{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:XGTRYBHILSDCOHWIL6KQYSCMHI","short_pith_number":"pith:XGTRYBHI","canonical_record":{"source":{"id":"1607.07903","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-26T21:32:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8a943ead9614b47fb4ff6e6e6137756b305abf17ec742c3ca218709300c5421c","abstract_canon_sha256":"71ef546d70adb510369c55e8473af8e980ed0e40b91d72648f053be6e6e51abc"},"schema_version":"1.0"},"canonical_sha256":"b9a71c04e85c86271ec85f950c484c3a107a159b28edc9dc1ccc8a3a559f9d32","source":{"kind":"arxiv","id":"1607.07903","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1607.07903","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"arxiv_version","alias_value":"1607.07903v1","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1607.07903","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"pith_short_12","alias_value":"XGTRYBHILSDC","created_at":"2026-05-18T12:30:51Z"},{"alias_kind":"pith_short_16","alias_value":"XGTRYBHILSDCOHWI","created_at":"2026-05-18T12:30:51Z"},{"alias_kind":"pith_short_8","alias_value":"XGTRYBHI","created_at":"2026-05-18T12:30:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:XGTRYBHILSDCOHWIL6KQYSCMHI","target":"record","payload":{"canonical_record":{"source":{"id":"1607.07903","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-26T21:32:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8a943ead9614b47fb4ff6e6e6137756b305abf17ec742c3ca218709300c5421c","abstract_canon_sha256":"71ef546d70adb510369c55e8473af8e980ed0e40b91d72648f053be6e6e51abc"},"schema_version":"1.0"},"canonical_sha256":"b9a71c04e85c86271ec85f950c484c3a107a159b28edc9dc1ccc8a3a559f9d32","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:10:22.988751Z","signature_b64":"cNyESUDUy+BZJsFK6DKKUjp+X/M0aj1NR9KYgNbHgMGzFDLTuNGQbIQ7SgDGcKBJnd5f2NKgsYkZOjiHkSTWBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b9a71c04e85c86271ec85f950c484c3a107a159b28edc9dc1ccc8a3a559f9d32","last_reissued_at":"2026-05-18T01:10:22.988120Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:10:22.988120Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1607.07903","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:10:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c0Qt+eJ8SDzgapMiIGh62l+NiQ5tEhjn6+UhjVGmTAlEuEO/0zsovV+Xjiw6m/WAJxRILhSZPDAdPJpczwwdCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:55:53.326503Z"},"content_sha256":"69af39df3c8014ce3203cf64a66ce02ebe4a2330efa3ce0e5ac9e43218d6a0ad","schema_version":"1.0","event_id":"sha256:69af39df3c8014ce3203cf64a66ce02ebe4a2330efa3ce0e5ac9e43218d6a0ad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:XGTRYBHILSDCOHWIL6KQYSCMHI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Product Offerings in Malicious Hacker Markets","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmad Diab, Ericsson Marin, Paulo Shakarian","submitted_at":"2016-07-26T21:32:11Z","abstract_excerpt":"Marketplaces specializing in malicious hacking products - including malware and exploits - have recently become more prominent on the darkweb and deepweb. We scrape 17 such sites and collect information about such products in a unified database schema. Using a combination of manual labeling and unsupervised clustering, we examine a corpus of products in order to understand their various categories and how they become specialized with respect to vendor and marketplace. This initial study presents how we effectively employed unsupervised techniques to this data as well as the types of insights