{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:QQF6YKY6JVQ6VBPBTRCORAHKG3","short_pith_number":"pith:QQF6YKY6","canonical_record":{"source":{"id":"2002.00441","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2020-02-02T18:04:26Z","cross_cats_sorted":[],"title_canon_sha256":"39189985447cf4cc363c195eca397ca7e16abd707a7ad43878086e85e4fc6005","abstract_canon_sha256":"40cad0f4ed4927e91a51036c7efb3cc530fe63c46cc932363c3f4579fc2ecb18"},"schema_version":"1.0"},"canonical_sha256":"840bec2b1e4d61ea85e19c44e880ea36fea63b888606cdf5bff5826351e9306e","source":{"kind":"arxiv","id":"2002.00441","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.00441","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"arxiv_version","alias_value":"2002.00441v1","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.00441","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_12","alias_value":"QQF6YKY6JVQ6","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_16","alias_value":"QQF6YKY6JVQ6VBPB","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_8","alias_value":"QQF6YKY6","created_at":"2026-07-05T00:51:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:QQF6YKY6JVQ6VBPBTRCORAHKG3","target":"record","payload":{"canonical_record":{"source":{"id":"2002.00441","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2020-02-02T18:04:26Z","cross_cats_sorted":[],"title_canon_sha256":"39189985447cf4cc363c195eca397ca7e16abd707a7ad43878086e85e4fc6005","abstract_canon_sha256":"40cad0f4ed4927e91a51036c7efb3cc530fe63c46cc932363c3f4579fc2ecb18"},"schema_version":"1.0"},"canonical_sha256":"840bec2b1e4d61ea85e19c44e880ea36fea63b888606cdf5bff5826351e9306e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:51:06.356992Z","signature_b64":"xH2E3X+2/d7ckaD765J1/htH9AUYtXJsQPAn9Et+zHn40+fND+H684MylVd6Ja1+i81ACiCy2p46JV0wCR8FBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"840bec2b1e4d61ea85e19c44e880ea36fea63b888606cdf5bff5826351e9306e","last_reissued_at":"2026-07-05T00:51:06.356479Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:51:06.356479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.00441","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:51:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pUT+y8Kt1ss0x7pWtWnxIcY13jHxvuBnDhPJDNYBO/giwHFEvmcnUbj3TrvxjidiG2YO7efhE5AityYNJTX3DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T17:31:30.026886Z"},"content_sha256":"f9cd1dddec25507fe31f375107582dbc4038aa9df6774c1f16e5c64de23f61b5","schema_version":"1.0","event_id":"sha256:f9cd1dddec25507fe31f375107582dbc4038aa9df6774c1f16e5c64de23f61b5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:QQF6YKY6JVQ6VBPBTRCORAHKG3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Don't Forget to Lock the Front Door! Inferring the Deployment of Source Address Validation of Inbound Traffic","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Andrzej Duda, Baptiste Jonglez, Maciej Korczy\\'nski, Marcin Skwarek, Qasim Lone, Yevheniya Nosyk","submitted_at":"2020-02-02T18:04:26Z","abstract_excerpt":"This paper concerns the problem of the absence of ingress filtering at the network edge, one of the main causes of important network security issues. Numerous network operators do not deploy the best current practice - Source Address Validation (SAV) that aims at mitigating these issues. We perform the first Internet-wide active measurement study to enumerate networks not filtering incoming packets by their source address. The measurement method consists of identifying closed and open DNS resolvers handling requests coming from the outside of the network with the source address from the range "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.00441","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.00441/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:51:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aNNbAbkRvDa3U/m8Zut75gdv6tK8WoioBgvtbaZgQb61/5Lz+4xmvGByupwnnKX/TW6skbEsyHFzp4N3uNFoAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T17:31:30.027280Z"},"content_sha256":"db671d9330e009575f48294b7e51240bf7c038a97e1ae0f4182ade03783e840a","schema_version":"1.0","event_id":"sha256:db671d9330e009575f48294b7e51240bf7c038a97e1ae0f4182ade03783e840a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/bundle.json","state_url":"https://pith.science/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T17:31:30Z","links":{"resolver":"https://pith.science/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3","bundle":"https://pith.science/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/bundle.json","state":"https://pith.science/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QQF6YKY6JVQ6VBPBTRCORAHKG3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:QQF6YKY6JVQ6VBPBTRCORAHKG3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"40cad0f4ed4927e91a51036c7efb3cc530fe63c46cc932363c3f4579fc2ecb18","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2020-02-02T18:04:26Z","title_canon_sha256":"39189985447cf4cc363c195eca397ca7e16abd707a7ad43878086e85e4fc6005"},"schema_version":"1.0","source":{"id":"2002.00441","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.00441","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"arxiv_version","alias_value":"2002.00441v1","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.00441","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_12","alias_value":"QQF6YKY6JVQ6","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_16","alias_value":"QQF6YKY6JVQ6VBPB","created_at":"2026-07-05T00:51:06Z"},{"alias_kind":"pith_short_8","alias_value":"QQF6YKY6","created_at":"2026-07-05T00:51:06Z"}],"graph_snapshots":[{"event_id":"sha256:db671d9330e009575f48294b7e51240bf7c038a97e1ae0f4182ade03783e840a","target":"graph","created_at":"2026-07-05T00:51:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.00441/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper concerns the problem of the absence of ingress filtering at the network edge, one of the main causes of important network security issues. Numerous network operators do not deploy the best current practice - Source Address Validation (SAV) that aims at mitigating these issues. We perform the first Internet-wide active measurement study to enumerate networks not filtering incoming packets by their source address. The measurement method consists of identifying closed and open DNS resolvers handling requests coming from the outside of the network with the source address from the range ","authors_text":"Andrzej Duda, Baptiste Jonglez, Maciej Korczy\\'nski, Marcin Skwarek, Qasim Lone, Yevheniya Nosyk","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2020-02-02T18:04:26Z","title":"Don't Forget to Lock the Front Door! Inferring the Deployment of Source Address Validation of Inbound Traffic"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.00441","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f9cd1dddec25507fe31f375107582dbc4038aa9df6774c1f16e5c64de23f61b5","target":"record","created_at":"2026-07-05T00:51:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"40cad0f4ed4927e91a51036c7efb3cc530fe63c46cc932363c3f4579fc2ecb18","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2020-02-02T18:04:26Z","title_canon_sha256":"39189985447cf4cc363c195eca397ca7e16abd707a7ad43878086e85e4fc6005"},"schema_version":"1.0","source":{"id":"2002.00441","kind":"arxiv","version":1}},"canonical_sha256":"840bec2b1e4d61ea85e19c44e880ea36fea63b888606cdf5bff5826351e9306e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"840bec2b1e4d61ea85e19c44e880ea36fea63b888606cdf5bff5826351e9306e","first_computed_at":"2026-07-05T00:51:06.356479Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:51:06.356479Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xH2E3X+2/d7ckaD765J1/htH9AUYtXJsQPAn9Et+zHn40+fND+H684MylVd6Ja1+i81ACiCy2p46JV0wCR8FBw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:51:06.356992Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.00441","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f9cd1dddec25507fe31f375107582dbc4038aa9df6774c1f16e5c64de23f61b5","sha256:db671d9330e009575f48294b7e51240bf7c038a97e1ae0f4182ade03783e840a"],"state_sha256":"78a7af64102fc0444c5cf7ea114c2284263999db445af54d6a3d43fb63d9572c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sBejm8HWeTGAKG2iX3TwhZS2O+Ho2dn8cGwor+G0fzRoInPHZSOWd1OOrOtz7SXFESIrd0OivjqpVxE3rXRxDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T17:31:30.030558Z","bundle_sha256":"8c27f21a74bf63aab069f5daa12cfdbb34fb1f03e977ad78fe771cd76a5e88ea"}}