{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:ZSIQT2LZWGRWQ4OXE6EOQMFR36","short_pith_number":"pith:ZSIQT2LZ","schema_version":"1.0","canonical_sha256":"cc9109e979b1a36871d72788e830b1df97015d6e9f77b02ba687c4b18a6997f8","source":{"kind":"arxiv","id":"2206.11175","version":1},"attestation_state":"computed","paper":{"title":"HTTPS Event-Flow Correlation: Improving Situational Awareness in Encrypted Web Traffic","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniel Tovar\\v{n}\\'ak, Pavel \\v{C}eleda, Petr Velan, Stanislav \\v{S}pa\\v{c}ek","submitted_at":"2022-06-22T15:32:28Z","abstract_excerpt":"Achieving situational awareness is a challenging process in current HTTPS-dominant web traffic. In this paper, we propose a new approach to encrypted web traffic monitoring. First, we design a method for correlating host-based and network monitoring data based on their common features and a correlation time-window. Then we analyze the correlation results in detail to identify configurations of web servers and monitoring infrastructure that negatively affect the correlation. We describe these properties and possible data preprocessing techniques to minimize their impact on correlation performan"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2206.11175","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-06-22T15:32:28Z","cross_cats_sorted":[],"title_canon_sha256":"ad3f3d7a13f64bba59009ea8345dded92fa9f6299e5800e7f0c7ae3bcafc98b2","abstract_canon_sha256":"4bba49c39c1fe588cdf54ada9682b9fccd49e5d5f23adffe024003ba2547bf8d"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:34:09.727910Z","signature_b64":"jIDWyst/eIUneueRptdB5oDsK3Ht3zArbS3ET/68SO1/yCbia5qntftf53h03OPPZ0KvsWGMIURd15XuuXKBAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc9109e979b1a36871d72788e830b1df97015d6e9f77b02ba687c4b18a6997f8","last_reissued_at":"2026-07-05T04:34:09.727382Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:34:09.727382Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"HTTPS Event-Flow Correlation: Improving Situational Awareness in Encrypted Web Traffic","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Daniel Tovar\\v{n}\\'ak, Pavel \\v{C}eleda, Petr Velan, Stanislav \\v{S}pa\\v{c}ek","submitted_at":"2022-06-22T15:32:28Z","abstract_excerpt":"Achieving situational awareness is a challenging process in current HTTPS-dominant web traffic. In this paper, we propose a new approach to encrypted web traffic monitoring. First, we design a method for correlating host-based and network monitoring data based on their common features and a correlation time-window. Then we analyze the correlation results in detail to identify configurations of web servers and monitoring infrastructure that negatively affect the correlation. We describe these properties and possible data preprocessing techniques to minimize their impact on correlation performan"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2206.11175","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2206.11175/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2206.11175","created_at":"2026-07-05T04:34:09.727439+00:00"},{"alias_kind":"arxiv_version","alias_value":"2206.11175v1","created_at":"2026-07-05T04:34:09.727439+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2206.11175","created_at":"2026-07-05T04:34:09.727439+00:00"},{"alias_kind":"pith_short_12","alias_value":"ZSIQT2LZWGRW","created_at":"2026-07-05T04:34:09.727439+00:00"},{"alias_kind":"pith_short_16","alias_value":"ZSIQT2LZWGRWQ4OX","created_at":"2026-07-05T04:34:09.727439+00:00"},{"alias_kind":"pith_short_8","alias_value":"ZSIQT2LZ","created_at":"2026-07-05T04:34:09.727439+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36","json":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36.json","graph_json":"https://pith.science/api/pith-number/ZSIQT2LZWGRWQ4OXE6EOQMFR36/graph.json","events_json":"https://pith.science/api/pith-number/ZSIQT2LZWGRWQ4OXE6EOQMFR36/events.json","paper":"https://pith.science/paper/ZSIQT2LZ"},"agent_actions":{"view_html":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36","download_json":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36.json","view_paper":"https://pith.science/paper/ZSIQT2LZ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2206.11175&json=true","fetch_graph":"https://pith.science/api/pith-number/ZSIQT2LZWGRWQ4OXE6EOQMFR36/graph.json","fetch_events":"https://pith.science/api/pith-number/ZSIQT2LZWGRWQ4OXE6EOQMFR36/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36/action/storage_attestation","attest_author":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36/action/author_attestation","sign_citation":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36/action/citation_signature","submit_replication":"https://pith.science/pith/ZSIQT2LZWGRWQ4OXE6EOQMFR36/action/replication_record"}},"created_at":"2026-07-05T04:34:09.727439+00:00","updated_at":"2026-07-05T04:34:09.727439+00:00"}