{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JL7ICC2X3TZQDQSG52TVGEYMXH","short_pith_number":"pith:JL7ICC2X","canonical_record":{"source":{"id":"2306.01655","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-02T16:24:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"afd522921e75ca34f6db15a23d1b863260c929d705335814a61cb6035f25e846","abstract_canon_sha256":"a58ba40174374798c873ea3a8262e8b6e3bb8086a153272bcc322fee3595d7fd"},"schema_version":"1.0"},"canonical_sha256":"4afe810b57dcf301c246eea753130cb9f0d886fecd8b4c40383185498ea5b9d3","source":{"kind":"arxiv","id":"2306.01655","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.01655","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"arxiv_version","alias_value":"2306.01655v1","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.01655","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_12","alias_value":"JL7ICC2X3TZQ","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_16","alias_value":"JL7ICC2X3TZQDQSG","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_8","alias_value":"JL7ICC2X","created_at":"2026-07-05T06:16:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JL7ICC2X3TZQDQSG52TVGEYMXH","target":"record","payload":{"canonical_record":{"source":{"id":"2306.01655","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-02T16:24:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"afd522921e75ca34f6db15a23d1b863260c929d705335814a61cb6035f25e846","abstract_canon_sha256":"a58ba40174374798c873ea3a8262e8b6e3bb8086a153272bcc322fee3595d7fd"},"schema_version":"1.0"},"canonical_sha256":"4afe810b57dcf301c246eea753130cb9f0d886fecd8b4c40383185498ea5b9d3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:16:56.513207Z","signature_b64":"2K5fdAiRTR6WT+Zr5iD4JT6l/TegcKuwbQ8u2Opxf4zHGWXRAhi6Qq4RISmr7yviCxBmGUHRQ1Ba1uPWSZTsBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4afe810b57dcf301c246eea753130cb9f0d886fecd8b4c40383185498ea5b9d3","last_reissued_at":"2026-07-05T06:16:56.512800Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:16:56.512800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.01655","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XCH4Rab3KNddhKSm0Cr3jYildjrZpa/M05G/CP/iuKYxhVWGRSkVi8ASHpgKn1c7u3rtNFUa3lBXhypPhKy2AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:13:37.419266Z"},"content_sha256":"2409d7cd96d59c9ef28176d88eac500fb9f816a4f3b0a047cd7610e6696edd1b","schema_version":"1.0","event_id":"sha256:2409d7cd96d59c9ef28176d88eac500fb9f816a4f3b0a047cd7610e6696edd1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JL7ICC2X3TZQDQSG52TVGEYMXH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poisoning Network Flow Classifiers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alina Oprea, Giorgio Severi, Jason Matterer, John Holodnak, Kendra Kratkiewicz, Simona Boboila","submitted_at":"2023-06-02T16:24:15Z","abstract_excerpt":"As machine learning (ML) classifiers increasingly oversee the automated monitoring of network traffic, studying their resilience against adversarial attacks becomes critical. This paper focuses on poisoning attacks, specifically backdoor attacks, against network traffic flow classifiers. We investigate the challenging scenario of clean-label poisoning where the adversary's capabilities are constrained to tampering only with the training data - without the ability to arbitrarily modify the training labels or any other component of the training process. We describe a trigger crafting strategy th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.01655","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.01655/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1bth9XUBxZyX9IRDpS2FMQzFunoUKgI0Br8rd2UaJhoSATeiEWi8yixiG463CWyPlhSGhrmK//MU+uQCJE9EDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:13:37.420634Z"},"content_sha256":"3946c3eddef24520c620451589944de0e90b44c93755a0b929cd25dc08641996","schema_version":"1.0","event_id":"sha256:3946c3eddef24520c620451589944de0e90b44c93755a0b929cd25dc08641996"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/bundle.json","state_url":"https://pith.science/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T14:13:37Z","links":{"resolver":"https://pith.science/pith/JL7ICC2X3TZQDQSG52TVGEYMXH","bundle":"https://pith.science/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/bundle.json","state":"https://pith.science/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JL7ICC2X3TZQDQSG52TVGEYMXH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JL7ICC2X3TZQDQSG52TVGEYMXH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a58ba40174374798c873ea3a8262e8b6e3bb8086a153272bcc322fee3595d7fd","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-02T16:24:15Z","title_canon_sha256":"afd522921e75ca34f6db15a23d1b863260c929d705335814a61cb6035f25e846"},"schema_version":"1.0","source":{"id":"2306.01655","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.01655","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"arxiv_version","alias_value":"2306.01655v1","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.01655","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_12","alias_value":"JL7ICC2X3TZQ","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_16","alias_value":"JL7ICC2X3TZQDQSG","created_at":"2026-07-05T06:16:56Z"},{"alias_kind":"pith_short_8","alias_value":"JL7ICC2X","created_at":"2026-07-05T06:16:56Z"}],"graph_snapshots":[{"event_id":"sha256:3946c3eddef24520c620451589944de0e90b44c93755a0b929cd25dc08641996","target":"graph","created_at":"2026-07-05T06:16:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.01655/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As machine learning (ML) classifiers increasingly oversee the automated monitoring of network traffic, studying their resilience against adversarial attacks becomes critical. This paper focuses on poisoning attacks, specifically backdoor attacks, against network traffic flow classifiers. We investigate the challenging scenario of clean-label poisoning where the adversary's capabilities are constrained to tampering only with the training data - without the ability to arbitrarily modify the training labels or any other component of the training process. We describe a trigger crafting strategy th","authors_text":"Alina Oprea, Giorgio Severi, Jason Matterer, John Holodnak, Kendra Kratkiewicz, Simona Boboila","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-02T16:24:15Z","title":"Poisoning Network Flow Classifiers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.01655","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2409d7cd96d59c9ef28176d88eac500fb9f816a4f3b0a047cd7610e6696edd1b","target":"record","created_at":"2026-07-05T06:16:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a58ba40174374798c873ea3a8262e8b6e3bb8086a153272bcc322fee3595d7fd","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-02T16:24:15Z","title_canon_sha256":"afd522921e75ca34f6db15a23d1b863260c929d705335814a61cb6035f25e846"},"schema_version":"1.0","source":{"id":"2306.01655","kind":"arxiv","version":1}},"canonical_sha256":"4afe810b57dcf301c246eea753130cb9f0d886fecd8b4c40383185498ea5b9d3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4afe810b57dcf301c246eea753130cb9f0d886fecd8b4c40383185498ea5b9d3","first_computed_at":"2026-07-05T06:16:56.512800Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:56.512800Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2K5fdAiRTR6WT+Zr5iD4JT6l/TegcKuwbQ8u2Opxf4zHGWXRAhi6Qq4RISmr7yviCxBmGUHRQ1Ba1uPWSZTsBw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:56.513207Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.01655","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2409d7cd96d59c9ef28176d88eac500fb9f816a4f3b0a047cd7610e6696edd1b","sha256:3946c3eddef24520c620451589944de0e90b44c93755a0b929cd25dc08641996"],"state_sha256":"2d93a6205b3496943012bc1ef3d037a3515b9602865f2f5bf1328172b44426b9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cc3x7ccgcTtHNqeztH+dCmndse3sRL5nN/oosSPUpDRogGGFDj1NXXVlY4M7YbqwyE2i8m6ym20j2Eh686kkDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T14:13:37.428453Z","bundle_sha256":"e3288d9e07514eb87972b8c98cb58fb433c6e8b40ad4b2509c8faf329969f0cf"}}