{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:NTLLLSSWNK43IFV5AINC3C2AS4","short_pith_number":"pith:NTLLLSSW","canonical_record":{"source":{"id":"2509.01375","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-01T11:21:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fd1aed45e8d444306b6ecc8eacc35126ed92b9284c94111f77a7ae2dab42b451","abstract_canon_sha256":"db38c03d1fb4683b171523b165f2bbc71689647863605ff9810a635ef8b34114"},"schema_version":"1.0"},"canonical_sha256":"6cd6b5ca566ab9b416bd021a2d8b409736993f69e338804d0ace554b1a6f8e67","source":{"kind":"arxiv","id":"2509.01375","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01375","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01375v1","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01375","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_12","alias_value":"NTLLLSSWNK43","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_16","alias_value":"NTLLLSSWNK43IFV5","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_8","alias_value":"NTLLLSSW","created_at":"2026-07-05T12:02:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:NTLLLSSWNK43IFV5AINC3C2AS4","target":"record","payload":{"canonical_record":{"source":{"id":"2509.01375","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-01T11:21:06Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"fd1aed45e8d444306b6ecc8eacc35126ed92b9284c94111f77a7ae2dab42b451","abstract_canon_sha256":"db38c03d1fb4683b171523b165f2bbc71689647863605ff9810a635ef8b34114"},"schema_version":"1.0"},"canonical_sha256":"6cd6b5ca566ab9b416bd021a2d8b409736993f69e338804d0ace554b1a6f8e67","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:02:59.383020Z","signature_b64":"49Gc8xUsTy4oscEEfOzPt7Dh1qiLtevdRbZyYmW/1R5TcA3YoPn7jP/BAZipxWpL85b4FQOUVuz/38PNQ4JXCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6cd6b5ca566ab9b416bd021a2d8b409736993f69e338804d0ace554b1a6f8e67","last_reissued_at":"2026-07-05T12:02:59.382409Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:02:59.382409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2509.01375","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zu6VowdpzdLGB76p5CO/osB61hbn6mHQdKZX01ZxADOJgg8Ih+w7QxDpcD1/J1T+El2vVFQFCDu0srekiVbhBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:44:43.452931Z"},"content_sha256":"824b386b1120fd99dca30e263410229c549e98d30dcabaf5557d75bc094e93ad","schema_version":"1.0","event_id":"sha256:824b386b1120fd99dca30e263410229c549e98d30dcabaf5557d75bc094e93ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:NTLLLSSWNK43IFV5AINC3C2AS4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Anomaly detection in network flows using unsupervised online machine learning","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Adri\\'an Campazas-Vega, Alberto Miguel-Diez, \\'Angel Manuel Guerrero-Higueras, Claudia \\'Alvarez-Aparicio, Vicente Matell\\'an-Olivera","submitted_at":"2025-09-01T11:21:06Z","abstract_excerpt":"Nowadays, the volume of network traffic continues to grow, along with the frequency and sophistication of attacks. This scenario highlights the need for solutions capable of continuously adapting, since network behavior is dynamic and changes over time. This work presents an anomaly detection model for network flows using unsupervised machine learning with online learning capabilities. This approach allows the system to dynamically learn the normal behavior of the network and detect deviations without requiring labeled data, which is particularly useful in real-world environments where traffic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01375","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.01375/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:02:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cFa8CxWsP/DQvxUjlCiIbroCzGE2BvsBP5S50DkXPA3JlxVHJU1VNg+tIAgFTddaJf8anwO0wkDY9jw5sO5mAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T07:44:43.453460Z"},"content_sha256":"a33de494ee7b6aab1f0dfc34763935322a5b0527ce741f107d21ef42dc13eb36","schema_version":"1.0","event_id":"sha256:a33de494ee7b6aab1f0dfc34763935322a5b0527ce741f107d21ef42dc13eb36"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NTLLLSSWNK43IFV5AINC3C2AS4/bundle.json","state_url":"https://pith.science/pith/NTLLLSSWNK43IFV5AINC3C2AS4