{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JIOJJR6HI6JKLCLLS3W4CWPZ7O","short_pith_number":"pith:JIOJJR6H","canonical_record":{"source":{"id":"2310.17348","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-26T12:30:11Z","cross_cats_sorted":[],"title_canon_sha256":"553d66f8886187409934d0671290521689a391868f11cd666d9c37817db28bc5","abstract_canon_sha256":"cd1b8531686c0852bdab917162d54372231df495b6aef40ccd58fd4946a1e7b1"},"schema_version":"1.0"},"canonical_sha256":"4a1c94c7c74792a5896b96edc159f9fbb6bbfec36318da6f68377d5c2f7f105c","source":{"kind":"arxiv","id":"2310.17348","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.17348","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"arxiv_version","alias_value":"2310.17348v1","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.17348","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_12","alias_value":"JIOJJR6HI6JK","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_16","alias_value":"JIOJJR6HI6JKLCLL","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_8","alias_value":"JIOJJR6H","created_at":"2026-07-05T07:05:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JIOJJR6HI6JKLCLLS3W4CWPZ7O","target":"record","payload":{"canonical_record":{"source":{"id":"2310.17348","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-26T12:30:11Z","cross_cats_sorted":[],"title_canon_sha256":"553d66f8886187409934d0671290521689a391868f11cd666d9c37817db28bc5","abstract_canon_sha256":"cd1b8531686c0852bdab917162d54372231df495b6aef40ccd58fd4946a1e7b1"},"schema_version":"1.0"},"canonical_sha256":"4a1c94c7c74792a5896b96edc159f9fbb6bbfec36318da6f68377d5c2f7f105c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:05:32.334764Z","signature_b64":"cAvlfl3IodEwHLA5+G+bcpJ/vtdI7ZlDFPzDYPSMEiyu4ZJSfVDnEox4BT6w4O+4g/cpiG4Mlum32JqGryXZAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4a1c94c7c74792a5896b96edc159f9fbb6bbfec36318da6f68377d5c2f7f105c","last_reissued_at":"2026-07-05T07:05:32.333749Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:05:32.333749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.17348","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:05:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hHeYx5W8Ag9Aow52u3NgNWdu5sO3afhj8nSdvjn/q4/uIhbb+BN6OlGxgP58x+Ka/80XQBENvhFApUpx8oSTAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:00:55.976800Z"},"content_sha256":"03a71b7d38c276538e26c2f83ebc8e2bcf5e8962fdefbf4636ef4307842f85fa","schema_version":"1.0","event_id":"sha256:03a71b7d38c276538e26c2f83ebc8e2bcf5e8962fdefbf4636ef4307842f85fa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JIOJJR6HI6JKLCLLS3W4CWPZ7O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Network Intrusion Detection with Edge-Directed Graph Multi-Head Attention Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Cangqi Zhou, Jing Zhang, Xiang Li, Yali Yuan","submitted_at":"2023-10-26T12:30:11Z","abstract_excerpt":"A network intrusion usually involves a number of network locations. Data flow (including the data generated by intrusion behaviors) among these locations (usually represented by IP addresses) naturally forms a graph. Thus, graph neural networks (GNNs) have been used in the construction of intrusion detection models in recent years since they have an excellent ability to capture graph topological features of intrusion data flow. However, existing GNN models treat node mean aggregation equally in node information aggregation. In reality, the correlations of nodes and their neighbors as well as t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.17348","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.17348/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:05:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VhvdMKWeZlOa8mjfJueB9A7R69wWvCcrw007ykDQCXUaAtXRVmlVwnhLeoW/xtb+1+w4AnvST8whR9mfWzfDBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T16:00:55.977290Z"},"content_sha256":"6e0235aecdc7bb050edc1d272aaf7aff8257f1c23cb97ae305493033ebaf7725","schema_version":"1.0","event_id":"sha256:6e0235aecdc7bb050edc1d272aaf7aff8257f1c23cb97ae305493033ebaf7725"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/bundle.json","state_url":"https://pith.science/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T16:00:55Z","links":{"resolver":"https://pith.science/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O","bundle":"https://pith.science/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/bundle.json","state":"https://pith.science/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JIOJJR6HI6JKLCLLS3W4CWPZ7O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JIOJJR6HI6JKLCLLS3W4CWPZ7O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cd1b8531686c0852bdab917162d54372231df495b6aef40ccd58fd4946a1e7b1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-26T12:30:11Z","title_canon_sha256":"553d66f8886187409934d0671290521689a391868f11cd666d9c37817db28bc5"},"schema_version":"1.0","source":{"id":"2310.17348","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.17348","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"arxiv_version","alias_value":"2310.17348v1","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.17348","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_12","alias_value":"JIOJJR6HI6JK","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_16","alias_value":"JIOJJR6HI6JKLCLL","created_at":"2026-07-05T07:05:32Z"},{"alias_kind":"pith_short_8","alias_value":"JIOJJR6H","created_at":"2026-07-05T07:05:32Z"}],"graph_snapshots":[{"event_id":"sha256:6e0235aecdc7bb050edc1d272aaf7aff8257f1c23cb97ae305493033ebaf7725","target":"graph","created_at":"2026-07-05T07:05:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.17348/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A network intrusion usually involves a number of network locations. Data flow (including the data generated by intrusion behaviors) among these locations (usually represented by IP addresses) naturally forms a graph. Thus, graph neural networks (GNNs) have been used in the construction of intrusion detection models in recent years since they have an excellent ability to capture graph topological features of intrusion data flow. However, existing GNN models treat node mean aggregation equally in node information aggregation. In reality, the correlations of nodes and their neighbors as well as t","authors_text":"Cangqi Zhou, Jing Zhang, Xiang Li, Yali Yuan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-26T12:30:11Z","title":"Network Intrusion Detection with Edge-Directed Graph Multi-Head Attention Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.17348","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:03a71b7d38c276538e26c2f83ebc8e2bcf5e8962fdefbf4636ef4307842f85fa","target":"record","created_at":"2026-07-05T07:05:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cd1b8531686c0852bdab917162d54372231df495b6aef40ccd58fd4946a1e7b1","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-26T12:30:11Z","title_canon_sha256":"553d66f8886187409934d0671290521689a391868f11cd666d9c37817db28bc5"},"schema_version":"1.0","source":{"id":"2310.17348","kind":"arxiv","version":1}},"canonical_sha256":"4a1c94c7c74792a5896b96edc159f9fbb6bbfec36318da6f68377d5c2f7f105c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4a1c94c7c74792a5896b96edc159f9fbb6bbfec36318da6f68377d5c2f7f105c","first_computed_at":"2026-07-05T07:05:32.333749Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:05:32.333749Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cAvlfl3IodEwHLA5+G+bcpJ/vtdI7ZlDFPzDYPSMEiyu4ZJSfVDnEox4BT6w4O+4g/cpiG4Mlum32JqGryXZAA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:05:32.334764Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.17348","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:03a71b7d38c276538e26c2f83ebc8e2bcf5e8962fdefbf4636ef4307842f85fa","sha256:6e0235aecdc7bb050edc1d272aaf7aff8257f1c23cb97ae305493033ebaf7725"],"state_sha256":"c1918467cfe225af74144bb6fe50edefcb225375309446a8e1aa721ce39d12f1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bwKwtxq2rCF9Ql88aj9SrNUpEkZ5pR2bAzNmaFmBMMD2MPJhWROZZo9IL5fYBR3DVpGWl8tzyPgXVILsvymIBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T16:00:55.980080Z","bundle_sha256":"f4186ba19d871868e83c4734aa8d48ad03bcd3ae6962b25c251456a2041909ef"}}