{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:TS6BTZ5FSL6JNEFZFZK2R5DWWO","short_pith_number":"pith:TS6BTZ5F","canonical_record":{"source":{"id":"1805.08426","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-22T07:16:19Z","cross_cats_sorted":[],"title_canon_sha256":"ea3465f00c48a4783c70681fb16ee8107b84b8b6631b20fa0afa2bfb89286331","abstract_canon_sha256":"1a5a2b56938e80078c02d732f71ec094ee1ed42a4f9031eada93e7ce0dd7c918"},"schema_version":"1.0"},"canonical_sha256":"9cbc19e7a592fc9690b92e55a8f476b3a77c7def7f1e1fef7b8b13529e4dfc5b","source":{"kind":"arxiv","id":"1805.08426","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.08426","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"arxiv_version","alias_value":"1805.08426v1","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.08426","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"pith_short_12","alias_value":"TS6BTZ5FSL6J","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"TS6BTZ5FSL6JNEFZ","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"TS6BTZ5F","created_at":"2026-05-18T12:32:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:TS6BTZ5FSL6JNEFZFZK2R5DWWO","target":"record","payload":{"canonical_record":{"source":{"id":"1805.08426","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-22T07:16:19Z","cross_cats_sorted":[],"title_canon_sha256":"ea3465f00c48a4783c70681fb16ee8107b84b8b6631b20fa0afa2bfb89286331","abstract_canon_sha256":"1a5a2b56938e80078c02d732f71ec094ee1ed42a4f9031eada93e7ce0dd7c918"},"schema_version":"1.0"},"canonical_sha256":"9cbc19e7a592fc9690b92e55a8f476b3a77c7def7f1e1fef7b8b13529e4dfc5b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:59:27.845263Z","signature_b64":"dWBOnGAoAqVppSGdMuRb7TAv2PinEAtlCGIClv/PoKqXIVkRJ8YzCSFHqpRhItf7jVyljfcZoYuY2mF8f5T1Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9cbc19e7a592fc9690b92e55a8f476b3a77c7def7f1e1fef7b8b13529e4dfc5b","last_reissued_at":"2026-05-17T23:59:27.844658Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:59:27.844658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1805.08426","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1f5eLZq8vjCFi0zv5mEHZi/DGOaeiqefP9bLyvoQZe0zoP/CESFu/BGKbdyebxwRoZDWllo0EuECWpvR2jpwAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T03:48:42.533926Z"},"content_sha256":"1c5b3edd1f350dca87f5625d1fcb331633ea0df5912363b4b833b1c95cf3515b","schema_version":"1.0","event_id":"sha256:1c5b3edd1f350dca87f5625d1fcb331633ea0df5912363b4b833b1c95cf3515b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:TS6BTZ5FSL6JNEFZFZK2R5DWWO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Survey on Malicious Domains Detection through DNS Data Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Issa Khalil, Marc Dacier, Ting Yu, Yury Zhauniarovich","submitted_at":"2018-05-22T07:16:19Z","abstract_excerpt":"Malicious domains are one of the major resources required for adversaries to run attacks over the Internet. Due to the important role of the Domain Name System (DNS), extensive research has been conducted to identify malicious domains based on their unique behavior reflected in different phases of the life cycle of DNS queries and responses. Existing approaches differ significantly in terms of intuitions, data analysis methods as well as evaluation methodologies. This warrants a thorough systematization of the approaches and a careful review of the advantages and limitations of every group.\n  "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.08426","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:59:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XlB+vzSNRI9DdzUv6K2mQ/TwQ72RQNU+X4XZnjFl4WFRCGtbNc4eooEqvc8OhYqab0kLuETtFgpe6VXbuqK7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T03:48:42.534288Z"},"content_sha256":"a61f7be0b7d57403301e9717e83580c5be3deafa73a047ed90754e1f48f0724b","schema_version":"1.0","event_id":"sha256:a61f7be0b7d57403301e9717e83580c5be3deafa73a047ed90754e1f48f0724b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/bundle.json","state_url":"https://pith.science/