{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:PEVH2GT5G6ZXLAQANKYJ4TS4DD","short_pith_number":"pith:PEVH2GT5","canonical_record":{"source":{"id":"1908.04193","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2019-08-12T15:23:10Z","cross_cats_sorted":[],"title_canon_sha256":"4f4a88f72d130161a84f6af8cf41d239a7b0eac247bbd42f272569b80d6b92d2","abstract_canon_sha256":"136c490bebbf5389c07c320f24cca706866e6cdb6818f1f30955522a6af9b0dc"},"schema_version":"1.0"},"canonical_sha256":"792a7d1a7d37b37582006ab09e4e5c18e0caef925f20f66e191155b54ab80f93","source":{"kind":"arxiv","id":"1908.04193","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.04193","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"arxiv_version","alias_value":"1908.04193v2","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.04193","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_12","alias_value":"PEVH2GT5G6ZX","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_16","alias_value":"PEVH2GT5G6ZXLAQA","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_8","alias_value":"PEVH2GT5","created_at":"2026-07-04T23:55:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:PEVH2GT5G6ZXLAQANKYJ4TS4DD","target":"record","payload":{"canonical_record":{"source":{"id":"1908.04193","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2019-08-12T15:23:10Z","cross_cats_sorted":[],"title_canon_sha256":"4f4a88f72d130161a84f6af8cf41d239a7b0eac247bbd42f272569b80d6b92d2","abstract_canon_sha256":"136c490bebbf5389c07c320f24cca706866e6cdb6818f1f30955522a6af9b0dc"},"schema_version":"1.0"},"canonical_sha256":"792a7d1a7d37b37582006ab09e4e5c18e0caef925f20f66e191155b54ab80f93","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:55:13.412051Z","signature_b64":"YHRNMwcDNG7jP3QyqEKwADYjn/thhydJ89ZK26THmZ8LKJzVkkVwwsLbY6PC2ozQTLUWbLFT4e1wH6Aq9ThFAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"792a7d1a7d37b37582006ab09e4e5c18e0caef925f20f66e191155b54ab80f93","last_reissued_at":"2026-07-04T23:55:13.411380Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:55:13.411380Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.04193","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:55:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BHBDEQA8lgPYkcW5ZkavQlWicerBvr2cOHYfJbQgCNtojDt8rT7BC/V/13IBjplgJdzLvsaq6T/TFyXEO6pQDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:50:36.176714Z"},"content_sha256":"12c34b380e680e4ad21591e1e2951353edb82f5a31e504943a129c3606b3df53","schema_version":"1.0","event_id":"sha256:12c34b380e680e4ad21591e1e2951353edb82f5a31e504943a129c3606b3df53"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:PEVH2GT5G6ZXLAQANKYJ4TS4DD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Identifying and characterizing ZMap scans: a cryptanalytic approach","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Johan Mazel, R\\'emi Strullu","submitted_at":"2019-08-12T15:23:10Z","abstract_excerpt":"Network scanning tools play a major role in Internet security. They are used by both network security researchers and malicious actors to identify vulnerable machines exposed on the Internet. ZMap is one of the most common probing tools for high-speed Internet-wide scanning. We present novel identification methods based on the IPv4 iteration process of ZMap. These methods can be used to identify ZMap scans with a small number of addresses extracted from the scan. We conduct an experimental evaluation of these detection methods on synthetic, network telescope, and backbone traffic. We manage to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.04193","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.04193/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:55:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PLS+uRo9xpeUHAK9WRLo5JdpQyg+XD9m18ue9l+RuQrEID5i9EBx86VlVm+pJGWH4rRm+UkCMQoW4EaueRluBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:50:36.177224Z"},"content_sha256":"6a0e7b0d5b6a88d99c11467d961bdfc21a43254aca1791ae601f17eaadc9412d","schema_version":"1.0","event_id":"sha256:6a0e7b0d5b6a88d99c11467d961bdfc21a43254aca1791ae601f17eaadc9412d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/bundle.json","