{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:K3NDZWHJAU33GK4QILCXT23S54","short_pith_number":"pith:K3NDZWHJ","canonical_record":{"source":{"id":"2606.11565","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-10T01:45:09Z","cross_cats_sorted":[],"title_canon_sha256":"36eb29a8c43e9290b358d1f2d508262e32de09eb7a0524dac790c6a8c886766f","abstract_canon_sha256":"863f067d9e00d973abdfec3440058024ef88909a6f19d2df679bafb0730119f4"},"schema_version":"1.0"},"canonical_sha256":"56da3cd8e90537b32b9042c579eb72ef37933437cf9b5dda9081b310756f36b5","source":{"kind":"arxiv","id":"2606.11565","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.11565","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"arxiv_version","alias_value":"2606.11565v1","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.11565","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_12","alias_value":"K3NDZWHJAU33","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_16","alias_value":"K3NDZWHJAU33GK4Q","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_8","alias_value":"K3NDZWHJ","created_at":"2026-06-11T01:09:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:K3NDZWHJAU33GK4QILCXT23S54","target":"record","payload":{"canonical_record":{"source":{"id":"2606.11565","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-10T01:45:09Z","cross_cats_sorted":[],"title_canon_sha256":"36eb29a8c43e9290b358d1f2d508262e32de09eb7a0524dac790c6a8c886766f","abstract_canon_sha256":"863f067d9e00d973abdfec3440058024ef88909a6f19d2df679bafb0730119f4"},"schema_version":"1.0"},"canonical_sha256":"56da3cd8e90537b32b9042c579eb72ef37933437cf9b5dda9081b310756f36b5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-11T01:09:56.384070Z","signature_b64":"K+PThUKw64QQPIq4q6443eoGmGC71qVV07GQftFSINZB4IZxEjg5Oa00drCdKH0Gqmz1cBtRg8f7be56askbDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"56da3cd8e90537b32b9042c579eb72ef37933437cf9b5dda9081b310756f36b5","last_reissued_at":"2026-06-11T01:09:56.383266Z","signature_status":"signed_v1","first_computed_at":"2026-06-11T01:09:56.383266Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.11565","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-11T01:09:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hWXatPvKK9vdY6+1AlwYioLU7pTp7la87Ad6toRqvDQTr1k9CY6sqofd7D9ZBsulPSwsSjh7+AVtW+j6j6+fBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T01:25:11.164172Z"},"content_sha256":"2e5a38113a6ebaed32c09c51962a491ee4cbcbacfb297580ccc9fe91185a3c69","schema_version":"1.0","event_id":"sha256:2e5a38113a6ebaed32c09c51962a491ee4cbcbacfb297580ccc9fe91185a3c69"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:K3NDZWHJAU33GK4QILCXT23S54","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Deterministic Forensic Preprocessing Framework for Heterogeneous Network Datasets: Formal Foundations, Implementation, and Empirical Validation","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Nasim Ferdosian, Nickson M. Karie, Qian Li, Ravi Chaudhary, Reza Ryan","submitted_at":"2026-06-10T01:45:09Z","abstract_excerpt":"Digital forensic investigations increasingly depend on preprocessing heterogeneous network evidence from intrusion detection systems, IoT devices, and enterprise traffic logs. Incompatible schemas and timestamp formats hinder evidence correlation and timeline reconstruction, while current ad hoc approaches offer no mechanism to verify consistency across runs or analysis, creating reproducibility gaps that challenge evidence admissibility. This paper introduces a deterministic forensic preprocessing framework that converts heterogeneous network datasets into a reproducible canonical form. The f"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.11565","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.11565/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-11T01:09:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OctO/EDThr42qbvb/OxBYtTx3FgZy+dlXSQMXi5vvloyzAx6n2ZzoQHzK7+6awCrbqGxeYvl/s7qaQ1JPAMfCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T01:25:11.164677Z"},"content_sha256":"60f8a83c16bb5c0bdc478976b5d0f6c2ce1805df4b2107d7094aaab0d8880a41","schema_version":"1.0","event_id":"sha256:60f8a83c16bb5c0bdc478976b5d0f6c2ce1805df4b2107d7094aaab0d8880a41"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/K3NDZWHJAU33GK4QILCXT23S54/bundle.json","state_url":"https://pith