{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:IIDNMIIHC32FET72F6Y6RZORAL","short_pith_number":"pith:IIDNMIIH","canonical_record":{"source":{"id":"2211.00441","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:12:20Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"de038241a797e9dbfc2da169df4f4b80670090c0a17a67a26a2015938cd4dcde","abstract_canon_sha256":"b49dbbe52b548ebf4384a7abf2ac77ed630283d127f00335eba8e9219fc1f542"},"schema_version":"1.0"},"canonical_sha256":"4206d6210716f4524ffa2fb1e8e5d102fd3ee9b146047b3230c11f56ddc64262","source":{"kind":"arxiv","id":"2211.00441","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00441","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00441v1","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00441","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_12","alias_value":"IIDNMIIHC32F","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_16","alias_value":"IIDNMIIHC32FET72","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_8","alias_value":"IIDNMIIH","created_at":"2026-07-05T05:12:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:IIDNMIIHC32FET72F6Y6RZORAL","target":"record","payload":{"canonical_record":{"source":{"id":"2211.00441","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:12:20Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"de038241a797e9dbfc2da169df4f4b80670090c0a17a67a26a2015938cd4dcde","abstract_canon_sha256":"b49dbbe52b548ebf4384a7abf2ac77ed630283d127f00335eba8e9219fc1f542"},"schema_version":"1.0"},"canonical_sha256":"4206d6210716f4524ffa2fb1e8e5d102fd3ee9b146047b3230c11f56ddc64262","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:12:22.646905Z","signature_b64":"NVl1/jg6qAaxDrHLlKkLfkxFRdCbKRuqfDZNngGsKu1STBcVaxhaIKEb9ND1Xk8aPUdRzsmr75qTKR2v2LMAAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4206d6210716f4524ffa2fb1e8e5d102fd3ee9b146047b3230c11f56ddc64262","last_reissued_at":"2026-07-05T05:12:22.646429Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:12:22.646429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.00441","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:12:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Km4Fl9kWvsHEJydEzN9a0aTNhtLtJZEQElarLmNuRDn35FimHwJs+qXhOhkipABrmoWJ6u05E/Hj6NEUq9DcCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:26:59.316213Z"},"content_sha256":"5d5a8a9fab5f60c59f1c7b2d0a82910b593c976cdd35b8ebe013b9299e73a280","schema_version":"1.0","event_id":"sha256:5d5a8a9fab5f60c59f1c7b2d0a82910b593c976cdd35b8ebe013b9299e73a280"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:IIDNMIIHC32FET72F6Y6RZORAL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Zero Day Threat Detection Using Metric Learning Autoencoders","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Aaron Shaha, Abdul Rahman, Christopher Redino, Dhruv Nandakumar, Edward Bowen, Joe Nehila, Kevin Choi, Marc Vucovich, Matthew Weeks, Robert Schiller","submitted_at":"2022-11-01T13:12:20Z","abstract_excerpt":"The proliferation of zero-day threats (ZDTs) to companies' networks has been immensely costly and requires novel methods to scan traffic for malicious behavior at massive scale. The diverse nature of normal behavior along with the huge landscape of attack types makes deep learning methods an attractive option for their ability to capture highly-nonlinear behavior patterns. In this paper, the authors demonstrate an improvement upon a previously introduced methodology, which used a dual-autoencoder approach to identify ZDTs in network flow telemetry. In addition to the previously-introduced asse"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00441","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.00441/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:12:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DJC4EMeUcviFq27bWAgMVZBFMV3EZhzcCC4nbX5Lu3Tz21HhhjX45tFGQM4aWXb4DaNk580kA3dwaLRJWyCaAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T19:26:59.316594Z"},"content_sha256":"07412d1cda4246f5b7adad7a63e7bf4c8ed396183ba1ff2eba213542a1b8e40f","schema_version":"1.0","event_id":"sha256:07412d1cda4246f5b7adad7a63e7bf4c8ed396183ba1ff2eba213542a1b8e40f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IIDNMIIHC32FET72F6Y6RZORAL/bundle.json","state_url":"https://pith.science/pith/