{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:WC4IQYI5WEAIPQRBDIBPVBOCPI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9b8253e49b6653ab88627eb8c858f51ee2c03f833351efc2cd8ca7a56a913805","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-12T22:49:51Z","title_canon_sha256":"402388a1c4b3cf13c5047ec6df8717a1bd2ab660ef66bd155146510b66fa43a5"},"schema_version":"1.0","source":{"id":"1707.03927","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1707.03927","created_at":"2026-05-18T00:40:23Z"},{"alias_kind":"arxiv_version","alias_value":"1707.03927v1","created_at":"2026-05-18T00:40:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1707.03927","created_at":"2026-05-18T00:40:23Z"},{"alias_kind":"pith_short_12","alias_value":"WC4IQYI5WEAI","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_16","alias_value":"WC4IQYI5WEAIPQRB","created_at":"2026-05-18T12:31:53Z"},{"alias_kind":"pith_short_8","alias_value":"WC4IQYI5","created_at":"2026-05-18T12:31:53Z"}],"graph_snapshots":[{"event_id":"sha256:75a1b95420bf9ede93573a9ad4c0017bb7ae3efb1c1a87f580bd90031c629040","target":"graph","created_at":"2026-05-18T00:40:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We analyze sets of intrusion detection records observed on the networks of several large, nonresidential organizations protected by a form of intrusion detection and prevention service. Our analyses reveal that the process of intrusion detection in these networks exhibits a significant degree of burstiness as well as strong memory, with burstiness and memory properties that are comparable to those of natural processes driven by threshold effects, but different from bursty human activities. We explore time-series models of these observable network security incidents based on partially observed ","authors_text":"Alexander Kott, Richard Harang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-12T22:49:51Z","title":"Burstiness of Intrusion Detection Process: Empirical Evidence and a Modeling Approach"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1707.03927","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a8c876c5500cb59b780bbbca03ba1bb24f97be14a74cf577576d7adbfaca4b51","target":"record","created_at":"2026-05-18T00:40:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9b8253e49b6653ab88627eb8c858f51ee2c03f833351efc2cd8ca7a56a913805","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-12T22:49:51Z","title_canon_sha256":"402388a1c4b3cf13c5047ec6df8717a1bd2ab660ef66bd155146510b66fa43a5"},"schema_version":"1.0","source":{"id":"1707.03927","kind":"arxiv","version":1}},"canonical_sha256":"b0b888611db10087c2211a02fa85c27a3a081ff9a5b1c9789634781c4e916bf3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0b888611db10087c2211a02fa85c27a3a081ff9a5b1c9789634781c4e916bf3","first_computed_at":"2026-05-18T00:40:23.096403Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:40:23.096403Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nzLpaoh6z1smQypVBMsAxP04BVru/T9U8a6HdjewozqNej2a3b41bf6N4m5ZaTPnK8j73tc8RbEUH+m2XZ9ODg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:40:23.097154Z","signed_message":"canonical_sha256_bytes"},"source_id":"1707.03927","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a8c876c5500cb59b780bbbca03ba1bb24f97be14a74cf577576d7adbfaca4b51","sha256:75a1b95420bf9ede93573a9ad4c0017bb7ae3efb1c1a87f580bd90031c629040"],"state_sha256":"4153726a7966c2287d510ff5df60f1d9ee41331d22d57fd9a171f2c3c4400f26"}