w"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1607.07903","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:10:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uY40H95YCqzUTwuitK0bffeEB0Whp/3h48Wm28eX0MF+tTeTzXtE3G+Swz1+3k5AZ0ZtfyQW8RZLxGk3ewcQCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:55:53.327180Z"},"content_sha256":"fce2984a68acc73e1c00c9dbd90c842c73c5315806538ed33fc9135cbecf62f2","schema_version":"1.0","event_id":"sha256:fce2984a68acc73e1c00c9dbd90c842c73c5315806538ed33fc9135cbecf62f2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/bundle.json","state_url":"https://pith.science/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T22:55:53Z","links":{"resolver":"https://pith.science/pith/XGTRYBHILSDCOHWIL6KQYSCMHI","bundle":"https://pith.science/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/bundle.json","state":"https://pith.science/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XGTRYBHILSDCOHWIL6KQYSCMHI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:XGTRYBHILSDCOHWIL6KQYSCMHI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"71ef546d70adb510369c55e8473af8e980ed0e40b91d72648f053be6e6e51abc","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-26T21:32:11Z","title_canon_sha256":"8a943ead9614b47fb4ff6e6e6137756b305abf17ec742c3ca218709300c5421c"},"schema_version":"1.0","source":{"id":"1607.07903","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1607.07903","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"arxiv_version","alias_value":"1607.07903v1","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1607.07903","created_at":"2026-05-18T01:10:22Z"},{"alias_kind":"pith_short_12","alias_value":"XGTRYBHILSDC","created_at":"2026-05-18T12:30:51Z"},{"alias_kind":"pith_short_16","alias_value":"XGTRYBHILSDCOHWI","created_at":"2026-05-18T12:30:51Z"},{"alias_kind":"pith_short_8","alias_value":"XGTRYBHI","created_at":"2026-05-18T12:30:51Z"}],"graph_snapshots":[{"event_id":"sha256:fce2984a68acc73e1c00c9dbd90c842c73c5315806538ed33fc9135cbecf62f2","target":"graph","created_at":"2026-05-18T01:10:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Marketplaces specializing in malicious hacking products - including malware and exploits - have recently become more prominent on the darkweb and deepweb. We scrape 17 such sites and collect information about such products in a unified database schema. Using a combination of manual labeling and unsupervised clustering, we examine a corpus of products in order to understand their various categories and how they become specialized with respect to vendor and marketplace. This initial study presents how we effectively employed unsupervised techniques to this data as well as the types of insights w","authors_text":"Ahmad Diab, Ericsson Marin, Paulo Shakarian","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-26T21:32:11Z","title":"Product Offerings in Malicious Hacker Markets"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1607.07903","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:69af39df3c8014ce3203cf64a66ce02ebe4a2330efa3ce0e5ac9e43218d6a0ad","target":"record","created_at":"2026-05-18T01:10:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"71ef546d70adb510369c55e8473af8e980ed0e40b91d72648f053be6e6e51abc","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-07-26T21:32:11Z","title_canon_sha256":"8a943ead9614b47fb4ff6e6e6137756b305abf17ec742c3ca218709300c5421c"},"schema_version":"1.0","source":{"id":"1607.07903","kind":"arxiv","version":1}},"canonical_sha256":"b9a71c04e85c86271ec85f950c484c3a107a159b28edc9dc1ccc8a3a559f9d32","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b9a71c04e85c86271ec85f950c484c3a107a159b28edc9dc1ccc8a3a559f9d32","first_computed_at":"2026-05-18T01:10:22.988120Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:10:22.988120Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cNyESUDUy+BZJsFK6DKKUjp+X/M0aj1NR9KYgNbHgMGzFDLTuNGQbIQ7SgDGcKBJnd5f2NKgsYkZOjiHkSTWBw==","signature_status":"signed_v1","signed_at":"2026-05-18T01:10:22.988751Z","signed_message":"canonical_sha256_bytes"},"source_id":"1607.07903","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:69af39df3c8014ce3203cf64a66ce02ebe4a2330efa3ce0e5ac9e43218d6a0ad","sha256:fce2984a68acc73e1c00c9dbd90c842c73c5315806538ed33fc9135cbecf62f2"],"state_sha256":"040a12771b9f0b78bc71ce371d391e9b64fffe95e91cbac1745cfabf6720a6e4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/iGuMsmkPGXQXzIzJH3yFxlpL54DJSjvrtPJLJd+S/ehY3GKniji+FVARoNnuk3axPhPVq57XvDKhL/ke+elAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T22:55:53.330088Z","bundle_sha256":"8b1368b3e5f456da5cff28d1a5379f315afdcc70af272033a31505b7e56a1e0e"}}