{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:VXLWJJCIIB6Y2NOAHGOAHJDTKR","short_pith_number":"pith:VXLWJJCI","canonical_record":{"source":{"id":"1610.08717","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-10-27T11:39:47Z","cross_cats_sorted":[],"title_canon_sha256":"60e5ea8971445ea3aca59915e4032831efa895827f8a4af30ad7533e9ec78e93","abstract_canon_sha256":"71243e30f3ac551ed7fc6e2313911102980fe2b5a136e566ef07307faf95fd94"},"schema_version":"1.0"},"canonical_sha256":"add764a448407d8d35c0399c03a473545a58d84d691c4370820028824b2f95ef","source":{"kind":"arxiv","id":"1610.08717","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1610.08717","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"1610.08717v2","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1610.08717","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"VXLWJJCIIB6Y","created_at":"2026-05-18T12:30:48Z"},{"alias_kind":"pith_short_16","alias_value":"VXLWJJCIIB6Y2NOA","created_at":"2026-05-18T12:30:48Z"},{"alias_kind":"pith_short_8","alias_value":"VXLWJJCI","created_at":"2026-05-18T12:30:48Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:VXLWJJCIIB6Y2NOAHGOAHJDTKR","target":"record","payload":{"canonical_record":{"source":{"id":"1610.08717","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-10-27T11:39:47Z","cross_cats_sorted":[],"title_canon_sha256":"60e5ea8971445ea3aca59915e4032831efa895827f8a4af30ad7533e9ec78e93","abstract_canon_sha256":"71243e30f3ac551ed7fc6e2313911102980fe2b5a136e566ef07307faf95fd94"},"schema_version":"1.0"},"canonical_sha256":"add764a448407d8d35c0399c03a473545a58d84d691c4370820028824b2f95ef","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:50:59.338553Z","signature_b64":"/hoJWC5PkMAyfuih/MH8UwZF1hy9xteDlZE8Om1+kx26SEMj+Yp7Jb0IBGStE7FPACO4O3gtJhqdZ9SADrPYDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"add764a448407d8d35c0399c03a473545a58d84d691c4370820028824b2f95ef","last_reissued_at":"2026-05-18T00:50:59.337978Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:50:59.337978Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1610.08717","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Thnu9gu8PyEnoYR8x5+MK4bjXVZT3FAifLbPKiBg5tib08yDEWYhYSz59nc0aPIXdwy6xnR9sfoZGH33//kWCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T05:29:14.176293Z"},"content_sha256":"375da4884169e6ac5104b1e9372fd90316465571c0794a87dd6853bd59f5fa1f","schema_version":"1.0","event_id":"sha256:375da4884169e6ac5104b1e9372fd90316465571c0794a87dd6853bd59f5fa1f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:VXLWJJCIIB6Y2NOAHGOAHJDTKR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Reins to the Cloud: Compromising Cloud Systems via the Data Plane","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.NI","authors_text":"Anja Feldmann, Bhargava Shastry, Felicitas Hetzelt, Jean-Pierre Seifert, Kashyap Thimmaraju, Stefan Schmid, Tobias Fiebig","submitted_at":"2016-10-27T11:39:47Z","abstract_excerpt":"Virtual switches have become popular among cloud operating systems to interconnect virtual machines in a more flexible manner. However, this paper demonstrates that virtual switches introduce new attack surfaces in cloud setups, whose effects can be disastrous. Our analysis shows that these vulnerabilities are caused by: (1) inappropriate security assumptions (privileged virtual switch execution in kernel and user space), (2) the logical centralization of such networks (e.g., OpenStack or SDN), (3) the presence of bi-directional communication channels between data plane systems and the