{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:KNV2EKEQMA5MIXBCH3PUWBSNZN","short_pith_number":"pith:KNV2EKEQ","canonical_record":{"source":{"id":"1804.04159","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T18:32:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8f520c5c162b49971c38a4e026a12940352f8e757308ab7d7077a158d2ce952b","abstract_canon_sha256":"6ee178cae05d4aa2f92992b9c1abd4d73d9513ff6a6068b014a2f7a72a3aee19"},"schema_version":"1.0"},"canonical_sha256":"536ba22890603ac45c223edf4b064dcb59993fa4906e986bdbc8d7c5e9be7640","source":{"kind":"arxiv","id":"1804.04159","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.04159","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"arxiv_version","alias_value":"1804.04159v1","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.04159","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"pith_short_12","alias_value":"KNV2EKEQMA5M","created_at":"2026-05-18T12:32:33Z"},{"alias_kind":"pith_short_16","alias_value":"KNV2EKEQMA5MIXBC","created_at":"2026-05-18T12:32:33Z"},{"alias_kind":"pith_short_8","alias_value":"KNV2EKEQ","created_at":"2026-05-18T12:32:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:KNV2EKEQMA5MIXBCH3PUWBSNZN","target":"record","payload":{"canonical_record":{"source":{"id":"1804.04159","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T18:32:25Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8f520c5c162b49971c38a4e026a12940352f8e757308ab7d7077a158d2ce952b","abstract_canon_sha256":"6ee178cae05d4aa2f92992b9c1abd4d73d9513ff6a6068b014a2f7a72a3aee19"},"schema_version":"1.0"},"canonical_sha256":"536ba22890603ac45c223edf4b064dcb59993fa4906e986bdbc8d7c5e9be7640","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:58:14.393213Z","signature_b64":"i/dg8ZqT2fs7JJN3YG1EDIGqtE7fTIV8x9D7eQNypdOoV3IsK9mBuNIcg/Kw11m5osxX6iAMHCTDf3WJ+C0UDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"536ba22890603ac45c223edf4b064dcb59993fa4906e986bdbc8d7c5e9be7640","last_reissued_at":"2026-05-17T23:58:14.392671Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:58:14.392671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1804.04159","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m3rtQbLumyTXbkphhIw3jMYAs3eZwDLlsLkcDE1wmGivw7X+6drhhlII3t4+gbHldwsyvjFHu0YqYEQXSVCeAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:56:29.637334Z"},"content_sha256":"24e45ec791f3aeedb3d9d957169157983f85fb53b75c21bc06e706df4826d25d","schema_version":"1.0","event_id":"sha256:24e45ec791f3aeedb3d9d957169157983f85fb53b75c21bc06e706df4826d25d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:KNV2EKEQMA5MIXBCH3PUWBSNZN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Machine Learning DDoS Detection for Consumer Internet of Things Devices","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Nick Feamster, Noah Apthorpe, Rohan Doshi","submitted_at":"2018-04-11T18:32:25Z","abstract_excerpt":"An increasing number of Internet of Things (IoT) devices are connecting to the Internet, yet many of these devices are fundamentally insecure, exposing the Internet to a variety of attacks. Botnets such as Mirai have used insecure consumer IoT devices to conduct distributed denial of service (DDoS) attacks on critical Internet infrastructure. This motivates the development of new techniques to automatically detect consumer IoT attack traffic. In this paper, we demonstrate that using IoT-specific network behaviors (e.g. limited number of endpoints and regular time intervals between