{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2014:UP2MC32PQHJM6IGST3ZP7XDRZG","short_pith_number":"pith:UP2MC32P","canonical_record":{"source":{"id":"1402.1940","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-02-09T11:59:06Z","cross_cats_sorted":[],"title_canon_sha256":"b863d97c9061ce0c7b2e5fe42e77a7919e60cb66c90f63c7f6a12500d540ae54","abstract_canon_sha256":"24442ede708ff5773954bc0c6edd929b47365c0d848900d691d1d99bfc8d6c70"},"schema_version":"1.0"},"canonical_sha256":"a3f4c16f4f81d2cf20d29ef2ffdc71c989c029c699b9a02a0392a3ca40ed7065","source":{"kind":"arxiv","id":"1402.1940","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1402.1940","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"arxiv_version","alias_value":"1402.1940v1","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1402.1940","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"pith_short_12","alias_value":"UP2MC32PQHJM","created_at":"2026-05-18T12:28:52Z"},{"alias_kind":"pith_short_16","alias_value":"UP2MC32PQHJM6IGS","created_at":"2026-05-18T12:28:52Z"},{"alias_kind":"pith_short_8","alias_value":"UP2MC32P","created_at":"2026-05-18T12:28:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2014:UP2MC32PQHJM6IGST3ZP7XDRZG","target":"record","payload":{"canonical_record":{"source":{"id":"1402.1940","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-02-09T11:59:06Z","cross_cats_sorted":[],"title_canon_sha256":"b863d97c9061ce0c7b2e5fe42e77a7919e60cb66c90f63c7f6a12500d540ae54","abstract_canon_sha256":"24442ede708ff5773954bc0c6edd929b47365c0d848900d691d1d99bfc8d6c70"},"schema_version":"1.0"},"canonical_sha256":"a3f4c16f4f81d2cf20d29ef2ffdc71c989c029c699b9a02a0392a3ca40ed7065","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:59:33.030608Z","signature_b64":"x8vxvzCZ+fgTlS5TroNymyTJhnpW0HzVBWtL9Qy4KRuHMqQ/2PRno66vF6UM2jy6gxZ3ulGXYb8InwyFNrDqBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a3f4c16f4f81d2cf20d29ef2ffdc71c989c029c699b9a02a0392a3ca40ed7065","last_reissued_at":"2026-05-18T02:59:33.029592Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:59:33.029592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1402.1940","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:59:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GZg1vi1SB1ZdHwk8SRXh8uLzNwaLTcJEjSV0u8k7+L506dRo8TRLXnoDlZ1k7PRjyPsZHPRniFnuc05X5f8TDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T21:56:16.609681Z"},"content_sha256":"ab1991cb6ad4fb209081b1f8398742ba5acc6419e9665611834eca90e1ebbaaf","schema_version":"1.0","event_id":"sha256:ab1991cb6ad4fb209081b1f8398742ba5acc6419e9665611834eca90e1ebbaaf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2014:UP2MC32PQHJM6IGST3ZP7XDRZG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"No NAT'd User left Behind: Fingerprinting Users behind NAT from NetFlow Records alone","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Angelo Spognardi, Emanuele Gabrielli, Giuseppe Ateniese, Luigi Vincenzo Mancini, Nino Vincenzo Verde","submitted_at":"2014-02-09T11:59:06Z","abstract_excerpt":"It is generally recognized that the traffic generated by an individual connected to a network acts as his biometric signature. Several tools exploit this fact to fingerprint and monitor users. Often, though, these tools assume to access the entire traffic, including IP addresses and payloads. This is not feasible on the grounds that both performance and privacy would be negatively affected. In reality, most ISPs convert user traffic into NetFlow records for a concise representation that does not include, for instance, any payloads. More importantly, large and distributed networks are usually