{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:HLKTEPDVBP3AXVDOMMEKSPTIUZ","short_pith_number":"pith:HLKTEPDV","canonical_record":{"source":{"id":"2011.01514","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-03T07:18:47Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"82a37a457a7c2effe51867a58bf8120298da6d7115d7695898e795ac8ebbb74c","abstract_canon_sha256":"c6dd5a15bbaf4a3d37f6f9c32a2eacb6948c0ed71260edf959dc357e30a4d529"},"schema_version":"1.0"},"canonical_sha256":"3ad5323c750bf60bd46e6308a93e68a6529a46f7379e04f081f0c970de469a6c","source":{"kind":"arxiv","id":"2011.01514","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01514","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01514v1","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01514","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_12","alias_value":"HLKTEPDVBP3A","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_16","alias_value":"HLKTEPDVBP3AXVDO","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_8","alias_value":"HLKTEPDV","created_at":"2026-07-05T01:48:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:HLKTEPDVBP3AXVDOMMEKSPTIUZ","target":"record","payload":{"canonical_record":{"source":{"id":"2011.01514","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-03T07:18:47Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"82a37a457a7c2effe51867a58bf8120298da6d7115d7695898e795ac8ebbb74c","abstract_canon_sha256":"c6dd5a15bbaf4a3d37f6f9c32a2eacb6948c0ed71260edf959dc357e30a4d529"},"schema_version":"1.0"},"canonical_sha256":"3ad5323c750bf60bd46e6308a93e68a6529a46f7379e04f081f0c970de469a6c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:48:33.502471Z","signature_b64":"S+qA0+fGdiOUGIP5FrtTR1sr+ft8qLi5Z1vsbWCnsYX4UxPVNbK/y4Z/c5Okcx+5oudjm2Hnqcn/3+2flgh/CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3ad5323c750bf60bd46e6308a93e68a6529a46f7379e04f081f0c970de469a6c","last_reissued_at":"2026-07-05T01:48:33.501921Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:48:33.501921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.01514","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:48:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qKTZGBSpqDuilrV6Gg5CzN/reL0KADozngeMI+SPCe1erw4EUoVJVNzdDJftWo8ulLd1Dn3cMkI1uGtR1j9MAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T11:41:27.220627Z"},"content_sha256":"522f7fd4510980ac6c9d6af84f79d200b972463b85e89b79a352bb94edc3de57","schema_version":"1.0","event_id":"sha256:522f7fd4510980ac6c9d6af84f79d200b972463b85e89b79a352bb94edc3de57"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:HLKTEPDVBP3AXVDOMMEKSPTIUZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"You Do (Not) Belong Here: Detecting DPI Evasion Attacks with Context Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Ananthram Swami, Kevin S. Chan, Shasha Li, Shitong Zhu, Srikanth V. Krishnamurthy, Xun Chen, Zhiyun Qian, Zhongjie Wang","submitted_at":"2020-11-03T07:18:47Z","abstract_excerpt":"As Deep Packet Inspection (DPI) middleboxes become increasingly popular, a spectrum of adversarial attacks have emerged with the goal of evading such middleboxes. Many of these attacks exploit discrepancies between the middlebox network protocol implementations, and the more rigorous/complete versions implemented at end hosts. These evasion attacks largely involve subtle manipulations of packets to cause different behaviours at DPI and end hosts, to cloak malicious network traffic that is otherwise detectable. With recent automated discovery, it has become prohibitively challenging to manually"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01514","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.01514/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:48:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HnlawlMrcU+zxlSrPfMv7yZmCWV0vTRe3fwirX2LYQ/N8EchUHX04XI7DQkwTPAS5HLwUijqtwY9xrLHpB9EBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T11:41:27.220993Z"},"content_sha256":"cab43935d0fd7fdd63490d37b495d8e4693f9c7911e88d30a0809f6afd7ea248","schema_version":"1.0","event_id":"sha256:cab43935d0fd7fdd63490d37b495d8e4693f9c7911e88d30a0809f6afd7ea248"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/bundle.json","state