{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:J2JAMYSOBBZGD4Q5IFXREU6HTN","short_pith_number":"pith:J2JAMYSO","canonical_record":{"source":{"id":"1706.01679","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-06T10:08:01Z","cross_cats_sorted":[],"title_canon_sha256":"0fb8d417394c7a40e2748edc431ff0a6d05299720b42323d73ec05a59e01a306","abstract_canon_sha256":"ca3c7c85ae07eb08129054f4b1c13bc0a442cbada742e28fb102ecc68ba20a84"},"schema_version":"1.0"},"canonical_sha256":"4e9206624e087261f21d416f1253c79b66fa8f23fda4a60600786348e5285bbf","source":{"kind":"arxiv","id":"1706.01679","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.01679","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"arxiv_version","alias_value":"1706.01679v1","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.01679","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"pith_short_12","alias_value":"J2JAMYSOBBZG","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"J2JAMYSOBBZGD4Q5","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"J2JAMYSO","created_at":"2026-05-18T12:31:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:J2JAMYSOBBZGD4Q5IFXREU6HTN","target":"record","payload":{"canonical_record":{"source":{"id":"1706.01679","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-06T10:08:01Z","cross_cats_sorted":[],"title_canon_sha256":"0fb8d417394c7a40e2748edc431ff0a6d05299720b42323d73ec05a59e01a306","abstract_canon_sha256":"ca3c7c85ae07eb08129054f4b1c13bc0a442cbada742e28fb102ecc68ba20a84"},"schema_version":"1.0"},"canonical_sha256":"4e9206624e087261f21d416f1253c79b66fa8f23fda4a60600786348e5285bbf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:42:56.285551Z","signature_b64":"PX/rphMRpFd5CwQFu4e+R4Y+4V7cZTPJpwUl3ddoR7xM5Dzygv4ZSMXWkC0m4UEq6hpCLZ+Ub5PBBtb1NyZfAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4e9206624e087261f21d416f1253c79b66fa8f23fda4a60600786348e5285bbf","last_reissued_at":"2026-05-18T00:42:56.284842Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:42:56.284842Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1706.01679","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:42:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KSCz7dIe5xuwpCS6kqY/Y69jRHQVl4cQN1g9h+s7uDW8cJsvPmJf+EQWMZ5C9YNMjT+/gYWSl3a62IAkmKjhDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-07T16:15:10.047303Z"},"content_sha256":"c88c216fe7143e2406047dc0c3d3eeeb860ef69125588cc1ab132b7087c36844","schema_version":"1.0","event_id":"sha256:c88c216fe7143e2406047dc0c3d3eeeb860ef69125588cc1ab132b7087c36844"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:J2JAMYSOBBZGD4Q5IFXREU6HTN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Feasibility of Distinguishing Between Process Disturbances and Intrusions in Process Control Systems Using Multivariate Statistical Process Control","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"I\\~naki Garitano, Jos\\'e Camacho, Mikel Iturbe, Roberto Uribeetxeberria, Urko Zurutuza","submitted_at":"2017-06-06T10:08:01Z","abstract_excerpt":"Process Control Systems (PCSs) are the operating core of Critical Infrastructures (CIs). As such, anomaly detection has been an active research field to ensure CI normal operation. Previous approaches have leveraged network level data for anomaly detection, or have disregarded the existence of process disturbances, thus opening the possibility of mislabelling disturbances as attacks and vice versa. In this paper we present an anomaly detection and diagnostic system based on Multivariate Statistical Process Control (MSPC), that aims to distinguish between attacks and disturbances. For this