state_url":"https://pith.science/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T10:50:36Z","links":{"resolver":"https://pith.science/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD","bundle":"https://pith.science/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/bundle.json","state":"https://pith.science/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PEVH2GT5G6ZXLAQANKYJ4TS4DD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:PEVH2GT5G6ZXLAQANKYJ4TS4DD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"136c490bebbf5389c07c320f24cca706866e6cdb6818f1f30955522a6af9b0dc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2019-08-12T15:23:10Z","title_canon_sha256":"4f4a88f72d130161a84f6af8cf41d239a7b0eac247bbd42f272569b80d6b92d2"},"schema_version":"1.0","source":{"id":"1908.04193","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.04193","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"arxiv_version","alias_value":"1908.04193v2","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.04193","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_12","alias_value":"PEVH2GT5G6ZX","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_16","alias_value":"PEVH2GT5G6ZXLAQA","created_at":"2026-07-04T23:55:13Z"},{"alias_kind":"pith_short_8","alias_value":"PEVH2GT5","created_at":"2026-07-04T23:55:13Z"}],"graph_snapshots":[{"event_id":"sha256:6a0e7b0d5b6a88d99c11467d961bdfc21a43254aca1791ae601f17eaadc9412d","target":"graph","created_at":"2026-07-04T23:55:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.04193/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Network scanning tools play a major role in Internet security. They are used by both network security researchers and malicious actors to identify vulnerable machines exposed on the Internet. ZMap is one of the most common probing tools for high-speed Internet-wide scanning. We present novel identification methods based on the IPv4 iteration process of ZMap. These methods can be used to identify ZMap scans with a small number of addresses extracted from the scan. We conduct an experimental evaluation of these detection methods on synthetic, network telescope, and backbone traffic. We manage to","authors_text":"Johan Mazel, R\\'emi Strullu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2019-08-12T15:23:10Z","title":"Identifying and characterizing ZMap scans: a cryptanalytic approach"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.04193","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:12c34b380e680e4ad21591e1e2951353edb82f5a31e504943a129c3606b3df53","target":"record","created_at":"2026-07-04T23:55:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"136c490bebbf5389c07c320f24cca706866e6cdb6818f1f30955522a6af9b0dc","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2019-08-12T15:23:10Z","title_canon_sha256":"4f4a88f72d130161a84f6af8cf41d239a7b0eac247bbd42f272569b80d6b92d2"},"schema_version":"1.0","source":{"id":"1908.04193","kind":"arxiv","version":2}},"canonical_sha256":"792a7d1a7d37b37582006ab09e4e5c18e0caef925f20f66e191155b54ab80f93","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"792a7d1a7d37b37582006ab09e4e5c18e0caef925f20f66e191155b54ab80f93","first_computed_at":"2026-07-04T23:55:13.411380Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:55:13.411380Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"YHRNMwcDNG7jP3QyqEKwADYjn/thhydJ89ZK26THmZ8LKJzVkkVwwsLbY6PC2ozQTLUWbLFT4e1wH6Aq9ThFAA==","signature_status":"signed_v1","signed_at":"2026-07-04T23:55:13.412051Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.04193","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:12c34b380e680e4ad21591e1e2951353edb82f5a31e504943a129c3606b3df53","sha256:6a0e7b0d5b6a88d99c11467d961bdfc21a43254aca1791ae601f17eaadc9412d"],"state_sha256":"c2f13eb25ac2f2c8c8cb9c8dd17039038abf87ec585d40154e4831dc9d4edc8b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/flVabQA7MH+fI/8Z5loZaiBZwx5ZAz2dQKaJLc2hCpkQkyUN0DKMGVPQwfI6KBHGijLqimXTKsTeP+eV5gSAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T10:50:36.182382Z","bundle_sha256":"c1ba83530533c7a589b3cb7cdf5c9c8aedeb2b1b4324a8068d0c377b477cebd1"}}