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NTLLLSSWNK43IFV5AINC3C2AS4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T07:44:43Z","links":{"resolver":"https://pith.science/pith/NTLLLSSWNK43IFV5AINC3C2AS4","bundle":"https://pith.science/pith/NTLLLSSWNK43IFV5AINC3C2AS4/bundle.json","state":"https://pith.science/pith/NTLLLSSWNK43IFV5AINC3C2AS4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NTLLLSSWNK43IFV5AINC3C2AS4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:NTLLLSSWNK43IFV5AINC3C2AS4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"db38c03d1fb4683b171523b165f2bbc71689647863605ff9810a635ef8b34114","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-01T11:21:06Z","title_canon_sha256":"fd1aed45e8d444306b6ecc8eacc35126ed92b9284c94111f77a7ae2dab42b451"},"schema_version":"1.0","source":{"id":"2509.01375","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2509.01375","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"arxiv_version","alias_value":"2509.01375v1","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01375","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_12","alias_value":"NTLLLSSWNK43","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_16","alias_value":"NTLLLSSWNK43IFV5","created_at":"2026-07-05T12:02:59Z"},{"alias_kind":"pith_short_8","alias_value":"NTLLLSSW","created_at":"2026-07-05T12:02:59Z"}],"graph_snapshots":[{"event_id":"sha256:a33de494ee7b6aab1f0dfc34763935322a5b0527ce741f107d21ef42dc13eb36","target":"graph","created_at":"2026-07-05T12:02:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2509.01375/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Nowadays, the volume of network traffic continues to grow, along with the frequency and sophistication of attacks. This scenario highlights the need for solutions capable of continuously adapting, since network behavior is dynamic and changes over time. This work presents an anomaly detection model for network flows using unsupervised machine learning with online learning capabilities. This approach allows the system to dynamically learn the normal behavior of the network and detect deviations without requiring labeled data, which is particularly useful in real-world environments where traffic","authors_text":"Adri\\'an Campazas-Vega, Alberto Miguel-Diez, \\'Angel Manuel Guerrero-Higueras, Claudia \\'Alvarez-Aparicio, Vicente Matell\\'an-Olivera","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-01T11:21:06Z","title":"Anomaly detection in network flows using unsupervised online machine learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01375","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:824b386b1120fd99dca30e263410229c549e98d30dcabaf5557d75bc094e93ad","target":"record","created_at":"2026-07-05T12:02:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"db38c03d1fb4683b171523b165f2bbc71689647863605ff9810a635ef8b34114","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-09-01T11:21:06Z","title_canon_sha256":"fd1aed45e8d444306b6ecc8eacc35126ed92b9284c94111f77a7ae2dab42b451"},"schema_version":"1.0","source":{"id":"2509.01375","kind":"arxiv","version":1}},"canonical_sha256":"6cd6b5ca566ab9b416bd021a2d8b409736993f69e338804d0ace554b1a6f8e67","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6cd6b5ca566ab9b416bd021a2d8b409736993f69e338804d0ace554b1a6f8e67","first_computed_at":"2026-07-05T12:02:59.382409Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:02:59.382409Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"49Gc8xUsTy4oscEEfOzPt7Dh1qiLtevdRbZyYmW/1R5TcA3YoPn7jP/BAZipxWpL85b4FQOUVuz/38PNQ4JXCA==","signature_status":"signed_v1","signed_at":"2026-07-05T12:02:59.383020Z","signed_message":"canonical_sha256_bytes"},"source_id":"2509.01375","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:824b386b1120fd99dca30e263410229c549e98d30dcabaf5557d75bc094e93ad","sha256:a33de494ee7b6aab1f0dfc34763935322a5b0527ce741f107d21ef42dc13eb36"],"state_sha256":"678f8eef879f1214a2fada240c0aeed1c1a83ca35f8b5b7eb9c84069ceda5015"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5B2HPru/WaTuabdrMrzjxgiFmELewWfQSJ8tpnQvCt9CSbxWIDdHAT7nCVoCExBCxqoqcX9B8hR4t4/zCxF1Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T07:44:43.457932Z","bundle_sha256":"1f38b62c3fb55912b04ffc68299f56f5a379d83bbc174c216c73b70eae070af9"}}