","target":"graph","created_at":"2026-05-18T01:07:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We present the first technique of passive fingerprinting for Supervisory Control And Data Acquisition (SCADA) networks without Deep Packet Inspection (DPI) and experience on real environment. Unlike existing work, our method does not rely on the functions of a specific product or DPI of the SCADA protocol. Our inference method, which is based on the intrinsic characteristics of SCADA, first identifies the network port used for the SCADA protocol, then consecutively infers the field devices and master server. We evaluated the effectiveness of our method using two network traces collected from a","authors_text":"Jeong-Han Yun, Seungoh Choi, Sungho Jeon, Woo-Nyon Kim","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-27T08:24:18Z","title":"Passive Fingerprinting of SCADA in Critical Infrastructure Network without Deep Packet Inspection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.07679","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d62e223f6537b598d5950babe4d184f54e950621d6ec9e9f72215d913f86f261","target":"record","created_at":"2026-05-18T01:07:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"744412a621b6c81779a1e5225725e5b7aae62c767d448b353594b2130128ceef","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-08-27T08:24:18Z","title_canon_sha256":"57f73ad9257fadb6503f82cfa01503ff0ff603678ee8f7d8e6d8d24fe25616cb"},"schema_version":"1.0","source":{"id":"1608.07679","kind":"arxiv","version":1}},"canonical_sha256":"2d9c45558d0776043767d42e1e514ced0dca5bd7405b63c8e540513bcffc532d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2d9c45558d0776043767d42e1e514ced0dca5bd7405b63c8e540513bcffc532d","first_computed_at":"2026-05-18T01:07:50.132229Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:07:50.132229Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xlxJpa5pZseEeZiRL8ck4sDordrmWuHZsF8beaBk6Jmw2OkQ3MKuwXqZ3n89ikuuqEhlRr6HD2tsV3kK0aLEBg==","signature_status":"signed_v1","signed_at":"2026-05-18T01:07:50.132646Z","signed_message":"canonical_sha256_bytes"},"source_id":"1608.07679","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d62e223f6537b598d5950babe4d184f54e950621d6ec9e9f72215d913f86f261","sha256:07c5df0793f0bf62301ffcd3e67c406db97ade543fb411047105e0e1000243dc"],"state_sha256":"a74e4f071a98f5731bff4610272890ac1bae90933e20a501727bec2db08ee065"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XMGKnuqlej5FzirQlAqEC/pcdLnFwboPWwTq8uWHKkg0ZFQE+7VHMNTLms3U1REPfu67BjW0gHRxqkrsZuRGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T22:16:22.039972Z","bundle_sha256":"b987b9e4e1715fc2fce98452e5af649e4b2ae24b281167838f26533cefce942d"}}