end,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.01679","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:42:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k6a5VtEKQRIB1GvMjhEznHt0LV0z0Qu+/RzjTdzG3GD5CLoDgSMHmhhJ/7Zv764hIb7qDV6vqfs6vH852fraBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-07T16:15:10.048030Z"},"content_sha256":"b66f8597d7ed8fd4c8072990440360c32b334af43af161b10d84e6fa43471a2d","schema_version":"1.0","event_id":"sha256:b66f8597d7ed8fd4c8072990440360c32b334af43af161b10d84e6fa43471a2d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/bundle.json","state_url":"https://pith.science/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-07T16:15:10Z","links":{"resolver":"https://pith.science/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN","bundle":"https://pith.science/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/bundle.json","state":"https://pith.science/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J2JAMYSOBBZGD4Q5IFXREU6HTN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:J2JAMYSOBBZGD4Q5IFXREU6HTN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca3c7c85ae07eb08129054f4b1c13bc0a442cbada742e28fb102ecc68ba20a84","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-06T10:08:01Z","title_canon_sha256":"0fb8d417394c7a40e2748edc431ff0a6d05299720b42323d73ec05a59e01a306"},"schema_version":"1.0","source":{"id":"1706.01679","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.01679","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"arxiv_version","alias_value":"1706.01679v1","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.01679","created_at":"2026-05-18T00:42:56Z"},{"alias_kind":"pith_short_12","alias_value":"J2JAMYSOBBZG","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_16","alias_value":"J2JAMYSOBBZGD4Q5","created_at":"2026-05-18T12:31:21Z"},{"alias_kind":"pith_short_8","alias_value":"J2JAMYSO","created_at":"2026-05-18T12:31:21Z"}],"graph_snapshots":[{"event_id":"sha256:b66f8597d7ed8fd4c8072990440360c32b334af43af161b10d84e6fa43471a2d","target":"graph","created_at":"2026-05-18T00:42:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Process Control Systems (PCSs) are the operating core of Critical Infrastructures (CIs). As such, anomaly detection has been an active research field to ensure CI normal operation. Previous approaches have leveraged network level data for anomaly detection, or have disregarded the existence of process disturbances, thus opening the possibility of mislabelling disturbances as attacks and vice versa. In this paper we present an anomaly detection and diagnostic system based on Multivariate Statistical Process Control (MSPC), that aims to distinguish between attacks and disturbances. For this end,","authors_text":"I\\~naki Garitano, Jos\\'e Camacho, Mikel Iturbe, Roberto Uribeetxeberria, Urko Zurutuza","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-06T10:08:01Z","title":"On the Feasibility of Distinguishing Between Process Disturbances and Intrusions in Process Control Systems Using Multivariate Statistical Process Control"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.01679","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c88c216fe7143e2406047dc0c3d3eeeb860ef69125588cc1ab132b7087c36844","target":"record","created_at":"2026-05-18T00:42:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca3c7c85ae07eb08129054f4b1c13bc0a442cbada742e28fb102ecc68ba20a84","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-06T10:08:01Z","title_canon_sha256":"0fb8d417394c7a40e2748edc431ff0a6d05299720b42323d73ec05a59e01a306"},"schema_version":"1.0","source":{"id":"1706.01679","kind":"arxiv","version":1}},"canonical_sha256":"4e9206624e087261f21d416f1253c79b66fa8f23fda4a60600786348e5285bbf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4e9206624e087261f21d416f1253c79b66fa8f23fda4a60600786348e5285bbf","first_computed_at":"2026-05-18T00:42:56.284842Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:42:56.284842Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PX/rphMRpFd5CwQFu4e+R4Y+4V7cZTPJpwUl3ddoR7xM5Dzygv4ZSMXWkC0m4UEq6hpCLZ+Ub5PBBtb1NyZfAA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:42:56.285551Z","signed_message":"canonical_sha256_bytes"},"source_id":"1706.01679","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c88c216fe7143e2406047dc0c3d3eeeb860ef69125588cc1ab132b7087c36844","sha256:b66f8597d7ed8fd4c8072990440360c32b334af43af161b10d84e6fa43471a2d"],"state_sha256":"342d25172fc39df4eeec63fb474df7fb59922a69760c9f96b8d574deee7e7474"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l58Ql9CrrqbeQyMI3z7skRTH2qMuVwQcbJ6MUVsmWZ8hsFi5Te+T5LTx5RdayTh8WrPDxSxFkVTjtpeYDiHeAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-07T16:15:10.050891Z","bundle_sha256":"7e08d20075954b60d7f1fcd73437444ce7365f8b87c6fc59c571835bd7dade4f"}}