{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2012:WH6ILVU5V2WZXU4UWB63YKFKC3","short_pith_number":"pith:WH6ILVU5","canonical_record":{"source":{"id":"1207.3691","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-07-16T14:33:02Z","cross_cats_sorted":[],"title_canon_sha256":"aac3a2dcb831bd4161e9f1580de15ec560b0b7be8bcd882de12eb3ba91830da4","abstract_canon_sha256":"fdbb828833d6a27b59f702882fdcc96e064353111cf218291811c804bb51c3a0"},"schema_version":"1.0"},"canonical_sha256":"b1fc85d69daead9bd394b07dbc28aa16f0953d824725f01d97218351806d538d","source":{"kind":"arxiv","id":"1207.3691","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1207.3691","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"1207.3691v1","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1207.3691","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"WH6ILVU5V2WZ","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_16","alias_value":"WH6ILVU5V2WZXU4U","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_8","alias_value":"WH6ILVU5","created_at":"2026-05-18T12:27:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2012:WH6ILVU5V2WZXU4UWB63YKFKC3","target":"record","payload":{"canonical_record":{"source":{"id":"1207.3691","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-07-16T14:33:02Z","cross_cats_sorted":[],"title_canon_sha256":"aac3a2dcb831bd4161e9f1580de15ec560b0b7be8bcd882de12eb3ba91830da4","abstract_canon_sha256":"fdbb828833d6a27b59f702882fdcc96e064353111cf218291811c804bb51c3a0"},"schema_version":"1.0"},"canonical_sha256":"b1fc85d69daead9bd394b07dbc28aa16f0953d824725f01d97218351806d538d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:50:59.783617Z","signature_b64":"hm8xuZ2rwjuqs4vUQ9cuZCxyO1jhvz7A5GPSOklBj04LkYW21X7bSwRrx04XA9Wwo+V5F3ETxCkjONlrUui0Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b1fc85d69daead9bd394b07dbc28aa16f0953d824725f01d97218351806d538d","last_reissued_at":"2026-05-18T03:50:59.783085Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:50:59.783085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1207.3691","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iMEG4QTaLaq8+5U7j+uQ2JYivKVoYG2Ys0b0uyLd4frhMQoYocB/UMV0jW32wbB6IBBylB7GlQEtjFbKUlFxAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-11T17:40:27.289095Z"},"content_sha256":"855a0146bf598bae6818138663cee0d0d23175043b857126e33bec18c86e9396","schema_version":"1.0","event_id":"sha256:855a0146bf598bae6818138663cee0d0d23175043b857126e33bec18c86e9396"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2012:WH6ILVU5V2WZXU4UWB63YKFKC3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Formal Checking of Multiple Firewalls","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Adel Bouhoula, Nihel Ben Youssef Ben Souayeh","submitted_at":"2012-07-16T14:33:02Z","abstract_excerpt":"When enterprises deploy multiple firewalls, a packet may be examined by different sets of firewalls. It has been observed that the resulting complex firewall network is highly error prone and causes serious security holes. Hence, automated solutions are needed in order to check its correctness. In this paper, we propose a formal and automatic method for checking whether multiple firewalls react correctly with respect to a security policy given in a high level declarative language. When errors are detected, some useful feedback is returned in order to correct the firewall configurations. Furthe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1207.3691","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:50:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OZMzP12QJgBWQl++0Oo31oRKoMj35W2pFhIQOQsbIzCzrRSGODO9p3a0MmZvu3eaFJOHF79TTGeT+35aCw26DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-11T17:40:27.289804Z"},"content_sha256":"783c05127f1fc6f7e4cd2ae8181d7d1339b623861437e6aeda717b8838315ed9","schema_version":"1.0","event_id":"sha256:783c05127f1fc6f7e4cd2ae8181d7d1339b623861437e6aeda717b8838315ed9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/bundle.json","state_url":"https://pith.science/