{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:YVA7R25I3ZNA6UO2JYZBQTGH6Z","short_pith_number":"pith:YVA7R25I","canonical_record":{"source":{"id":"1708.04278","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-14T19:05:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"1adbc0e6c21acb70450dc2c56161326e5e4f4f85b1b26239d54f12e8b5101410","abstract_canon_sha256":"0131c382b64eaff80b4e29f30cdfec264b368c9f2e1c551269452ffc01746c04"},"schema_version":"1.0"},"canonical_sha256":"c541f8eba8de5a0f51da4e32184cc7f656064ef015295004fcc86091309ea884","source":{"kind":"arxiv","id":"1708.04278","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.04278","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"arxiv_version","alias_value":"1708.04278v1","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.04278","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"pith_short_12","alias_value":"YVA7R25I3ZNA","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_16","alias_value":"YVA7R25I3ZNA6UO2","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_8","alias_value":"YVA7R25I","created_at":"2026-05-18T12:31:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:YVA7R25I3ZNA6UO2JYZBQTGH6Z","target":"record","payload":{"canonical_record":{"source":{"id":"1708.04278","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-14T19:05:20Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"1adbc0e6c21acb70450dc2c56161326e5e4f4f85b1b26239d54f12e8b5101410","abstract_canon_sha256":"0131c382b64eaff80b4e29f30cdfec264b368c9f2e1c551269452ffc01746c04"},"schema_version":"1.0"},"canonical_sha256":"c541f8eba8de5a0f51da4e32184cc7f656064ef015295004fcc86091309ea884","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:37:59.801575Z","signature_b64":"aSJO7cKmfoT67LwvY3VVKGW7qO7gRyBo91a3yKD16jssyWIVnI9bM8aBLUvaS6z4r94p1A5cOg5ggBGJl4y1Ag==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c541f8eba8de5a0f51da4e32184cc7f656064ef015295004fcc86091309ea884","last_reissued_at":"2026-05-18T00:37:59.801000Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:37:59.801000Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1708.04278","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:37:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"qTk6UcwNX2skVlrbrSpSxn7AD6A3w0hDUqPImHpUBM2CgR3pO1rYmNr4pOqtw07XAlmpK6om1fmKLerYwDWJDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T08:46:18.414354Z"},"content_sha256":"47c05e10ffd5ed496d2af411f2d7bb5c19bfb5b366248b404ad70520236f4b3a","schema_version":"1.0","event_id":"sha256:47c05e10ffd5ed496d2af411f2d7bb5c19bfb5b366248b404ad70520236f4b3a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:YVA7R25I3ZNA6UO2JYZBQTGH6Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Sampling High Throughput Data for Anomaly Detection of Data-Base Activity","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bracha Shapira, Hagit Grushka-Cohen, Lior Rokach, Michael Dymshits, Oded Sofer, Ofer Biller","submitted_at":"2017-08-14T19:05:20Z","abstract_excerpt":"Data leakage and theft from databases is a dangerous threat to organizations. Data Security and Data Privacy protection systems (DSDP) monitor data access and usage to identify leakage or suspicious activities that should be investigated. Because of the high velocity nature of database systems, such systems audit only a portion of the vast number of transactions that take place. Anomalies are investigated by a Security Officer (SO) in order to choose the proper response. In this paper we investigate the effect of sampling methods based on the risk the transaction poses and propose a new