N"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1402.1940","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:59:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EWykG44+8Lixi0K7oJ+2N4+1lCdmKdafxyr50lYUDI9nDG+zeRwx63lnWw6S6HCHBZKYSOICAQNe0dqpJWQ1DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-09T21:56:16.610386Z"},"content_sha256":"be7d012bb32f7bba8d76a67b9e3d58812d2df61a12a579061410cf0c51d72a0b","schema_version":"1.0","event_id":"sha256:be7d012bb32f7bba8d76a67b9e3d58812d2df61a12a579061410cf0c51d72a0b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/bundle.json","state_url":"https://pith.science/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-09T21:56:16Z","links":{"resolver":"https://pith.science/pith/UP2MC32PQHJM6IGST3ZP7XDRZG","bundle":"https://pith.science/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/bundle.json","state":"https://pith.science/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UP2MC32PQHJM6IGST3ZP7XDRZG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2014:UP2MC32PQHJM6IGST3ZP7XDRZG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24442ede708ff5773954bc0c6edd929b47365c0d848900d691d1d99bfc8d6c70","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-02-09T11:59:06Z","title_canon_sha256":"b863d97c9061ce0c7b2e5fe42e77a7919e60cb66c90f63c7f6a12500d540ae54"},"schema_version":"1.0","source":{"id":"1402.1940","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1402.1940","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"arxiv_version","alias_value":"1402.1940v1","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1402.1940","created_at":"2026-05-18T02:59:33Z"},{"alias_kind":"pith_short_12","alias_value":"UP2MC32PQHJM","created_at":"2026-05-18T12:28:52Z"},{"alias_kind":"pith_short_16","alias_value":"UP2MC32PQHJM6IGS","created_at":"2026-05-18T12:28:52Z"},{"alias_kind":"pith_short_8","alias_value":"UP2MC32P","created_at":"2026-05-18T12:28:52Z"}],"graph_snapshots":[{"event_id":"sha256:be7d012bb32f7bba8d76a67b9e3d58812d2df61a12a579061410cf0c51d72a0b","target":"graph","created_at":"2026-05-18T02:59:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"It is generally recognized that the traffic generated by an individual connected to a network acts as his biometric signature. Several tools exploit this fact to fingerprint and monitor users. Often, though, these tools assume to access the entire traffic, including IP addresses and payloads. This is not feasible on the grounds that both performance and privacy would be negatively affected. In reality, most ISPs convert user traffic into NetFlow records for a concise representation that does not include, for instance, any payloads. More importantly, large and distributed networks are usually N","authors_text":"Angelo Spognardi, Emanuele Gabrielli, Giuseppe Ateniese, Luigi Vincenzo Mancini, Nino Vincenzo Verde","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-02-09T11:59:06Z","title":"No NAT'd User left Behind: Fingerprinting Users behind NAT from NetFlow Records alone"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1402.1940","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ab1991cb6ad4fb209081b1f8398742ba5acc6419e9665611834eca90e1ebbaaf","target":"record","created_at":"2026-05-18T02:59:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24442ede708ff5773954bc0c6edd929b47365c0d848900d691d1d99bfc8d6c70","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2014-02-09T11:59:06Z","title_canon_sha256":"b863d97c9061ce0c7b2e5fe42e77a7919e60cb66c90f63c7f6a12500d540ae54"},"schema_version":"1.0","source":{"id":"1402.1940","kind":"arxiv","version":1}},"canonical_sha256":"a3f4c16f4f81d2cf20d29ef2ffdc71c989c029c699b9a02a0392a3ca40ed7065","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a3f4c16f4f81d2cf20d29ef2ffdc71c989c029c699b9a02a0392a3ca40ed7065","first_computed_at":"2026-05-18T02:59:33.029592Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:59:33.029592Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"x8vxvzCZ+fgTlS5TroNymyTJhnpW0HzVBWtL9Qy4KRuHMqQ/2PRno66vF6UM2jy6gxZ3ulGXYb8InwyFNrDqBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T02:59:33.030608Z","signed_message":"canonical_sha256_bytes"},"source_id":"1402.1940","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ab1991cb6ad4fb209081b1f8398742ba5acc6419e9665611834eca90e1ebbaaf","sha256:be7d012bb32f7bba8d76a67b9e3d58812d2df61a12a579061410cf0c51d72a0b"],"state_sha256":"c2382fdd7b4b059994beab9e06563db651b28bb986a2c17f00177ac0d1fd9e36"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"otMBKQncmXwe0krJPb2CnIKTPfwJqqbjrYe/pmU6U15Rg42GrqTpwOotOArfkOGkrdr17X4KhGhF8fuMyeRFAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-09T21:56:16.614861Z","bundle_sha256":"69a21b36dcc49e0aeffde04671c012cffc96cba5029935d0676e0b4aec72d2e6"}}