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-11T17:40:27Z","links":{"resolver":"https://pith.science/pith/WH6ILVU5V2WZXU4UWB63YKFKC3","bundle":"https://pith.science/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/bundle.json","state":"https://pith.science/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WH6ILVU5V2WZXU4UWB63YKFKC3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2012:WH6ILVU5V2WZXU4UWB63YKFKC3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fdbb828833d6a27b59f702882fdcc96e064353111cf218291811c804bb51c3a0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-07-16T14:33:02Z","title_canon_sha256":"aac3a2dcb831bd4161e9f1580de15ec560b0b7be8bcd882de12eb3ba91830da4"},"schema_version":"1.0","source":{"id":"1207.3691","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1207.3691","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"arxiv_version","alias_value":"1207.3691v1","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1207.3691","created_at":"2026-05-18T03:50:59Z"},{"alias_kind":"pith_short_12","alias_value":"WH6ILVU5V2WZ","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_16","alias_value":"WH6ILVU5V2WZXU4U","created_at":"2026-05-18T12:27:25Z"},{"alias_kind":"pith_short_8","alias_value":"WH6ILVU5","created_at":"2026-05-18T12:27:25Z"}],"graph_snapshots":[{"event_id":"sha256:783c05127f1fc6f7e4cd2ae8181d7d1339b623861437e6aeda717b8838315ed9","target":"graph","created_at":"2026-05-18T03:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"When enterprises deploy multiple firewalls, a packet may be examined by different sets of firewalls. It has been observed that the resulting complex firewall network is highly error prone and causes serious security holes. Hence, automated solutions are needed in order to check its correctness. In this paper, we propose a formal and automatic method for checking whether multiple firewalls react correctly with respect to a security policy given in a high level declarative language. When errors are detected, some useful feedback is returned in order to correct the firewall configurations. Furthe","authors_text":"Adel Bouhoula, Nihel Ben Youssef Ben Souayeh","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-07-16T14:33:02Z","title":"Formal Checking of Multiple Firewalls"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1207.3691","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:855a0146bf598bae6818138663cee0d0d23175043b857126e33bec18c86e9396","target":"record","created_at":"2026-05-18T03:50:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fdbb828833d6a27b59f702882fdcc96e064353111cf218291811c804bb51c3a0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2012-07-16T14:33:02Z","title_canon_sha256":"aac3a2dcb831bd4161e9f1580de15ec560b0b7be8bcd882de12eb3ba91830da4"},"schema_version":"1.0","source":{"id":"1207.3691","kind":"arxiv","version":1}},"canonical_sha256":"b1fc85d69daead9bd394b07dbc28aa16f0953d824725f01d97218351806d538d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b1fc85d69daead9bd394b07dbc28aa16f0953d824725f01d97218351806d538d","first_computed_at":"2026-05-18T03:50:59.783085Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:50:59.783085Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hm8xuZ2rwjuqs4vUQ9cuZCxyO1jhvz7A5GPSOklBj04LkYW21X7bSwRrx04XA9Wwo+V5F3ETxCkjONlrUui0Bg==","signature_status":"signed_v1","signed_at":"2026-05-18T03:50:59.783617Z","signed_message":"canonical_sha256_bytes"},"source_id":"1207.3691","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:855a0146bf598bae6818138663cee0d0d23175043b857126e33bec18c86e9396","sha256:783c05127f1fc6f7e4cd2ae8181d7d1339b623861437e6aeda717b8838315ed9"],"state_sha256":"2b674cc547783315f949da8f216b280464365d4d75d4584cd4ac681bd6f23a9b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AOwEOfzVNu5Q4e/uc6JzJF4K5c02+0A+VgMcNeh7cnwgnE2CRn9drdo5RregpaQFZwxkmtN2qi4hXGnmau5WDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-11T17:40:27.293447Z","bundle_sha256":"3e5739bfa5356a400a563d2783f59046197af384e66e69b17679cf194d3ff86b"}}