packets) to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.04159","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Lhl6wBi1pi/n99ulTfuYXim90La/D0GBwmWECfOaPK6agoI/CudoqDoMS5jTla2/Aa6R8KbwXhBLWSH9H6rGDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T21:56:29.637785Z"},"content_sha256":"1e8ce91aa564c2fe4a84a0ea2f78e1033a57f701f6927f86ca82fc2643357d43","schema_version":"1.0","event_id":"sha256:1e8ce91aa564c2fe4a84a0ea2f78e1033a57f701f6927f86ca82fc2643357d43"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/bundle.json","state_url":"https://pith.science/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T21:56:29Z","links":{"resolver":"https://pith.science/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN","bundle":"https://pith.science/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/bundle.json","state":"https://pith.science/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KNV2EKEQMA5MIXBCH3PUWBSNZN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:KNV2EKEQMA5MIXBCH3PUWBSNZN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6ee178cae05d4aa2f92992b9c1abd4d73d9513ff6a6068b014a2f7a72a3aee19","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T18:32:25Z","title_canon_sha256":"8f520c5c162b49971c38a4e026a12940352f8e757308ab7d7077a158d2ce952b"},"schema_version":"1.0","source":{"id":"1804.04159","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1804.04159","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"arxiv_version","alias_value":"1804.04159v1","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1804.04159","created_at":"2026-05-17T23:58:14Z"},{"alias_kind":"pith_short_12","alias_value":"KNV2EKEQMA5M","created_at":"2026-05-18T12:32:33Z"},{"alias_kind":"pith_short_16","alias_value":"KNV2EKEQMA5MIXBC","created_at":"2026-05-18T12:32:33Z"},{"alias_kind":"pith_short_8","alias_value":"KNV2EKEQ","created_at":"2026-05-18T12:32:33Z"}],"graph_snapshots":[{"event_id":"sha256:1e8ce91aa564c2fe4a84a0ea2f78e1033a57f701f6927f86ca82fc2643357d43","target":"graph","created_at":"2026-05-17T23:58:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"An increasing number of Internet of Things (IoT) devices are connecting to the Internet, yet many of these devices are fundamentally insecure, exposing the Internet to a variety of attacks. Botnets such as Mirai have used insecure consumer IoT devices to conduct distributed denial of service (DDoS) attacks on critical Internet infrastructure. This motivates the development of new techniques to automatically detect consumer IoT attack traffic. In this paper, we demonstrate that using IoT-specific network behaviors (e.g. limited number of endpoints and regular time intervals between packets) to ","authors_text":"Nick Feamster, Noah Apthorpe, Rohan Doshi","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T18:32:25Z","title":"Machine Learning DDoS Detection for Consumer Internet of Things Devices"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1804.04159","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:24e45ec791f3aeedb3d9d957169157983f85fb53b75c21bc06e706df4826d25d","target":"record","created_at":"2026-05-17T23:58:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6ee178cae05d4aa2f92992b9c1abd4d73d9513ff6a6068b014a2f7a72a3aee19","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-04-11T18:32:25Z","title_canon_sha256":"8f520c5c162b49971c38a4e026a12940352f8e757308ab7d7077a158d2ce952b"},"schema_version":"1.0","source":{"id":"1804.04159","kind":"arxiv","version":1}},"canonical_sha256":"536ba22890603ac45c223edf4b064dcb59993fa4906e986bdbc8d7c5e9be7640","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"536ba22890603ac45c223edf4b064dcb59993fa4906e986bdbc8d7c5e9be7640","first_computed_at":"2026-05-17T23:58:14.392671Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:58:14.392671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"i/dg8ZqT2fs7JJN3YG1EDIGqtE7fTIV8x9D7eQNypdOoV3IsK9mBuNIcg/Kw11m5osxX6iAMHCTDf3WJ+C0UDw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:58:14.393213Z","signed_message":"canonical_sha256_bytes"},"source_id":"1804.04159","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:24e45ec791f3aeedb3d9d957169157983f85fb53b75c21bc06e706df4826d25d","sha256:1e8ce91aa564c2fe4a84a0ea2f78e1033a57f701f6927f86ca82fc2643357d43"],"state_sha256":"7e695514848482c77dc8103e77ef996d22d1e73583a46e70f2f5412a977497fc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rBPO6P59rmCLkjcEy8X4ooOi1y8XqD6okCza6l9zAc8PsgvOspa03l/I3bayeuXIW6405FloK4rbOYP3K1OvCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T21:56:29.641254Z","bundle_sha256":"52f52d85470be5475bbd06d8de99bb10e17e8207330e2da4f105131ac3a06aae"}}