{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:IOVVFQDHJV75WL674ORMAVXKOI","short_pith_number":"pith:IOVVFQDH","canonical_record":{"source":{"id":"1704.06794","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-04-22T13:17:54Z","cross_cats_sorted":[],"title_canon_sha256":"e0094aeae65ecddc227563f7a7eb794f5367b7cc8ac98baea9c73799bd49c407","abstract_canon_sha256":"cf09936783cb53f0a583d4064b842de51bc9cc5532b56c8af39c83cceb56e67e"},"schema_version":"1.0"},"canonical_sha256":"43ab52c0674d7fdb2fdfe3a2c056ea72348856f7955ca3cff245a1b2ade57cc0","source":{"kind":"arxiv","id":"1704.06794","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1704.06794","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"arxiv_version","alias_value":"1704.06794v3","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1704.06794","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"pith_short_12","alias_value":"IOVVFQDHJV75","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"IOVVFQDHJV75WL67","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"IOVVFQDH","created_at":"2026-05-18T12:31:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:IOVVFQDHJV75WL674ORMAVXKOI","target":"record","payload":{"canonical_record":{"source":{"id":"1704.06794","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-04-22T13:17:54Z","cross_cats_sorted":[],"title_canon_sha256":"e0094aeae65ecddc227563f7a7eb794f5367b7cc8ac98baea9c73799bd49c407","abstract_canon_sha256":"cf09936783cb53f0a583d4064b842de51bc9cc5532b56c8af39c83cceb56e67e"},"schema_version":"1.0"},"canonical_sha256":"43ab52c0674d7fdb2fdfe3a2c056ea72348856f7955ca3cff245a1b2ade57cc0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:38:45.998107Z","signature_b64":"wH2au2stcYtYSfqW5WCA4W0OF+7pJer3IYT9rEdqnyWhk5kG1UToYSRlySK/dNgTxtbUwlqCdya/4CSfig2IBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"43ab52c0674d7fdb2fdfe3a2c056ea72348856f7955ca3cff245a1b2ade57cc0","last_reissued_at":"2026-05-18T00:38:45.997524Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:38:45.997524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1704.06794","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:38:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IrjQgPLeTvAAVXqtWy2C8yiVT9skEBBR4RX6FBcBcmoPr0Y8fiCFm0UHz3EQFlZ5RfktuyNkYik+eaZTWX4uDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T18:04:22.627054Z"},"content_sha256":"c5d8ee4e5a9e9985d94d7fa7221c9404f443b1dd02bdab8b138c194e86dbd0b7","schema_version":"1.0","event_id":"sha256:c5d8ee4e5a9e9985d94d7fa7221c9404f443b1dd02bdab8b138c194e86dbd0b7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:IOVVFQDHJV75WL674ORMAVXKOI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Numerical Evaluation of Cloud-Side Shuffling Defenses against DDoS Attacks on Proxied Multiserver Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Angelos Stavrou, Daniel Fleck, George Kesidis, Yuquan Shan","submitted_at":"2017-04-22T13:17:54Z","abstract_excerpt":"We consider a cloud based multiserver system, that may be cloud based, consisting of a set of replica application servers behind a set of proxy (indirection) servers which interact directly with clients over the Internet. We address cloud-side proactive and reactive defenses to combat DDoS attacks that may target this system. DDoS attacks are endemic with some notable attacks occurring just this past fall. Volumetric attacks may target proxies while \"low volume\" attacks may target replicas. After reviewing existing and proposed defenses, such as changing proxy IP addresses (a \"moving target\" t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1704.06794","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:38:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+1roQ4zA1YkdvE3dVQKa9NGv2D9ztorVNeYd1/G8QHc5higdig7zTINnrexKbLSyvFsVYLQ9H+Q76bhfcBPRAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T18:04:22.627440Z"},"content_sha256":"60fcdc2b65f6d9547a64b48b6fde332df1036669e12bd581b54523b3e39506d2","schema_version":"1.0","event_id":"sha256:60fcdc2b65f6d9547a64b48b6fde332df1036669e12bd581b54523b3e39506d2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IOVVFQDHJV75WL674ORMAVXKOI/bundle.json","state_url":"https://