IIDNMIIHC32FET72F6Y6RZORAL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IIDNMIIHC32FET72F6Y6RZORAL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T19:26:59Z","links":{"resolver":"https://pith.science/pith/IIDNMIIHC32FET72F6Y6RZORAL","bundle":"https://pith.science/pith/IIDNMIIHC32FET72F6Y6RZORAL/bundle.json","state":"https://pith.science/pith/IIDNMIIHC32FET72F6Y6RZORAL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IIDNMIIHC32FET72F6Y6RZORAL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:IIDNMIIHC32FET72F6Y6RZORAL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b49dbbe52b548ebf4384a7abf2ac77ed630283d127f00335eba8e9219fc1f542","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:12:20Z","title_canon_sha256":"de038241a797e9dbfc2da169df4f4b80670090c0a17a67a26a2015938cd4dcde"},"schema_version":"1.0","source":{"id":"2211.00441","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.00441","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"arxiv_version","alias_value":"2211.00441v1","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.00441","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_12","alias_value":"IIDNMIIHC32F","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_16","alias_value":"IIDNMIIHC32FET72","created_at":"2026-07-05T05:12:22Z"},{"alias_kind":"pith_short_8","alias_value":"IIDNMIIH","created_at":"2026-07-05T05:12:22Z"}],"graph_snapshots":[{"event_id":"sha256:07412d1cda4246f5b7adad7a63e7bf4c8ed396183ba1ff2eba213542a1b8e40f","target":"graph","created_at":"2026-07-05T05:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.00441/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The proliferation of zero-day threats (ZDTs) to companies' networks has been immensely costly and requires novel methods to scan traffic for malicious behavior at massive scale. The diverse nature of normal behavior along with the huge landscape of attack types makes deep learning methods an attractive option for their ability to capture highly-nonlinear behavior patterns. In this paper, the authors demonstrate an improvement upon a previously introduced methodology, which used a dual-autoencoder approach to identify ZDTs in network flow telemetry. In addition to the previously-introduced asse","authors_text":"Aaron Shaha, Abdul Rahman, Christopher Redino, Dhruv Nandakumar, Edward Bowen, Joe Nehila, Kevin Choi, Marc Vucovich, Matthew Weeks, Robert Schiller","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:12:20Z","title":"Zero Day Threat Detection Using Metric Learning Autoencoders"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.00441","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d5a8a9fab5f60c59f1c7b2d0a82910b593c976cdd35b8ebe013b9299e73a280","target":"record","created_at":"2026-07-05T05:12:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b49dbbe52b548ebf4384a7abf2ac77ed630283d127f00335eba8e9219fc1f542","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-11-01T13:12:20Z","title_canon_sha256":"de038241a797e9dbfc2da169df4f4b80670090c0a17a67a26a2015938cd4dcde"},"schema_version":"1.0","source":{"id":"2211.00441","kind":"arxiv","version":1}},"canonical_sha256":"4206d6210716f4524ffa2fb1e8e5d102fd3ee9b146047b3230c11f56ddc64262","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4206d6210716f4524ffa2fb1e8e5d102fd3ee9b146047b3230c11f56ddc64262","first_computed_at":"2026-07-05T05:12:22.646429Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:12:22.646429Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NVl1/jg6qAaxDrHLlKkLfkxFRdCbKRuqfDZNngGsKu1STBcVaxhaIKEb9ND1Xk8aPUdRzsmr75qTKR2v2LMAAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:12:22.646905Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.00441","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d5a8a9fab5f60c59f1c7b2d0a82910b593c976cdd35b8ebe013b9299e73a280","sha256:07412d1cda4246f5b7adad7a63e7bf4c8ed396183ba1ff2eba213542a1b8e40f"],"state_sha256":"43a8ec3f0ca89e24de932b76d463fd507535e4b9c7a540ef51d4a9e2ece3c001"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4vhNM/PmuQ8G2c+VZD+bKB3elNqiBxM7k3Z486+lUPCNOeCaK7RKsIqFneTpMWVpi+N6umrZoU5nVjnP/kl4AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T19:26:59.318570Z","bundle_sha256":"5a2138f926dd764aab11029290831b403cfdcb58078907697269744542c1069e"}}