_url":"https://pith.science/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T11:41:27Z","links":{"resolver":"https://pith.science/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ","bundle":"https://pith.science/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/bundle.json","state":"https://pith.science/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HLKTEPDVBP3AXVDOMMEKSPTIUZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:HLKTEPDVBP3AXVDOMMEKSPTIUZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c6dd5a15bbaf4a3d37f6f9c32a2eacb6948c0ed71260edf959dc357e30a4d529","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-03T07:18:47Z","title_canon_sha256":"82a37a457a7c2effe51867a58bf8120298da6d7115d7695898e795ac8ebbb74c"},"schema_version":"1.0","source":{"id":"2011.01514","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01514","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01514v1","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01514","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_12","alias_value":"HLKTEPDVBP3A","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_16","alias_value":"HLKTEPDVBP3AXVDO","created_at":"2026-07-05T01:48:33Z"},{"alias_kind":"pith_short_8","alias_value":"HLKTEPDV","created_at":"2026-07-05T01:48:33Z"}],"graph_snapshots":[{"event_id":"sha256:cab43935d0fd7fdd63490d37b495d8e4693f9c7911e88d30a0809f6afd7ea248","target":"graph","created_at":"2026-07-05T01:48:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.01514/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As Deep Packet Inspection (DPI) middleboxes become increasingly popular, a spectrum of adversarial attacks have emerged with the goal of evading such middleboxes. Many of these attacks exploit discrepancies between the middlebox network protocol implementations, and the more rigorous/complete versions implemented at end hosts. These evasion attacks largely involve subtle manipulations of packets to cause different behaviours at DPI and end hosts, to cloak malicious network traffic that is otherwise detectable. With recent automated discovery, it has become prohibitively challenging to manually","authors_text":"Ananthram Swami, Kevin S. Chan, Shasha Li, Shitong Zhu, Srikanth V. Krishnamurthy, Xun Chen, Zhiyun Qian, Zhongjie Wang","cross_cats":["cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-03T07:18:47Z","title":"You Do (Not) Belong Here: Detecting DPI Evasion Attacks with Context Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01514","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:522f7fd4510980ac6c9d6af84f79d200b972463b85e89b79a352bb94edc3de57","target":"record","created_at":"2026-07-05T01:48:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c6dd5a15bbaf4a3d37f6f9c32a2eacb6948c0ed71260edf959dc357e30a4d529","cross_cats_sorted":["cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-03T07:18:47Z","title_canon_sha256":"82a37a457a7c2effe51867a58bf8120298da6d7115d7695898e795ac8ebbb74c"},"schema_version":"1.0","source":{"id":"2011.01514","kind":"arxiv","version":1}},"canonical_sha256":"3ad5323c750bf60bd46e6308a93e68a6529a46f7379e04f081f0c970de469a6c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3ad5323c750bf60bd46e6308a93e68a6529a46f7379e04f081f0c970de469a6c","first_computed_at":"2026-07-05T01:48:33.501921Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:48:33.501921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"S+qA0+fGdiOUGIP5FrtTR1sr+ft8qLi5Z1vsbWCnsYX4UxPVNbK/y4Z/c5Okcx+5oudjm2Hnqcn/3+2flgh/CA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:48:33.502471Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.01514","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:522f7fd4510980ac6c9d6af84f79d200b972463b85e89b79a352bb94edc3de57","sha256:cab43935d0fd7fdd63490d37b495d8e4693f9c7911e88d30a0809f6afd7ea248"],"state_sha256":"ba753246b5796081b8bb06a7f5392e4662c885dfe37e69cda382645d6827646f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l0Vs5JEX3n7hWdvIaqYpiS+gVkfXkktiTgy7kftbuJZOWHSSRBVjuhJeHDmrAf7aDPLR+QN+JGAygN6Uk7JbCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T11:41:27.222879Z","bundle_sha256":"a557d51c2c342f2e10016e910c6888bbf5479e1dc7bdabca49a6c115ec436d16"}}