central"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1610.08717","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0/+wPpvbdEWFZFnjtL24Kk/XN6+Jpcb6VBsAaRu2FNPV0FDQhXAevdzN+WUqzQG4P/j6WMTO2ZjyKef9J01UBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-04T05:29:14.176662Z"},"content_sha256":"804e631bd2d12f2328f49cd70433c59f47d10c9f93e73ff34d7f4fd4ec42b1ab","schema_version":"1.0","event_id":"sha256:804e631bd2d12f2328f49cd70433c59f47d10c9f93e73ff34d7f4fd4ec42b1ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/bundle.json","state_url":"https://pith.science/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-04T05:29:14Z","links":{"resolver":"https://pith.science/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR","bundle":"https://pith.science/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/bundle.json","state":"https://pith.science/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VXLWJJCIIB6Y2NOAHGOAHJDTKR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:VXLWJJCIIB6Y2NOAHGOAHJDTKR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"71243e30f3ac551ed7fc6e2313911102980fe2b5a136e566ef07307faf95fd94","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-10-27T11:39:47Z","title_canon_sha256":"60e5ea8971445ea3aca59915e4032831efa895827f8a4af30ad7533e9ec78e93"},"schema_version":"1.0","source":{"id":"1610.08717","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1610.08717","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"1610.08717v2","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1610.08717","created_at":"2026-05-18T00:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"VXLWJJCIIB6Y","created_at":"2026-05-18T12:30:48Z"},{"alias_kind":"pith_short_16","alias_value":"VXLWJJCIIB6Y2NOA","created_at":"2026-05-18T12:30:48Z"},{"alias_kind":"pith_short_8","alias_value":"VXLWJJCI","created_at":"2026-05-18T12:30:48Z"}],"graph_snapshots":[{"event_id":"sha256:804e631bd2d12f2328f49cd70433c59f47d10c9f93e73ff34d7f4fd4ec42b1ab","target":"graph","created_at":"2026-05-18T00:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Virtual switches have become popular among cloud operating systems to interconnect virtual machines in a more flexible manner. However, this paper demonstrates that virtual switches introduce new attack surfaces in cloud setups, whose effects can be disastrous. Our analysis shows that these vulnerabilities are caused by: (1) inappropriate security assumptions (privileged virtual switch execution in kernel and user space), (2) the logical centralization of such networks (e.g., OpenStack or SDN), (3) the presence of bi-directional communication channels between data plane systems and the central","authors_text":"Anja Feldmann, Bhargava Shastry, Felicitas Hetzelt, Jean-Pierre Seifert, Kashyap Thimmaraju, Stefan Schmid, Tobias Fiebig","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-10-27T11:39:47Z","title":"Reins to the Cloud: Compromising Cloud Systems via the Data Plane"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1610.08717","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:375da4884169e6ac5104b1e9372fd90316465571c0794a87dd6853bd59f5fa1f","target":"record","created_at":"2026-05-18T00:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"71243e30f3ac551ed7fc6e2313911102980fe2b5a136e566ef07307faf95fd94","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-10-27T11:39:47Z","title_canon_sha256":"60e5ea8971445ea3aca59915e4032831efa895827f8a4af30ad7533e9ec78e93"},"schema_version":"1.0","source":{"id":"1610.08717","kind":"arxiv","version":2}},"canonical_sha256":"add764a448407d8d35c0399c03a473545a58d84d691c4370820028824b2f95ef","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"add764a448407d8d35c0399c03a473545a58d84d691c4370820028824b2f95ef","first_computed_at":"2026-05-18T00:50:59.337978Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:50:59.337978Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/hoJWC5PkMAyfuih/MH8UwZF1hy9xteDlZE8Om1+kx26SEMj+Yp7Jb0IBGStE7FPACO4O3gtJhqdZ9SADrPYDA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:50:59.338553Z","signed_message":"canonical_sha256_bytes"},"source_id":"1610.08717","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:375da4884169e6ac5104b1e9372fd90316465571c0794a87dd6853bd59f5fa1f","sha256:804e631bd2d12f2328f49cd70433c59f47d10c9f93e73ff34d7f4fd4ec42b1ab"],"state_sha256":"9efa168f57546e5596c2fa863f710665291011b2a5569d2eff545e2217f3e132"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UJVmEuBblbx2xOcnrMN+PY/wOI1TvVzRz8Aw/+h0r4OKxjaqR9FpQ6oaCK5lqN2qINl366Nka9C0bLnYQH/rAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-04T05:29:14.178675Z","bundle_sha256":"df5225ce61aac298454648beb452bfc8dad5ffff4bed524ceb2c557014ff5628"}}