method"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.04278","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:37:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8sYGjKjFDZKlBvkObQf17TxhzZ2nG4prX1f0ZGjB07kYQ2K3sx0Knjs9tKXzzSO30hIXh0tyv//7RClEJhlRDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T08:46:18.414713Z"},"content_sha256":"19158e621ee744ba94698c7297274fb28b931447bba52beace5d2e5f8a3d3bab","schema_version":"1.0","event_id":"sha256:19158e621ee744ba94698c7297274fb28b931447bba52beace5d2e5f8a3d3bab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/bundle.json","state_url":"https://pith.science/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-02T08:46:18Z","links":{"resolver":"https://pith.science/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z","bundle":"https://pith.science/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/bundle.json","state":"https://pith.science/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/YVA7R25I3ZNA6UO2JYZBQTGH6Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:YVA7R25I3ZNA6UO2JYZBQTGH6Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0131c382b64eaff80b4e29f30cdfec264b368c9f2e1c551269452ffc01746c04","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-14T19:05:20Z","title_canon_sha256":"1adbc0e6c21acb70450dc2c56161326e5e4f4f85b1b26239d54f12e8b5101410"},"schema_version":"1.0","source":{"id":"1708.04278","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.04278","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"arxiv_version","alias_value":"1708.04278v1","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.04278","created_at":"2026-05-18T00:37:59Z"},{"alias_kind":"pith_short_12","alias_value":"YVA7R25I3ZNA","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_16","alias_value":"YVA7R25I3ZNA6UO2","created_at":"2026-05-18T12:31:56Z"},{"alias_kind":"pith_short_8","alias_value":"YVA7R25I","created_at":"2026-05-18T12:31:56Z"}],"graph_snapshots":[{"event_id":"sha256:19158e621ee744ba94698c7297274fb28b931447bba52beace5d2e5f8a3d3bab","target":"graph","created_at":"2026-05-18T00:37:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Data leakage and theft from databases is a dangerous threat to organizations. Data Security and Data Privacy protection systems (DSDP) monitor data access and usage to identify leakage or suspicious activities that should be investigated. Because of the high velocity nature of database systems, such systems audit only a portion of the vast number of transactions that take place. Anomalies are investigated by a Security Officer (SO) in order to choose the proper response. In this paper we investigate the effect of sampling methods based on the risk the transaction poses and propose a new method","authors_text":"Bracha Shapira, Hagit Grushka-Cohen, Lior Rokach, Michael Dymshits, Oded Sofer, Ofer Biller","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-14T19:05:20Z","title":"Sampling High Throughput Data for Anomaly Detection of Data-Base Activity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.04278","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:47c05e10ffd5ed496d2af411f2d7bb5c19bfb5b366248b404ad70520236f4b3a","target":"record","created_at":"2026-05-18T00:37:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0131c382b64eaff80b4e29f30cdfec264b368c9f2e1c551269452ffc01746c04","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-14T19:05:20Z","title_canon_sha256":"1adbc0e6c21acb70450dc2c56161326e5e4f4f85b1b26239d54f12e8b5101410"},"schema_version":"1.0","source":{"id":"1708.04278","kind":"arxiv","version":1}},"canonical_sha256":"c541f8eba8de5a0f51da4e32184cc7f656064ef015295004fcc86091309ea884","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c541f8eba8de5a0f51da4e32184cc7f656064ef015295004fcc86091309ea884","first_computed_at":"2026-05-18T00:37:59.801000Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:37:59.801000Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aSJO7cKmfoT67LwvY3VVKGW7qO7gRyBo91a3yKD16jssyWIVnI9bM8aBLUvaS6z4r94p1A5cOg5ggBGJl4y1Ag==","signature_status":"signed_v1","signed_at":"2026-05-18T00:37:59.801575Z","signed_message":"canonical_sha256_bytes"},"source_id":"1708.04278","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:47c05e10ffd5ed496d2af411f2d7bb5c19bfb5b366248b404ad70520236f4b3a","sha256:19158e621ee744ba94698c7297274fb28b931447bba52beace5d2e5f8a3d3bab"],"state_sha256":"1549c118bf3a4bc4ecdf9dd544b7483437015c9fc9e46654e66eac7c38dcb31c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CKD9o3MIOQe4vFco1B3tw/l+V4KlWMdfNo0y9cJ6+3khByf9ESl4hp/mCjQjdJ9GqjbtA5o0PtNG0IlmVu+ZDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-02T08:46:18.416639Z","bundle_sha256":"9778393d94a091f28b1993b29d5e5543898424fc575ddb681490766614eb97f0"}}