.science/pith/K3NDZWHJAU33GK4QILCXT23S54/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/K3NDZWHJAU33GK4QILCXT23S54/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T01:25:11Z","links":{"resolver":"https://pith.science/pith/K3NDZWHJAU33GK4QILCXT23S54","bundle":"https://pith.science/pith/K3NDZWHJAU33GK4QILCXT23S54/bundle.json","state":"https://pith.science/pith/K3NDZWHJAU33GK4QILCXT23S54/state.json","well_known_bundle":"https://pith.science/.well-known/pith/K3NDZWHJAU33GK4QILCXT23S54/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:K3NDZWHJAU33GK4QILCXT23S54","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"863f067d9e00d973abdfec3440058024ef88909a6f19d2df679bafb0730119f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-10T01:45:09Z","title_canon_sha256":"36eb29a8c43e9290b358d1f2d508262e32de09eb7a0524dac790c6a8c886766f"},"schema_version":"1.0","source":{"id":"2606.11565","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.11565","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"arxiv_version","alias_value":"2606.11565v1","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.11565","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_12","alias_value":"K3NDZWHJAU33","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_16","alias_value":"K3NDZWHJAU33GK4Q","created_at":"2026-06-11T01:09:56Z"},{"alias_kind":"pith_short_8","alias_value":"K3NDZWHJ","created_at":"2026-06-11T01:09:56Z"}],"graph_snapshots":[{"event_id":"sha256:60f8a83c16bb5c0bdc478976b5d0f6c2ce1805df4b2107d7094aaab0d8880a41","target":"graph","created_at":"2026-06-11T01:09:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.11565/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Digital forensic investigations increasingly depend on preprocessing heterogeneous network evidence from intrusion detection systems, IoT devices, and enterprise traffic logs. Incompatible schemas and timestamp formats hinder evidence correlation and timeline reconstruction, while current ad hoc approaches offer no mechanism to verify consistency across runs or analysis, creating reproducibility gaps that challenge evidence admissibility. This paper introduces a deterministic forensic preprocessing framework that converts heterogeneous network datasets into a reproducible canonical form. The f","authors_text":"Nasim Ferdosian, Nickson M. Karie, Qian Li, Ravi Chaudhary, Reza Ryan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-10T01:45:09Z","title":"A Deterministic Forensic Preprocessing Framework for Heterogeneous Network Datasets: Formal Foundations, Implementation, and Empirical Validation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.11565","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2e5a38113a6ebaed32c09c51962a491ee4cbcbacfb297580ccc9fe91185a3c69","target":"record","created_at":"2026-06-11T01:09:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"863f067d9e00d973abdfec3440058024ef88909a6f19d2df679bafb0730119f4","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-10T01:45:09Z","title_canon_sha256":"36eb29a8c43e9290b358d1f2d508262e32de09eb7a0524dac790c6a8c886766f"},"schema_version":"1.0","source":{"id":"2606.11565","kind":"arxiv","version":1}},"canonical_sha256":"56da3cd8e90537b32b9042c579eb72ef37933437cf9b5dda9081b310756f36b5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"56da3cd8e90537b32b9042c579eb72ef37933437cf9b5dda9081b310756f36b5","first_computed_at":"2026-06-11T01:09:56.383266Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-11T01:09:56.383266Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K+PThUKw64QQPIq4q6443eoGmGC71qVV07GQftFSINZB4IZxEjg5Oa00drCdKH0Gqmz1cBtRg8f7be56askbDw==","signature_status":"signed_v1","signed_at":"2026-06-11T01:09:56.384070Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.11565","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2e5a38113a6ebaed32c09c51962a491ee4cbcbacfb297580ccc9fe91185a3c69","sha256:60f8a83c16bb5c0bdc478976b5d0f6c2ce1805df4b2107d7094aaab0d8880a41"],"state_sha256":"9bbe257faf571e1551be4dae79321dbe5441e7c5071554530a2db441c850e644"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1U/b2RyOLukEdy7c94afwfrr6JZhr8lK89QE+rGdffbcXHecKnub87GYCnQjij849tkMTM9L0AxmiTeJ8fclAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T01:25:11.168052Z","bundle_sha256":"4889404ae343ca3c1d81d6057a357091476d419a5846a6388898fefd9123a289"}}