{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:NT7Z6UJAMUD2C64UNRVRM4GHUD","short_pith_number":"pith:NT7Z6UJA","canonical_record":{"source":{"id":"2108.12479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-08-27T19:57:18Z","cross_cats_sorted":[],"title_canon_sha256":"8e5b1ff1da70e9c6ccd3135cc1498c3dbba9330e458c44081ecfbaef033facff","abstract_canon_sha256":"ee789634971e550c52f551963ec105e461b42dff554b27e1a9d2bf57fed9fe1c"},"schema_version":"1.0"},"canonical_sha256":"6cff9f51206507a17b946c6b1670c7a0d1a856f62f0b0303dafdadd88930e5dc","source":{"kind":"arxiv","id":"2108.12479","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12479","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12479v1","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12479","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_12","alias_value":"NT7Z6UJAMUD2","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_16","alias_value":"NT7Z6UJAMUD2C64U","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_8","alias_value":"NT7Z6UJA","created_at":"2026-07-05T03:09:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:NT7Z6UJAMUD2C64UNRVRM4GHUD","target":"record","payload":{"canonical_record":{"source":{"id":"2108.12479","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-08-27T19:57:18Z","cross_cats_sorted":[],"title_canon_sha256":"8e5b1ff1da70e9c6ccd3135cc1498c3dbba9330e458c44081ecfbaef033facff","abstract_canon_sha256":"ee789634971e550c52f551963ec105e461b42dff554b27e1a9d2bf57fed9fe1c"},"schema_version":"1.0"},"canonical_sha256":"6cff9f51206507a17b946c6b1670c7a0d1a856f62f0b0303dafdadd88930e5dc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:09:32.422530Z","signature_b64":"uDrO8X9C6ro6YPLRVbqrz/yKmqd0DC8k5wqKY+IgxzN6oCRbI3EMdTQyVBpmp0QUmzXe1CrHlQARV2hqbRVrBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6cff9f51206507a17b946c6b1670c7a0d1a856f62f0b0303dafdadd88930e5dc","last_reissued_at":"2026-07-05T03:09:32.422185Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:09:32.422185Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.12479","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:09:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"votP1JQI1bGMNXoJ1j5nM33CX+qK27lImrHpQJa6vBYb3SwhYph+jIfPcEPWUicvBYu2X7pbk3adqwGvZB5IDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T20:56:32.769188Z"},"content_sha256":"6f195a2f36a82852ceaec69b220d3bca9d9a10a69343e8bc7bb9a2b1a776a69d","schema_version":"1.0","event_id":"sha256:6f195a2f36a82852ceaec69b220d3bca9d9a10a69343e8bc7bb9a2b1a776a69d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:NT7Z6UJAMUD2C64UNRVRM4GHUD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Modeling and Analyzing Attacker Behavior in IoT Botnet using Temporal Convolution Network (TCN)","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Farhan Sadique, Shamik Sengupta","submitted_at":"2021-08-27T19:57:18Z","abstract_excerpt":"Traditional reactive approach of blacklisting botnets fails to adapt to the rapidly evolving landscape of cyberattacks. An automated and proactive approach to detect and block botnet hosts will immensely benefit the industry. Behavioral analysis of attackers is shown to be effective against a wide variety of attack types. Previous works, however, focus solely on anomalies in network traffic to detect bots and botnet. In this work we take a more robust approach of analyzing the heterogeneous events including network traffic, file download events, SSH logins and chain of commands input by attack"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12479","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.12479/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:09:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zEzIBw+4Bnv8b+xx4Vl1dxJdsDFzv/eNsrmnOHOcDfMj72V3UQ9et/7MDtWvwY1t3GWmDKYpaMs2/IwucQKFBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T20:56:32.769576Z"},"content_sha256":"48bf2728d3b1c64618bf47f68eb466973ff20297e73d25054866eada3d6d6e63","schema_version":"1.0","event_id":"sha256:48bf2728d3b1c64618bf47f68eb466973ff20297e73d25054866eada3d6d6e63"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/bundle.json","state_url":"https://pith.science/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T20:56:32Z","links":{"resolver":"https://pith.science/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD","bundle":"https://pith.science/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/bundle.json","state":"https://pith.science/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NT7Z6UJAMUD2C64UNRVRM4GHUD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:NT7Z6UJAMUD2C64UNRVRM4GHUD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ee789634971e550c52f551963ec105e461b42dff554b27e1a9d2bf57fed9fe1c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-08-27T19:57:18Z","title_canon_sha256":"8e5b1ff1da70e9c6ccd3135cc1498c3dbba9330e458c44081ecfbaef033facff"},"schema_version":"1.0","source":{"id":"2108.12479","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12479","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12479v1","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12479","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_12","alias_value":"NT7Z6UJAMUD2","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_16","alias_value":"NT7Z6UJAMUD2C64U","created_at":"2026-07-05T03:09:32Z"},{"alias_kind":"pith_short_8","alias_value":"NT7Z6UJA","created_at":"2026-07-05T03:09:32Z"}],"graph_snapshots":[{"event_id":"sha256:48bf2728d3b1c64618bf47f68eb466973ff20297e73d25054866eada3d6d6e63","target":"graph","created_at":"2026-07-05T03:09:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.12479/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Traditional reactive approach of blacklisting botnets fails to adapt to the rapidly evolving landscape of cyberattacks. An automated and proactive approach to detect and block botnet hosts will immensely benefit the industry. Behavioral analysis of attackers is shown to be effective against a wide variety of attack types. Previous works, however, focus solely on anomalies in network traffic to detect bots and botnet. In this work we take a more robust approach of analyzing the heterogeneous events including network traffic, file download events, SSH logins and chain of commands input by attack","authors_text":"Farhan Sadique, Shamik Sengupta","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-08-27T19:57:18Z","title":"Modeling and Analyzing Attacker Behavior in IoT Botnet using Temporal Convolution Network (TCN)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12479","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6f195a2f36a82852ceaec69b220d3bca9d9a10a69343e8bc7bb9a2b1a776a69d","target":"record","created_at":"2026-07-05T03:09:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ee789634971e550c52f551963ec105e461b42dff554b27e1a9d2bf57fed9fe1c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-08-27T19:57:18Z","title_canon_sha256":"8e5b1ff1da70e9c6ccd3135cc1498c3dbba9330e458c44081ecfbaef033facff"},"schema_version":"1.0","source":{"id":"2108.12479","kind":"arxiv","version":1}},"canonical_sha256":"6cff9f51206507a17b946c6b1670c7a0d1a856f62f0b0303dafdadd88930e5dc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6cff9f51206507a17b946c6b1670c7a0d1a856f62f0b0303dafdadd88930e5dc","first_computed_at":"2026-07-05T03:09:32.422185Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:09:32.422185Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"uDrO8X9C6ro6YPLRVbqrz/yKmqd0DC8k5wqKY+IgxzN6oCRbI3EMdTQyVBpmp0QUmzXe1CrHlQARV2hqbRVrBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:09:32.422530Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.12479","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6f195a2f36a82852ceaec69b220d3bca9d9a10a69343e8bc7bb9a2b1a776a69d","sha256:48bf2728d3b1c64618bf47f68eb466973ff20297e73d25054866eada3d6d6e63"],"state_sha256":"d5d041b45348bb8201a24a73f5232a2f47be3b2e93ecb729db47903253b5d094"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"N8RThpX5DTkL3Hya+tCcDlZGTaW36m1AXmWN2b7/SWkkR7UKP2rJcX0tsH2n5HBhQIHzOGWFjU4guKaLZgDACA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T20:56:32.773236Z","bundle_sha256":"64274281c255e18a61a4c96a481ec83e3076ddf1ffa24a6c2692c180a601f477"}}