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-04T03:48:42Z","links":{"resolver":"https://pith.science/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO","bundle":"https://pith.science/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/bundle.json","state":"https://pith.science/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TS6BTZ5FSL6JNEFZFZK2R5DWWO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:TS6BTZ5FSL6JNEFZFZK2R5DWWO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1a5a2b56938e80078c02d732f71ec094ee1ed42a4f9031eada93e7ce0dd7c918","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-22T07:16:19Z","title_canon_sha256":"ea3465f00c48a4783c70681fb16ee8107b84b8b6631b20fa0afa2bfb89286331"},"schema_version":"1.0","source":{"id":"1805.08426","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.08426","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"arxiv_version","alias_value":"1805.08426v1","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.08426","created_at":"2026-05-17T23:59:27Z"},{"alias_kind":"pith_short_12","alias_value":"TS6BTZ5FSL6J","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"TS6BTZ5FSL6JNEFZ","created_at":"2026-05-18T12:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"TS6BTZ5F","created_at":"2026-05-18T12:32:56Z"}],"graph_snapshots":[{"event_id":"sha256:a61f7be0b7d57403301e9717e83580c5be3deafa73a047ed90754e1f48f0724b","target":"graph","created_at":"2026-05-17T23:59:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Malicious domains are one of the major resources required for adversaries to run attacks over the Internet. Due to the important role of the Domain Name System (DNS), extensive research has been conducted to identify malicious domains based on their unique behavior reflected in different phases of the life cycle of DNS queries and responses. Existing approaches differ significantly in terms of intuitions, data analysis methods as well as evaluation methodologies. This warrants a thorough systematization of the approaches and a careful review of the advantages and limitations of every group.\n  ","authors_text":"Issa Khalil, Marc Dacier, Ting Yu, Yury Zhauniarovich","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-22T07:16:19Z","title":"A Survey on Malicious Domains Detection through DNS Data Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.08426","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1c5b3edd1f350dca87f5625d1fcb331633ea0df5912363b4b833b1c95cf3515b","target":"record","created_at":"2026-05-17T23:59:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1a5a2b56938e80078c02d732f71ec094ee1ed42a4f9031eada93e7ce0dd7c918","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-22T07:16:19Z","title_canon_sha256":"ea3465f00c48a4783c70681fb16ee8107b84b8b6631b20fa0afa2bfb89286331"},"schema_version":"1.0","source":{"id":"1805.08426","kind":"arxiv","version":1}},"canonical_sha256":"9cbc19e7a592fc9690b92e55a8f476b3a77c7def7f1e1fef7b8b13529e4dfc5b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9cbc19e7a592fc9690b92e55a8f476b3a77c7def7f1e1fef7b8b13529e4dfc5b","first_computed_at":"2026-05-17T23:59:27.844658Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:59:27.844658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dWBOnGAoAqVppSGdMuRb7TAv2PinEAtlCGIClv/PoKqXIVkRJ8YzCSFHqpRhItf7jVyljfcZoYuY2mF8f5T1Dg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:59:27.845263Z","signed_message":"canonical_sha256_bytes"},"source_id":"1805.08426","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1c5b3edd1f350dca87f5625d1fcb331633ea0df5912363b4b833b1c95cf3515b","sha256:a61f7be0b7d57403301e9717e83580c5be3deafa73a047ed90754e1f48f0724b"],"state_sha256":"b9817f6cfe40ca6cbfb2053d4e4c1d45f007caa08506eb33ce8ad152dd2ee5bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8N6CepW2Ohv1MrmNYhXOPXGBn7snjgy+ydGYAJyNiLFT1UKMLGvz/kg7xudqAoun/iAwftEohzEWCAuyCNRnAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-04T03:48:42.536373Z","bundle_sha256":"7622978576702859e2246cca40283c3b483bc8678daf97098fdb6517dced15d4"}}