{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2017:WC4IQYI5WEAIPQRBDIBPVBOCPI","short_pith_number":"pith:WC4IQYI5","schema_version":"1.0","canonical_sha256":"b0b888611db10087c2211a02fa85c27a3a081ff9a5b1c9789634781c4e916bf3","source":{"kind":"arxiv","id":"1707.03927","version":1},"attestation_state":"computed","paper":{"title":"Burstiness of Intrusion Detection Process: Empirical Evidence and a Modeling Approach","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Kott, Richard Harang","submitted_at":"2017-07-12T22:49:51Z","abstract_excerpt":"We analyze sets of intrusion detection records observed on the networks of several large, nonresidential organizations protected by a form of intrusion detection and prevention service. Our analyses reveal that the process of intrusion detection in these networks exhibits a significant degree of burstiness as well as strong memory, with burstiness and memory properties that are comparable to those of natural processes driven by threshold effects, but different from bursty human activities. We explore time-series models of these observable network security incidents based on partially observed "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1707.03927","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-12T22:49:51Z","cross_cats_sorted":[],"title_canon_sha256":"402388a1c4b3cf13c5047ec6df8717a1bd2ab660ef66bd155146510b66fa43a5","abstract_canon_sha256":"9b8253e49b6653ab88627eb8c858f51ee2c03f833351efc2cd8ca7a56a913805"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:40:23.097154Z","signature_b64":"nzLpaoh6z1smQypVBMsAxP04BVru/T9U8a6HdjewozqNej2a3b41bf6N4m5ZaTPnK8j73tc8RbEUH+m2XZ9ODg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b0b888611db10087c2211a02fa85c27a3a081ff9a5b1c9789634781c4e916bf3","last_reissued_at":"2026-05-18T00:40:23.096403Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:40:23.096403Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Burstiness of Intrusion Detection Process: Empirical Evidence and a Modeling Approach","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexander Kott, Richard Harang","submitted_at":"2017-07-12T22:49:51Z","abstract_excerpt":"We analyze sets of intrusion detection records observed on the networks of several large, nonresidential organizations protected by a form of intrusion detection and prevention service. Our analyses reveal that the process of intrusion detection in these networks exhibits a significant degree of burstiness as well as strong memory, with burstiness and memory properties that are comparable to those of natural processes driven by threshold effects, but different from bursty human activities. We explore time-series models of these observable network security incidents based on partially observed "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1707.03927","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1707.03927","created_at":"2026-05-18T00:40:23.096517+00:00"},{"alias_kind":"arxiv_version","alias_value":"1707.03927v1","created_at":"2026-05-18T00:40:23.096517+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1707.03927","created_at":"2026-05-18T00:40:23.096517+00:00"},{"alias_kind":"pith_short_12","alias_value":"WC4IQYI5WEAI","created_at":"2026-05-18T12:31:53.515858+00:00"},{"alias_kind":"pith_short_16","alias_value":"WC4IQYI5WEAIPQRB","created_at":"2026-05-18T12:31:53.515858+00:00"},{"alias_kind":"pith_short_8","alias_value":"WC4IQYI5","created_at":"2026-05-18T12:31:53.515858+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI","json":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI.json","graph_json":"https://pith.science/api/pith-number/WC4IQYI5WEAIPQRBDIBPVBOCPI/graph.json","events_json":"https://pith.science/api/pith-number/WC4IQYI5WEAIPQRBDIBPVBOCPI/events.json","paper":"https://pith.science/paper/WC4IQYI5"},"agent_actions":{"view_html":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI","download_json":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI.json","view_paper":"https://pith.science/paper/WC4IQYI5","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1707.03927&json=true","fetch_graph":"https://pith.science/api/pith-number/WC4IQYI5WEAIPQRBDIBPVBOCPI/graph.json","fetch_events":"https://pith.science/api/pith-number/WC4IQYI5WEAIPQRBDIBPVBOCPI/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI/action/timestamp_anchor","attest_storage":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI/action/storage_attestation","attest_author":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI/action/author_attestation","sign_citation":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI/action/citation_signature","submit_replication":"https://pith.science/pith/WC4IQYI5WEAIPQRBDIBPVBOCPI/action/replication_record"}},"created_at":"2026-05-18T00:40:23.096517+00:00","updated_at":"2026-05-18T00:40:23.096517+00:00"}