{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2012:T2EIT4ZDOPZSZK6GTS5662OYAW","short_pith_number":"pith:T2EIT4ZD","canonical_record":{"source":{"id":"1212.2744","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2012-12-12T09:29:34Z","cross_cats_sorted":[],"title_canon_sha256":"7315f293a0fc8963620d328e1bdd649b204a22b85f83e8de0c508d3e904ee555","abstract_canon_sha256":"f4c9e1e8864347a69e76a1749277d332d2c65fb497233b8f134934d5f24703e7"},"schema_version":"1.0"},"canonical_sha256":"9e8889f32373f32cabc69cbbef69d805bad5a6c38ed2c0ce6c0e86809652cda3","source":{"kind":"arxiv","id":"1212.2744","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1212.2744","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"arxiv_version","alias_value":"1212.2744v1","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1212.2744","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"pith_short_12","alias_value":"T2EIT4ZDOPZS","created_at":"2026-05-18T12:27:23Z"},{"alias_kind":"pith_short_16","alias_value":"T2EIT4ZDOPZSZK6G","created_at":"2026-05-18T12:27:23Z"},{"alias_kind":"pith_short_8","alias_value":"T2EIT4ZD","created_at":"2026-05-18T12:27:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2012:T2EIT4ZDOPZSZK6GTS5662OYAW","target":"record","payload":{"canonical_record":{"source":{"id":"1212.2744","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2012-12-12T09:29:34Z","cross_cats_sorted":[],"title_canon_sha256":"7315f293a0fc8963620d328e1bdd649b204a22b85f83e8de0c508d3e904ee555","abstract_canon_sha256":"f4c9e1e8864347a69e76a1749277d332d2c65fb497233b8f134934d5f24703e7"},"schema_version":"1.0"},"canonical_sha256":"9e8889f32373f32cabc69cbbef69d805bad5a6c38ed2c0ce6c0e86809652cda3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:38:35.517838Z","signature_b64":"I476b2zc7wF/KduXW0Po2Nc4TZlP2D8mLkSQozNfdDlh2ovhxSxRgjFy+X7/4/15zjhuevgRoCx3IfHRXvdlDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9e8889f32373f32cabc69cbbef69d805bad5a6c38ed2c0ce6c0e86809652cda3","last_reissued_at":"2026-05-18T03:38:35.517358Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:38:35.517358Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1212.2744","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:38:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jw+4Tbd5+bMgzwo3k0RCBV2knndaaI/wsCFFdfzuotnhYZI1+Ndy5gMerLONGapQDHjhrmQ2iTOdXYHJOhuxBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T12:41:04.798866Z"},"content_sha256":"a5197a8797f27756f69c1896a3d40a0376e8e23065059fbbc09bcdde84a02f5e","schema_version":"1.0","event_id":"sha256:a5197a8797f27756f69c1896a3d40a0376e8e23065059fbbc09bcdde84a02f5e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2012:T2EIT4ZDOPZSZK6GTS5662OYAW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Mixture Models of Endhost Network Traffic","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Daniel Ting, Jaideep Chandrashekar, John Mark Agosta, Mark Crovella, Nina Taft","submitted_at":"2012-12-12T09:29:34Z","abstract_excerpt":"In this work we focus on modeling a little studied type of traffic, namely the network traffic generated from endhosts. We introduce a parsimonious parametric model of the marginal distribution for connection arrivals. We employ mixture models based on a convex combination of component distributions with both heavy and light-tails. These models can be fitted with high accuracy using maximum likelihood techniques. Our methodology assumes that the underlying user data can be fitted to one of many modeling options, and we apply Bayesian model selection criteria as a rigorous way to choose the