{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2012:VY5MPRXBRO4SQUXEIC6V3PIKKX","short_pith_number":"pith:VY5MPRXB","canonical_record":{"source":{"id":"1203.1568","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-03-07T18:51:26Z","cross_cats_sorted":[],"title_canon_sha256":"9cb8f48e976470ddc75c160adc624385ee5f46c76c8516cbb0a33b32f06cdb28","abstract_canon_sha256":"970bfdfae8b9f1d6f628a0ee297c704d367ea926036c5ecf6b8c6570d5f2e0fb"},"schema_version":"1.0"},"canonical_sha256":"ae3ac7c6e18bb92852e440bd5dbd0a55fb76b518d1b74e78a7472ddbf59aea24","source":{"kind":"arxiv","id":"1203.1568","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1203.1568","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"arxiv_version","alias_value":"1203.1568v2","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1203.1568","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"pith_short_12","alias_value":"VY5MPRXBRO4S","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_16","alias_value":"VY5MPRXBRO4SQUXE","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_8","alias_value":"VY5MPRXB","created_at":"2026-05-18T12:27:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2012:VY5MPRXBRO4SQUXEIC6V3PIKKX","target":"record","payload":{"canonical_record":{"source":{"id":"1203.1568","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-03-07T18:51:26Z","cross_cats_sorted":[],"title_canon_sha256":"9cb8f48e976470ddc75c160adc624385ee5f46c76c8516cbb0a33b32f06cdb28","abstract_canon_sha256":"970bfdfae8b9f1d6f628a0ee297c704d367ea926036c5ecf6b8c6570d5f2e0fb"},"schema_version":"1.0"},"canonical_sha256":"ae3ac7c6e18bb92852e440bd5dbd0a55fb76b518d1b74e78a7472ddbf59aea24","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T02:21:17.208091Z","signature_b64":"7x2SZguBXFKFr7Yeq8JujjzUSspV5pKbypj0qVGLkjtajiZBEBDumegrFYSnTQvOelY0RI80RwFfvQowV4a3Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ae3ac7c6e18bb92852e440bd5dbd0a55fb76b518d1b74e78a7472ddbf59aea24","last_reissued_at":"2026-05-18T02:21:17.207469Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T02:21:17.207469Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1203.1568","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:21:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eYU5qy253Hxiy3lg9OKK1Ug47duwHhIwfU5e4rb6il4njyr61tnejvsbGHDX84UmTNUpL19FVfxsGfRHSc4oCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T22:52:48.446736Z"},"content_sha256":"fff416736d3d1d078e892ce97fe4721a9928293daa4099d1ecfdbc7de5cde00c","schema_version":"1.0","event_id":"sha256:fff416736d3d1d078e892ce97fe4721a9928293daa4099d1ecfdbc7de5cde00c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2012:VY5MPRXBRO4SQUXEIC6V3PIKKX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BotMosaic: Collaborative Network Watermark for Botnet Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Amir Houmansadr, Nikita Borisov","submitted_at":"2012-03-07T18:51:26Z","abstract_excerpt":"Recent research has made great strides in the field of detecting botnets. However, botnets of all kinds continue to plague the Internet, as many ISPs and organizations do not deploy these techniques. We aim to mitigate this state by creating a very low-cost method of detecting infected bot host. Our approach is to leverage the botnet detection work carried out by some organizations to easily locate collaborating bots elsewhere. We created BotMosaic as a countermeasure to IRC-based botnets. BotMosaic relies on captured bot instances controlled by a watermarker, who inserts a particular pattern "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1203.1568","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T02:21:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F+XVuDgZSMbb2nWllggVaLtS8cmEdGEaDkQ9FRBB64g2vraVGmChgLfncMtBvalx1gvZnBt7q4Xu01Re86grDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T22:52:48.447419Z"},"content_sha256":"c8295d19db2e19b49839d4cda9ee0152035577298187c98125bc2b238010fd27","schema_version":"1.0","event_id":"sha256:c8295d19db2e19b49839d4cda9ee0152035577298187c98125bc2b238010fd27"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/bundle.json","state_url":"https://pith.science/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-27T22:52:48Z","links":{"resolver":"https://pith.science/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX","bundle":"https://pith.science/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/bundle.json","state":"https://pith.science/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VY5MPRXBRO4SQUXEIC6V3PIKKX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2012:VY5MPRXBRO4SQUXEIC6V3PIKKX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"970bfdfae8b9f1d6f628a0ee297c704d367ea926036c5ecf6b8c6570d5f2e0fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-03-07T18:51:26Z","title_canon_sha256":"9cb8f48e976470ddc75c160adc624385ee5f46c76c8516cbb0a33b32f06cdb28"},"schema_version":"1.0","source":{"id":"1203.1568","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1203.1568","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"arxiv_version","alias_value":"1203.1568v2","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1203.1568","created_at":"2026-05-18T02:21:17Z"},{"alias_kind":"pith_short_12","alias_value":"VY5MPRXBRO4S","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_16","alias_value":"VY5MPRXBRO4SQUXE","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_8","alias_value":"VY5MPRXB","created_at":"2026-05-18T12:27:25Z"}],"graph_snapshots":[{"event_id":"sha256:c8295d19db2e19b49839d4cda9ee0152035577298187c98125bc2b238010fd27","target":"graph","created_at":"2026-05-18T02:21:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recent research has made great strides in the field of detecting botnets. However, botnets of all kinds continue to plague the Internet, as many ISPs and organizations do not deploy these techniques. We aim to mitigate this state by creating a very low-cost method of detecting infected bot host. Our approach is to leverage the botnet detection work carried out by some organizations to easily locate collaborating bots elsewhere. We created BotMosaic as a countermeasure to IRC-based botnets. BotMosaic relies on captured bot instances controlled by a watermarker, who inserts a particular pattern ","authors_text":"Amir Houmansadr, Nikita Borisov","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-03-07T18:51:26Z","title":"BotMosaic: Collaborative Network Watermark for Botnet Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1203.1568","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fff416736d3d1d078e892ce97fe4721a9928293daa4099d1ecfdbc7de5cde00c","target":"record","created_at":"2026-05-18T02:21:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"970bfdfae8b9f1d6f628a0ee297c704d367ea926036c5ecf6b8c6570d5f2e0fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-03-07T18:51:26Z","title_canon_sha256":"9cb8f48e976470ddc75c160adc624385ee5f46c76c8516cbb0a33b32f06cdb28"},"schema_version":"1.0","source":{"id":"1203.1568","kind":"arxiv","version":2}},"canonical_sha256":"ae3ac7c6e18bb92852e440bd5dbd0a55fb76b518d1b74e78a7472ddbf59aea24","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ae3ac7c6e18bb92852e440bd5dbd0a55fb76b518d1b74e78a7472ddbf59aea24","first_computed_at":"2026-05-18T02:21:17.207469Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T02:21:17.207469Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7x2SZguBXFKFr7Yeq8JujjzUSspV5pKbypj0qVGLkjtajiZBEBDumegrFYSnTQvOelY0RI80RwFfvQowV4a3Dg==","signature_status":"signed_v1","signed_at":"2026-05-18T02:21:17.208091Z","signed_message":"canonical_sha256_bytes"},"source_id":"1203.1568","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fff416736d3d1d078e892ce97fe4721a9928293daa4099d1ecfdbc7de5cde00c","sha256:c8295d19db2e19b49839d4cda9ee0152035577298187c98125bc2b238010fd27"],"state_sha256":"d27aa200dbf746e0276f30ec24fddc07b30a0d71f9116b73171ed939153718d2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P6VENSEtLVlr7WU0m5USQum9iyb/PAWINvZ5LxtfCo21pB1N5Kcwj8SdYvxWZeJRBYKjYeIc8A060wbyCzHaCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-27T22:52:48.450560Z","bundle_sha256":"2e1f50f0625ed994ed5499a2f6023ebdbe194e7980dec137bf756862d187c5f5"}}