{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:O6K7ZPW7QKZIYTIBTEINN3QGVV","short_pith_number":"pith:O6K7ZPW7","canonical_record":{"source":{"id":"2505.16261","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-22T05:50:39Z","cross_cats_sorted":[],"title_canon_sha256":"a4cb9c99541895e254373fed08322db09d9416b32841716ad34769707bc49951","abstract_canon_sha256":"f8f3999b9aad9ae7f198465f57f065a5c4656d382beee33ff151d42cc018dae8"},"schema_version":"1.0"},"canonical_sha256":"7795fcbedf82b28c4d019910d6ee06ad6aa6d9897f122d5157cd9b558cf49880","source":{"kind":"arxiv","id":"2505.16261","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16261","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16261v1","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16261","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_12","alias_value":"O6K7ZPW7QKZI","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_16","alias_value":"O6K7ZPW7QKZIYTIB","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_8","alias_value":"O6K7ZPW7","created_at":"2026-07-05T11:07:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:O6K7ZPW7QKZIYTIBTEINN3QGVV","target":"record","payload":{"canonical_record":{"source":{"id":"2505.16261","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-22T05:50:39Z","cross_cats_sorted":[],"title_canon_sha256":"a4cb9c99541895e254373fed08322db09d9416b32841716ad34769707bc49951","abstract_canon_sha256":"f8f3999b9aad9ae7f198465f57f065a5c4656d382beee33ff151d42cc018dae8"},"schema_version":"1.0"},"canonical_sha256":"7795fcbedf82b28c4d019910d6ee06ad6aa6d9897f122d5157cd9b558cf49880","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:07:32.345934Z","signature_b64":"KFQqX2UdCmMFMKIhCmKPUEgIvfRfxiNpcQ5hyuP54dngEbpU+XHltDr9SFylgKeRF0IUvs3qRQl0FMMXK/z8Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7795fcbedf82b28c4d019910d6ee06ad6aa6d9897f122d5157cd9b558cf49880","last_reissued_at":"2026-07-05T11:07:32.345551Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:07:32.345551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.16261","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"twI7bCpBatUg+15NGqY7jJ+zEIooAULbZzIs9m7pC/mEwu1RCUCDMY4czB2jBDnDFpFOCCdWgg6tpveUjVdHCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:05:25.250367Z"},"content_sha256":"80aeec4e118991d7935c5ec4ff2bd7f8fb87584bfe84d8c3518181558d398621","schema_version":"1.0","event_id":"sha256:80aeec4e118991d7935c5ec4ff2bd7f8fb87584bfe84d8c3518181558d398621"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:O6K7ZPW7QKZIYTIBTEINN3QGVV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Interpretable Anomaly Detection in Encrypted Traffic Using SHAP with Machine Learning Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Aayush Kashyap, Aswani Kumar Cherukuri, Kalindi Singh","submitted_at":"2025-05-22T05:50:39Z","abstract_excerpt":"The widespread adoption of encrypted communication protocols such as HTTPS and TLS has enhanced data privacy but also rendered traditional anomaly detection techniques less effective, as they often rely on inspecting unencrypted payloads. This study aims to develop an interpretable machine learning-based framework for anomaly detection in encrypted network traffic. This study proposes a model-agnostic framework that integrates multiple machine learning classifiers, with SHapley Additive exPlanations SHAP to ensure post-hoc model interpretability. The models are trained and evaluated on three b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16261","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.16261/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:07:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9//v+XTxBWq1QwZzoYvifE6MXgM0LayzmIa0mAogwvXne+WWDX525pWu2pxuSt4Sgs360jMsR4OA79NpzG1BCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:05:25.251119Z"},"content_sha256":"6cf7139688d45152396a8aa43d2c69e65cd9cefb96154f169b544912c68e29a2","schema_version":"1.0","event_id":"sha256:6cf7139688d45152396a8aa43d2c69e65cd9cefb96154f169b544912c68e29a2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/bundle.json","state_url":"https://pith.science/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T17:05:25Z","links":{"resolver":"https://pith.science/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV","bundle":"https://pith.science/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/bundle.json","state":"https://pith.science/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O6K7ZPW7QKZIYTIBTEINN3QGVV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:O6K7ZPW7QKZIYTIBTEINN3QGVV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f8f3999b9aad9ae7f198465f57f065a5c4656d382beee33ff151d42cc018dae8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-22T05:50:39Z","title_canon_sha256":"a4cb9c99541895e254373fed08322db09d9416b32841716ad34769707bc49951"},"schema_version":"1.0","source":{"id":"2505.16261","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.16261","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"arxiv_version","alias_value":"2505.16261v1","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.16261","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_12","alias_value":"O6K7ZPW7QKZI","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_16","alias_value":"O6K7ZPW7QKZIYTIB","created_at":"2026-07-05T11:07:32Z"},{"alias_kind":"pith_short_8","alias_value":"O6K7ZPW7","created_at":"2026-07-05T11:07:32Z"}],"graph_snapshots":[{"event_id":"sha256:6cf7139688d45152396a8aa43d2c69e65cd9cefb96154f169b544912c68e29a2","target":"graph","created_at":"2026-07-05T11:07:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.16261/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread adoption of encrypted communication protocols such as HTTPS and TLS has enhanced data privacy but also rendered traditional anomaly detection techniques less effective, as they often rely on inspecting unencrypted payloads. This study aims to develop an interpretable machine learning-based framework for anomaly detection in encrypted network traffic. This study proposes a model-agnostic framework that integrates multiple machine learning classifiers, with SHapley Additive exPlanations SHAP to ensure post-hoc model interpretability. The models are trained and evaluated on three b","authors_text":"Aayush Kashyap, Aswani Kumar Cherukuri, Kalindi Singh","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-22T05:50:39Z","title":"Interpretable Anomaly Detection in Encrypted Traffic Using SHAP with Machine Learning Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.16261","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:80aeec4e118991d7935c5ec4ff2bd7f8fb87584bfe84d8c3518181558d398621","target":"record","created_at":"2026-07-05T11:07:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f8f3999b9aad9ae7f198465f57f065a5c4656d382beee33ff151d42cc018dae8","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-05-22T05:50:39Z","title_canon_sha256":"a4cb9c99541895e254373fed08322db09d9416b32841716ad34769707bc49951"},"schema_version":"1.0","source":{"id":"2505.16261","kind":"arxiv","version":1}},"canonical_sha256":"7795fcbedf82b28c4d019910d6ee06ad6aa6d9897f122d5157cd9b558cf49880","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7795fcbedf82b28c4d019910d6ee06ad6aa6d9897f122d5157cd9b558cf49880","first_computed_at":"2026-07-05T11:07:32.345551Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:07:32.345551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KFQqX2UdCmMFMKIhCmKPUEgIvfRfxiNpcQ5hyuP54dngEbpU+XHltDr9SFylgKeRF0IUvs3qRQl0FMMXK/z8Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:07:32.345934Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.16261","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:80aeec4e118991d7935c5ec4ff2bd7f8fb87584bfe84d8c3518181558d398621","sha256:6cf7139688d45152396a8aa43d2c69e65cd9cefb96154f169b544912c68e29a2"],"state_sha256":"463957c100be259708ad067af55157a75beea928cac7694de401bc9a6db7a0e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Z1laA/GvBTNq5YZfyeUDvqmzTKHg9x6WZ+PQK5/xy22HXHqclaDH5vIVu2+yz4zNN5Z59g19fhfXfajvU0xWBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T17:05:25.270117Z","bundle_sha256":"bf3e6116ae4b29c7607e5ad017981fe36d398d659d0ea0f366d6375031f0c98f"}}