{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:KHG4HMO5WSV442EKKV733NPJTN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a5a7d7197730a8604cbf2b23e407bf979fbbf4d11cc2af460d998f4d93e48c83","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2014-01-16T04:59:06Z","title_canon_sha256":"f3cdb7f986ce6b97efe54ea88db1941c234c0747e41ebc9678a672f3701a1de3"},"schema_version":"1.0","source":{"id":"1401.3851","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1401.3851","created_at":"2026-05-18T03:02:06Z"},{"alias_kind":"arxiv_version","alias_value":"1401.3851v1","created_at":"2026-05-18T03:02:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1401.3851","created_at":"2026-05-18T03:02:06Z"},{"alias_kind":"pith_short_12","alias_value":"KHG4HMO5WSV4","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_16","alias_value":"KHG4HMO5WSV442EK","created_at":"2026-05-18T12:28:35Z"},{"alias_kind":"pith_short_8","alias_value":"KHG4HMO5","created_at":"2026-05-18T12:28:35Z"}],"graph_snapshots":[{"event_id":"sha256:deb568cd41c99d6322bd1cd2544d2192a6660996cfa21d559268763e0b78631b","target":"graph","created_at":"2026-05-18T03:02:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Intrusion detection systems (IDSs) fall into two high-level categories: network-based systems (NIDS) that monitor network behaviors, and host-based systems (HIDS) that monitor system calls. In this work, we present a general technique for both systems. We use anomaly detection, which identifies patterns not conforming to a historic norm. In both types of systems, the rates of change vary dramatically over time (due to burstiness) and over components (due to service difference). To efficiently model such systems, we use continuous time Bayesian networks (CTBNs) and avoid specifying a fixed upda","authors_text":"Christian R. Shelton, Jing Xu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2014-01-16T04:59:06Z","title":"Intrusion Detection using Continuous Time Bayesian Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1401.3851","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a2c3264f94832f9adfd58f37e1484e9e459cd0b83404e1db2e49ef41bad6cf35","target":"record","created_at":"2026-05-18T03:02:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a5a7d7197730a8604cbf2b23e407bf979fbbf4d11cc2af460d998f4d93e48c83","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.AI","submitted_at":"2014-01-16T04:59:06Z","title_canon_sha256":"f3cdb7f986ce6b97efe54ea88db1941c234c0747e41ebc9678a672f3701a1de3"},"schema_version":"1.0","source":{"id":"1401.3851","kind":"arxiv","version":1}},"canonical_sha256":"51cdc3b1ddb4abce688a557fbdb5e99b70e6d2e41676aafe3bb2c90d5d45ac35","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"51cdc3b1ddb4abce688a557fbdb5e99b70e6d2e41676aafe3bb2c90d5d45ac35","first_computed_at":"2026-05-18T03:02:06.601968Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:02:06.601968Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"78dwSlTE4pphsnm5d5Kjuzz3fYBNUKW4sQmpAHep+R3Gl0u0hJnQOs1WQAxmZNw78WRiipe7Jrq7QFnYA4VOBA==","signature_status":"signed_v1","signed_at":"2026-05-18T03:02:06.602941Z","signed_message":"canonical_sha256_bytes"},"source_id":"1401.3851","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a2c3264f94832f9adfd58f37e1484e9e459cd0b83404e1db2e49ef41bad6cf35","sha256:deb568cd41c99d6322bd1cd2544d2192a6660996cfa21d559268763e0b78631b"],"state_sha256":"696c8ae4f0011899c54a851108729abe84ff3c127c3088eeb6de6b71048666a3"}