pre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1212.2744","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:38:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P7CZaG0M40jiiVMTHfeFCcmvH71A/kM17uhRXejpXT/7KmYN+UAc6camARXof241bOfo1gjN5BLGj0YD84l+BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T12:41:04.799206Z"},"content_sha256":"048405304fb9071bff2b9c3d6a91e39f4b4711a7d25a53fc07f7a239bc4d3d7c","schema_version":"1.0","event_id":"sha256:048405304fb9071bff2b9c3d6a91e39f4b4711a7d25a53fc07f7a239bc4d3d7c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/bundle.json","state_url":"https://pith.science/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T12:41:04Z","links":{"resolver":"https://pith.science/pith/T2EIT4ZDOPZSZK6GTS5662OYAW","bundle":"https://pith.science/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/bundle.json","state":"https://pith.science/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T2EIT4ZDOPZSZK6GTS5662OYAW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2012:T2EIT4ZDOPZSZK6GTS5662OYAW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f4c9e1e8864347a69e76a1749277d332d2c65fb497233b8f134934d5f24703e7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2012-12-12T09:29:34Z","title_canon_sha256":"7315f293a0fc8963620d328e1bdd649b204a22b85f83e8de0c508d3e904ee555"},"schema_version":"1.0","source":{"id":"1212.2744","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1212.2744","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"arxiv_version","alias_value":"1212.2744v1","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1212.2744","created_at":"2026-05-18T03:38:35Z"},{"alias_kind":"pith_short_12","alias_value":"T2EIT4ZDOPZS","created_at":"2026-05-18T12:27:23Z"},{"alias_kind":"pith_short_16","alias_value":"T2EIT4ZDOPZSZK6G","created_at":"2026-05-18T12:27:23Z"},{"alias_kind":"pith_short_8","alias_value":"T2EIT4ZD","created_at":"2026-05-18T12:27:23Z"}],"graph_snapshots":[{"event_id":"sha256:048405304fb9071bff2b9c3d6a91e39f4b4711a7d25a53fc07f7a239bc4d3d7c","target":"graph","created_at":"2026-05-18T03:38:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this work we focus on modeling a little studied type of traffic, namely the network traffic generated from endhosts. We introduce a parsimonious parametric model of the marginal distribution for connection arrivals. We employ mixture models based on a convex combination of component distributions with both heavy and light-tails. These models can be fitted with high accuracy using maximum likelihood techniques. Our methodology assumes that the underlying user data can be fitted to one of many modeling options, and we apply Bayesian model selection criteria as a rigorous way to choose the pre","authors_text":"Daniel Ting, Jaideep Chandrashekar, John Mark Agosta, Mark Crovella, Nina Taft","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2012-12-12T09:29:34Z","title":"Mixture Models of Endhost Network Traffic"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1212.2744","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a5197a8797f27756f69c1896a3d40a0376e8e23065059fbbc09bcdde84a02f5e","target":"record","created_at":"2026-05-18T03:38:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f4c9e1e8864347a69e76a1749277d332d2c65fb497233b8f134934d5f24703e7","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2012-12-12T09:29:34Z","title_canon_sha256":"7315f293a0fc8963620d328e1bdd649b204a22b85f83e8de0c508d3e904ee555"},"schema_version":"1.0","source":{"id":"1212.2744","kind":"arxiv","version":1}},"canonical_sha256":"9e8889f32373f32cabc69cbbef69d805bad5a6c38ed2c0ce6c0e86809652cda3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9e8889f32373f32cabc69cbbef69d805bad5a6c38ed2c0ce6c0e86809652cda3","first_computed_at":"2026-05-18T03:38:35.517358Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:38:35.517358Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"I476b2zc7wF/KduXW0Po2Nc4TZlP2D8mLkSQozNfdDlh2ovhxSxRgjFy+X7/4/15zjhuevgRoCx3IfHRXvdlDA==","signature_status":"signed_v1","signed_at":"2026-05-18T03:38:35.517838Z","signed_message":"canonical_sha256_bytes"},"source_id":"1212.2744","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a5197a8797f27756f69c1896a3d40a0376e8e23065059fbbc09bcdde84a02f5e","sha256:048405304fb9071bff2b9c3d6a91e39f4b4711a7d25a53fc07f7a239bc4d3d7c"],"state_sha256":"0600641845c40c5adcf75fe80b369512965874cc0aa472f10ea6c486cf39658c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Igo5kAJZM/8vSwElv97MJpVeXlqPGcRZDbf4gOlzQRQzPL9cXb33+hpcUh+PzRMDyf6D/aLMH3XVcKg3nEGTBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T12:41:04.801220Z","bundle_sha256":"5a35ab192dbdddb128c27a1e0ef07dc358a0e17eae0ac71f72979b572d7e2467"}}