pith.science/pith/IOVVFQDHJV75WL674ORMAVXKOI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IOVVFQDHJV75WL674ORMAVXKOI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T18:04:22Z","links":{"resolver":"https://pith.science/pith/IOVVFQDHJV75WL674ORMAVXKOI","bundle":"https://pith.science/pith/IOVVFQDHJV75WL674ORMAVXKOI/bundle.json","state":"https://pith.science/pith/IOVVFQDHJV75WL674ORMAVXKOI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IOVVFQDHJV75WL674ORMAVXKOI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:IOVVFQDHJV75WL674ORMAVXKOI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cf09936783cb53f0a583d4064b842de51bc9cc5532b56c8af39c83cceb56e67e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-04-22T13:17:54Z","title_canon_sha256":"e0094aeae65ecddc227563f7a7eb794f5367b7cc8ac98baea9c73799bd49c407"},"schema_version":"1.0","source":{"id":"1704.06794","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1704.06794","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"arxiv_version","alias_value":"1704.06794v3","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1704.06794","created_at":"2026-05-18T00:38:45Z"},{"alias_kind":"pith_short_12","alias_value":"IOVVFQDHJV75","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"IOVVFQDHJV75WL67","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"IOVVFQDH","created_at":"2026-05-18T12:31:21Z"}],"graph_snapshots":[{"event_id":"sha256:60fcdc2b65f6d9547a64b48b6fde332df1036669e12bd581b54523b3e39506d2","target":"graph","created_at":"2026-05-18T00:38:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We consider a cloud based multiserver system, that may be cloud based, consisting of a set of replica application servers behind a set of proxy (indirection) servers which interact directly with clients over the Internet. We address cloud-side proactive and reactive defenses to combat DDoS attacks that may target this system. DDoS attacks are endemic with some notable attacks occurring just this past fall. Volumetric attacks may target proxies while \"low volume\" attacks may target replicas. After reviewing existing and proposed defenses, such as changing proxy IP addresses (a \"moving target\" t","authors_text":"Angelos Stavrou, Daniel Fleck, George Kesidis, Yuquan Shan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-04-22T13:17:54Z","title":"Numerical Evaluation of Cloud-Side Shuffling Defenses against DDoS Attacks on Proxied Multiserver Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1704.06794","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c5d8ee4e5a9e9985d94d7fa7221c9404f443b1dd02bdab8b138c194e86dbd0b7","target":"record","created_at":"2026-05-18T00:38:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cf09936783cb53f0a583d4064b842de51bc9cc5532b56c8af39c83cceb56e67e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-04-22T13:17:54Z","title_canon_sha256":"e0094aeae65ecddc227563f7a7eb794f5367b7cc8ac98baea9c73799bd49c407"},"schema_version":"1.0","source":{"id":"1704.06794","kind":"arxiv","version":3}},"canonical_sha256":"43ab52c0674d7fdb2fdfe3a2c056ea72348856f7955ca3cff245a1b2ade57cc0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"43ab52c0674d7fdb2fdfe3a2c056ea72348856f7955ca3cff245a1b2ade57cc0","first_computed_at":"2026-05-18T00:38:45.997524Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:38:45.997524Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wH2au2stcYtYSfqW5WCA4W0OF+7pJer3IYT9rEdqnyWhk5kG1UToYSRlySK/dNgTxtbUwlqCdya/4CSfig2IBw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:38:45.998107Z","signed_message":"canonical_sha256_bytes"},"source_id":"1704.06794","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c5d8ee4e5a9e9985d94d7fa7221c9404f443b1dd02bdab8b138c194e86dbd0b7","sha256:60fcdc2b65f6d9547a64b48b6fde332df1036669e12bd581b54523b3e39506d2"],"state_sha256":"877446e6df62bf204bb04cc34d64a41913aba915faeb3c47c50dbacfd5f2c997"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s/Ml9jGOviLHLI3s1W6cFwBy/tORbuIBABT/nGV6xKRQqdCvMHZlfA0ivqU3RhpS16j3ybVjOhOS8a1B1GiNCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T18:04:22.629820Z","bundle_sha256":"255814fc0dfae3dbd5711a67e1d6628bac22ba021de95d8b6d260290348d8370"}}