{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:M345S6KFXKRAHDRGUPXUR7L5LF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"21a227a80d5f46530cbf4548ea01d28230f6e37e6688a1a609aa115c0053338e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-25T04:40:20Z","title_canon_sha256":"2222967d2a645e4ce271a9b5fa0b0480c59b1b447f8e1d91dbc0da7510c6d2aa"},"schema_version":"1.0","source":{"id":"1907.10835","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.10835","created_at":"2026-05-17T23:39:34Z"},{"alias_kind":"arxiv_version","alias_value":"1907.10835v1","created_at":"2026-05-17T23:39:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.10835","created_at":"2026-05-17T23:39:34Z"},{"alias_kind":"pith_short_12","alias_value":"M345S6KFXKRA","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"M345S6KFXKRAHDRG","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"M345S6KF","created_at":"2026-05-18T12:33:21Z"}],"graph_snapshots":[{"event_id":"sha256:c8653f498bc66e2296dd138db3c705c14b5b568cd3defd9c7578b9b6a61fccc7","target":"graph","created_at":"2026-05-17T23:39:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Decrypting and inspecting encrypted malicious communications may assist crime detection and prevention. Access to client or server memory enables the discovery of artefacts required for decrypting secure communications. This paper develops the MemDecrypt framework to investigate the discovery of encrypted artefacts in memory and applies the methodology to decrypting the secure communications of virtual machines. For Secure Shell, used for secure remote server management, file transfer, and tunnelling inter alia, MemDecrypt experiments rapidly yield AES-encrypted details for a live secure file ","authors_text":"Gordon Russell, Peter McLaren, William J.Buchanan, Zhiyuan Tan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-25T04:40:20Z","title":"Decrypting live SSH traffic in virtual environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.10835","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1a57b359131ab8e58cabfd40150bc5950f4ea987b08db523f632873dbb6e0782","target":"record","created_at":"2026-05-17T23:39:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"21a227a80d5f46530cbf4548ea01d28230f6e37e6688a1a609aa115c0053338e","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-07-25T04:40:20Z","title_canon_sha256":"2222967d2a645e4ce271a9b5fa0b0480c59b1b447f8e1d91dbc0da7510c6d2aa"},"schema_version":"1.0","source":{"id":"1907.10835","kind":"arxiv","version":1}},"canonical_sha256":"66f9d97945baa2038e26a3ef48fd7d5970bec13225db510dd74130e7cf119264","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"66f9d97945baa2038e26a3ef48fd7d5970bec13225db510dd74130e7cf119264","first_computed_at":"2026-05-17T23:39:34.374606Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:39:34.374606Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6vlW0cxKHs1TukJcZdho5Rl+teR62bE1o2wH5wn5C/nYZJCztcV+7q/VFE2cRhgLhDuDaKiZCXndZP4ZjZRNCw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:39:34.375119Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.10835","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1a57b359131ab8e58cabfd40150bc5950f4ea987b08db523f632873dbb6e0782","sha256:c8653f498bc66e2296dd138db3c705c14b5b568cd3defd9c7578b9b6a61fccc7"],"state_sha256":"0739d72cf8091040244b07ad95cd13cd743d4aaebc8c392182d235920f971cf4"}