{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:G6URY2VG2HEE3ZS6VKOO2EGB6A","short_pith_number":"pith:G6URY2VG","canonical_record":{"source":{"id":"2310.19658","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-30T15:40:34Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"689cb9dc262f8aabdfeb03156b846755eae62aa1ef847674c8e4ce070d8d5026","abstract_canon_sha256":"035ec00b8c86810bd5eacf0bf5ec9efc2a4dc9329f62cb3176f2206e171624ec"},"schema_version":"1.0"},"canonical_sha256":"37a91c6aa6d1c84de65eaa9ced10c1f0351590c2174ad82d3541dcbf8bfe5af3","source":{"kind":"arxiv","id":"2310.19658","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.19658","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"arxiv_version","alias_value":"2310.19658v1","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.19658","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_12","alias_value":"G6URY2VG2HEE","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_16","alias_value":"G6URY2VG2HEE3ZS6","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_8","alias_value":"G6URY2VG","created_at":"2026-07-05T07:06:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:G6URY2VG2HEE3ZS6VKOO2EGB6A","target":"record","payload":{"canonical_record":{"source":{"id":"2310.19658","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-30T15:40:34Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"689cb9dc262f8aabdfeb03156b846755eae62aa1ef847674c8e4ce070d8d5026","abstract_canon_sha256":"035ec00b8c86810bd5eacf0bf5ec9efc2a4dc9329f62cb3176f2206e171624ec"},"schema_version":"1.0"},"canonical_sha256":"37a91c6aa6d1c84de65eaa9ced10c1f0351590c2174ad82d3541dcbf8bfe5af3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:53.503534Z","signature_b64":"PFbJxVvSxuY5cdS36qCFMk+wDdNl0L/t8oVajBQ/w1PW37Krdr/d3IEMhpAoprbZ0wwjF5G2ghT09c1mrdVKBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"37a91c6aa6d1c84de65eaa9ced10c1f0351590c2174ad82d3541dcbf8bfe5af3","last_reissued_at":"2026-07-05T07:06:53.503123Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:53.503123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.19658","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sX1R4bkQ8zg3DPR83EMnJWQxjpSHWhTPhK3BKyPYRI4mfwV8kYLfAKyuc8h0qDDxxONU4VBrAIX4U/mpyD9NBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T01:13:24.824372Z"},"content_sha256":"7215e3acb48e9faf108c01c6cc184d1f53fc2061f960559d1621c8395c7fc4aa","schema_version":"1.0","event_id":"sha256:7215e3acb48e9faf108c01c6cc184d1f53fc2061f960559d1621c8395c7fc4aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:G6URY2VG2HEE3ZS6VKOO2EGB6A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Explaining Tree Model Decisions in Natural Language for Network Intrusion Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CL","authors_text":"Gang Liu, John Flanagan, Meng Jiang, Noah Ziems","submitted_at":"2023-10-30T15:40:34Z","abstract_excerpt":"Network intrusion detection (NID) systems which leverage machine learning have been shown to have strong performance in practice when used to detect malicious network traffic. Decision trees in particular offer a strong balance between performance and simplicity, but require users of NID systems to have background knowledge in machine learning to interpret. In addition, they are unable to provide additional outside information as to why certain features may be important for classification.\n  In this work, we explore the use of large language models (LLMs) to provide explanations and additional"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.19658","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.19658/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IY1tMUJ3ltEEP4hTQcNpNi3/WhHJxKDGug3RVSzqe7L9V1BKjnh2HGfllg6ZRtkUd/7Bh6NHwbZVJQd4PYDXAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T01:13:24.825052Z"},"content_sha256":"94d99d92c72ae0ee2efd79ec37c5cff53736f1184801ee4f8911c24cca4ee52c","schema_version":"1.0","event_id":"sha256:94d99d92c72ae0ee2efd79ec37c5cff53736f1184801ee4f8911c24cca4ee52c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/bundle.json","state_url":"https://pith.science/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T01:13:24Z","links":{"resolver":"https://pith.science/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A","bundle":"https://pith.science/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/bundle.json","state":"https://pith.science/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G6URY2VG2HEE3ZS6VKOO2EGB6A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:G6URY2VG2HEE3ZS6VKOO2EGB6A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"035ec00b8c86810bd5eacf0bf5ec9efc2a4dc9329f62cb3176f2206e171624ec","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-30T15:40:34Z","title_canon_sha256":"689cb9dc262f8aabdfeb03156b846755eae62aa1ef847674c8e4ce070d8d5026"},"schema_version":"1.0","source":{"id":"2310.19658","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.19658","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"arxiv_version","alias_value":"2310.19658v1","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.19658","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_12","alias_value":"G6URY2VG2HEE","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_16","alias_value":"G6URY2VG2HEE3ZS6","created_at":"2026-07-05T07:06:53Z"},{"alias_kind":"pith_short_8","alias_value":"G6URY2VG","created_at":"2026-07-05T07:06:53Z"}],"graph_snapshots":[{"event_id":"sha256:94d99d92c72ae0ee2efd79ec37c5cff53736f1184801ee4f8911c24cca4ee52c","target":"graph","created_at":"2026-07-05T07:06:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.19658/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Network intrusion detection (NID) systems which leverage machine learning have been shown to have strong performance in practice when used to detect malicious network traffic. Decision trees in particular offer a strong balance between performance and simplicity, but require users of NID systems to have background knowledge in machine learning to interpret. In addition, they are unable to provide additional outside information as to why certain features may be important for classification.\n  In this work, we explore the use of large language models (LLMs) to provide explanations and additional","authors_text":"Gang Liu, John Flanagan, Meng Jiang, Noah Ziems","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-30T15:40:34Z","title":"Explaining Tree Model Decisions in Natural Language for Network Intrusion Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.19658","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7215e3acb48e9faf108c01c6cc184d1f53fc2061f960559d1621c8395c7fc4aa","target":"record","created_at":"2026-07-05T07:06:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"035ec00b8c86810bd5eacf0bf5ec9efc2a4dc9329f62cb3176f2206e171624ec","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2023-10-30T15:40:34Z","title_canon_sha256":"689cb9dc262f8aabdfeb03156b846755eae62aa1ef847674c8e4ce070d8d5026"},"schema_version":"1.0","source":{"id":"2310.19658","kind":"arxiv","version":1}},"canonical_sha256":"37a91c6aa6d1c84de65eaa9ced10c1f0351590c2174ad82d3541dcbf8bfe5af3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"37a91c6aa6d1c84de65eaa9ced10c1f0351590c2174ad82d3541dcbf8bfe5af3","first_computed_at":"2026-07-05T07:06:53.503123Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:53.503123Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PFbJxVvSxuY5cdS36qCFMk+wDdNl0L/t8oVajBQ/w1PW37Krdr/d3IEMhpAoprbZ0wwjF5G2ghT09c1mrdVKBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:53.503534Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.19658","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7215e3acb48e9faf108c01c6cc184d1f53fc2061f960559d1621c8395c7fc4aa","sha256:94d99d92c72ae0ee2efd79ec37c5cff53736f1184801ee4f8911c24cca4ee52c"],"state_sha256":"d6088be82119c2822e2fc43e19b95078b5ae92c0a61d11f4c986c4f1dc212f7d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J4JMeYP2+LqN75Q76R8oOl1JhihqmH5412k/3wppNFEXHHmHpCsZQhcqsuxMBKDrX6OgOzhA2YcSNMN1Y6f1CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T01:13:24.830454Z","bundle_sha256":"8ff035803386161687b2ac3b550ae0f131b6ce172d2082bffb31f3a32847e0e6"}}