{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:ORXT5LWOZC6XNOTGKLAHB7JCNX","short_pith_number":"pith:ORXT5LWO","canonical_record":{"source":{"id":"2009.09959","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-21T15:34:07Z","cross_cats_sorted":[],"title_canon_sha256":"eb6dc9fb2f877c38c884418ff5854573ac254f1bf99434ba385a3199cefb243d","abstract_canon_sha256":"30e7830e209effb9f4f06ae1fe93ca3e6d0d7c92886e9d321216d06cb7e3a192"},"schema_version":"1.0"},"canonical_sha256":"746f3eaecec8bd76ba6652c070fd226df468124ab0ff3249d27ca2cad5aeafe0","source":{"kind":"arxiv","id":"2009.09959","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.09959","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"arxiv_version","alias_value":"2009.09959v1","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.09959","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_12","alias_value":"ORXT5LWOZC6X","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_16","alias_value":"ORXT5LWOZC6XNOTG","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_8","alias_value":"ORXT5LWO","created_at":"2026-07-05T01:36:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:ORXT5LWOZC6XNOTGKLAHB7JCNX","target":"record","payload":{"canonical_record":{"source":{"id":"2009.09959","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-21T15:34:07Z","cross_cats_sorted":[],"title_canon_sha256":"eb6dc9fb2f877c38c884418ff5854573ac254f1bf99434ba385a3199cefb243d","abstract_canon_sha256":"30e7830e209effb9f4f06ae1fe93ca3e6d0d7c92886e9d321216d06cb7e3a192"},"schema_version":"1.0"},"canonical_sha256":"746f3eaecec8bd76ba6652c070fd226df468124ab0ff3249d27ca2cad5aeafe0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:36:54.850540Z","signature_b64":"dwds7CyTSIMv6ov0KB7Hgjq8OfnTZcVxQrKY70afHSG8BwTSqQC1ComqqaAYP01AboyH5NTmQen5HH/Qk48YCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"746f3eaecec8bd76ba6652c070fd226df468124ab0ff3249d27ca2cad5aeafe0","last_reissued_at":"2026-07-05T01:36:54.850127Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:36:54.850127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.09959","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:36:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NsJxjk599nJT//v6zUjYmaE6ws0jNOtQ/k4nK5Y1x0MWKRRGUrBD/101gP8VLneILK9Ifhbyo+FFShozbFjNDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T23:31:07.657353Z"},"content_sha256":"0a663ae8cede985ac69df71cb514d4ca4e822946f19d2d56431fe44319e53ace","schema_version":"1.0","event_id":"sha256:0a663ae8cede985ac69df71cb514d4ca4e822946f19d2d56431fe44319e53ace"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:ORXT5LWOZC6XNOTGKLAHB7JCNX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Domain-Embeddings Based DGA Detection with Incremental Training Method","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiahai Yang, Xiaoqing Sun, Xin Fang, Xinran Liu","submitted_at":"2020-09-21T15:34:07Z","abstract_excerpt":"DGA-based botnet, which uses Domain Generation Algorithms (DGAs) to evade supervision, has become a part of the most destructive threats to network security. Over the past decades, a wealth of defense mechanisms focusing on domain features have emerged to address the problem. Nonetheless, DGA detection remains a daunting and challenging task due to the big data nature of Internet traffic and the potential fact that the linguistic features extracted only from the domain names are insufficient and the enemies could easily forge them to disturb detection. In this paper, we propose a novel DGA det"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.09959","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.09959/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:36:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QLPL6MSQb9iX8OVm73a0AkmXG/Y9xi19U7oqZU114CNmwyiMi38PgdmNt+BgGIgI1EG8KkscoAjUGopMLuL9Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T23:31:07.657720Z"},"content_sha256":"19a182a27cb34ae345157dc767cfd8d73319cc55baa3bb0708fd4564764eccd6","schema_version":"1.0","event_id":"sha256:19a182a27cb34ae345157dc767cfd8d73319cc55baa3bb0708fd4564764eccd6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/bundle.json","state_url":"https://pith.science/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T23:31:07Z","links":{"resolver":"https://pith.science/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX","bundle":"https://pith.science/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/bundle.json","state":"https://pith.science/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ORXT5LWOZC6XNOTGKLAHB7JCNX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:ORXT5LWOZC6XNOTGKLAHB7JCNX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"30e7830e209effb9f4f06ae1fe93ca3e6d0d7c92886e9d321216d06cb7e3a192","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-21T15:34:07Z","title_canon_sha256":"eb6dc9fb2f877c38c884418ff5854573ac254f1bf99434ba385a3199cefb243d"},"schema_version":"1.0","source":{"id":"2009.09959","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.09959","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"arxiv_version","alias_value":"2009.09959v1","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.09959","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_12","alias_value":"ORXT5LWOZC6X","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_16","alias_value":"ORXT5LWOZC6XNOTG","created_at":"2026-07-05T01:36:54Z"},{"alias_kind":"pith_short_8","alias_value":"ORXT5LWO","created_at":"2026-07-05T01:36:54Z"}],"graph_snapshots":[{"event_id":"sha256:19a182a27cb34ae345157dc767cfd8d73319cc55baa3bb0708fd4564764eccd6","target":"graph","created_at":"2026-07-05T01:36:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.09959/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"DGA-based botnet, which uses Domain Generation Algorithms (DGAs) to evade supervision, has become a part of the most destructive threats to network security. Over the past decades, a wealth of defense mechanisms focusing on domain features have emerged to address the problem. Nonetheless, DGA detection remains a daunting and challenging task due to the big data nature of Internet traffic and the potential fact that the linguistic features extracted only from the domain names are insufficient and the enemies could easily forge them to disturb detection. In this paper, we propose a novel DGA det","authors_text":"Jiahai Yang, Xiaoqing Sun, Xin Fang, Xinran Liu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-21T15:34:07Z","title":"Domain-Embeddings Based DGA Detection with Incremental Training Method"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.09959","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a663ae8cede985ac69df71cb514d4ca4e822946f19d2d56431fe44319e53ace","target":"record","created_at":"2026-07-05T01:36:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"30e7830e209effb9f4f06ae1fe93ca3e6d0d7c92886e9d321216d06cb7e3a192","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-21T15:34:07Z","title_canon_sha256":"eb6dc9fb2f877c38c884418ff5854573ac254f1bf99434ba385a3199cefb243d"},"schema_version":"1.0","source":{"id":"2009.09959","kind":"arxiv","version":1}},"canonical_sha256":"746f3eaecec8bd76ba6652c070fd226df468124ab0ff3249d27ca2cad5aeafe0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"746f3eaecec8bd76ba6652c070fd226df468124ab0ff3249d27ca2cad5aeafe0","first_computed_at":"2026-07-05T01:36:54.850127Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:36:54.850127Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dwds7CyTSIMv6ov0KB7Hgjq8OfnTZcVxQrKY70afHSG8BwTSqQC1ComqqaAYP01AboyH5NTmQen5HH/Qk48YCA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:36:54.850540Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.09959","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a663ae8cede985ac69df71cb514d4ca4e822946f19d2d56431fe44319e53ace","sha256:19a182a27cb34ae345157dc767cfd8d73319cc55baa3bb0708fd4564764eccd6"],"state_sha256":"b73e0e368298cccd7c12945771cb79a7d1a538839753b9d5d7bc26459c238abd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4mbgXdtpmUwDoCidHLtg6mMc12XhbaFhsGaicUoaE8QimvS2Boq2NgcEZN772mBOKq2LqVXuVjwrS+OJEtaADA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T23:31:07.659640Z","bundle_sha256":"d231a43a42cfb683e2ab4bd98c6147e71b5f50a40b67b69fbdde0520ca9cc972"}}