{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:ZUJXUCCDTO6XTKJTR6CZRB3JBG","short_pith_number":"pith:ZUJXUCCD","canonical_record":{"source":{"id":"1907.02765","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-05T10:44:37Z","cross_cats_sorted":[],"title_canon_sha256":"9e9a0266f409a5643a72a15526d4215718a2c3e155102eed8c722c6cd5bf9247","abstract_canon_sha256":"e7cf328be61541650958a8da73c2a7328450f3d435cce0b77af9d37ef954524f"},"schema_version":"1.0"},"canonical_sha256":"cd137a08439bbd79a9338f8598876909b9e375b99240e0ae03575cd48ab83b3f","source":{"kind":"arxiv","id":"1907.02765","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.02765","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"arxiv_version","alias_value":"1907.02765v1","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.02765","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"pith_short_12","alias_value":"ZUJXUCCDTO6X","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_16","alias_value":"ZUJXUCCDTO6XTKJT","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_8","alias_value":"ZUJXUCCD","created_at":"2026-05-18T12:33:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:ZUJXUCCDTO6XTKJTR6CZRB3JBG","target":"record","payload":{"canonical_record":{"source":{"id":"1907.02765","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-05T10:44:37Z","cross_cats_sorted":[],"title_canon_sha256":"9e9a0266f409a5643a72a15526d4215718a2c3e155102eed8c722c6cd5bf9247","abstract_canon_sha256":"e7cf328be61541650958a8da73c2a7328450f3d435cce0b77af9d37ef954524f"},"schema_version":"1.0"},"canonical_sha256":"cd137a08439bbd79a9338f8598876909b9e375b99240e0ae03575cd48ab83b3f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:41:23.224128Z","signature_b64":"Gnv+u669ZpCLpFhrwE/0RjioUKE4p3+hXxoTdpKNm9xQoOVH4bnwMD5p8iQorpRkJda0E1xNGxHS735BefWACQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cd137a08439bbd79a9338f8598876909b9e375b99240e0ae03575cd48ab83b3f","last_reissued_at":"2026-05-17T23:41:23.223460Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:41:23.223460Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1907.02765","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BUugUyKojGSwKTRnhdCf0yMBLxIG7pP2eL3r8y2hHThIx2ErhXI7qMrqyISQt2jGb3xAeKsxgZIrgQKQOIhnBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T11:34:22.209881Z"},"content_sha256":"341cded3cc56a061bdb07f6b3074c9331cf3b0de5b0e766d224582aab50f0375","schema_version":"1.0","event_id":"sha256:341cded3cc56a061bdb07f6b3074c9331cf3b0de5b0e766d224582aab50f0375"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:ZUJXUCCDTO6XTKJTR6CZRB3JBG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Pvalue-guided Anomaly Detection Approach Combining Multiple Heterogeneous Log Parser Algorithms on IIoT Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Lei Yang, Shenwei Huang, Tao Li, Xueshuo Xie, Xuhang Xiao, Zhi Wang","submitted_at":"2019-07-05T10:44:37Z","abstract_excerpt":"Industrial Internet of Things (IIoT) is becoming an attack target of advanced persistent threat (APT). Currently, IIoT logs have not been effectively used for anomaly detection. In this paper, we use blockchain to prevent logs from being tampered with and propose a pvalue-guided anomaly detection approach. This approach uses statistical pvalues to combine multiple heterogeneous log parser algorithms. The weighted edit distance is selected as a score function to calculate the nonconformity score between a log and a predefined event. The pvalue is calculated based on the non-conformity scores wh"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.02765","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:41:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8Jt1Rxk0AG1fZCkkbhSJk35exzVCcANQ803/mGHrP8tUa96v2Cyb2Jdogt0w5d8XR4hf2m8ZRWk56oJa/goRAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T11:34:22.210220Z"},"content_sha256":"87b66814c057d8f7b5d1ffdc0a5b5dea7a419873d8a644d365406ce7a5fa07ad","schema_version":"1.0","event_id":"sha256:87b66814c057d8f7b5d1ffdc0a5b5dea7a419873d8a644d365406ce7a5fa07ad"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/bundle.json","state_url":"https://pith.science/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-02T11:34:22Z","links":{"resolver":"https://pith.science/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG","bundle":"https://pith.science/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/bundle.json","state":"https://pith.science/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZUJXUCCDTO6XTKJTR6CZRB3JBG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:ZUJXUCCDTO6XTKJTR6CZRB3JBG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e7cf328be61541650958a8da73c2a7328450f3d435cce0b77af9d37ef954524f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-05T10:44:37Z","title_canon_sha256":"9e9a0266f409a5643a72a15526d4215718a2c3e155102eed8c722c6cd5bf9247"},"schema_version":"1.0","source":{"id":"1907.02765","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.02765","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"arxiv_version","alias_value":"1907.02765v1","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.02765","created_at":"2026-05-17T23:41:23Z"},{"alias_kind":"pith_short_12","alias_value":"ZUJXUCCDTO6X","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_16","alias_value":"ZUJXUCCDTO6XTKJT","created_at":"2026-05-18T12:33:33Z"},{"alias_kind":"pith_short_8","alias_value":"ZUJXUCCD","created_at":"2026-05-18T12:33:33Z"}],"graph_snapshots":[{"event_id":"sha256:87b66814c057d8f7b5d1ffdc0a5b5dea7a419873d8a644d365406ce7a5fa07ad","target":"graph","created_at":"2026-05-17T23:41:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Industrial Internet of Things (IIoT) is becoming an attack target of advanced persistent threat (APT). Currently, IIoT logs have not been effectively used for anomaly detection. In this paper, we use blockchain to prevent logs from being tampered with and propose a pvalue-guided anomaly detection approach. This approach uses statistical pvalues to combine multiple heterogeneous log parser algorithms. The weighted edit distance is selected as a score function to calculate the nonconformity score between a log and a predefined event. The pvalue is calculated based on the non-conformity scores wh","authors_text":"Lei Yang, Shenwei Huang, Tao Li, Xueshuo Xie, Xuhang Xiao, Zhi Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-05T10:44:37Z","title":"A Pvalue-guided Anomaly Detection Approach Combining Multiple Heterogeneous Log Parser Algorithms on IIoT Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.02765","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:341cded3cc56a061bdb07f6b3074c9331cf3b0de5b0e766d224582aab50f0375","target":"record","created_at":"2026-05-17T23:41:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e7cf328be61541650958a8da73c2a7328450f3d435cce0b77af9d37ef954524f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-07-05T10:44:37Z","title_canon_sha256":"9e9a0266f409a5643a72a15526d4215718a2c3e155102eed8c722c6cd5bf9247"},"schema_version":"1.0","source":{"id":"1907.02765","kind":"arxiv","version":1}},"canonical_sha256":"cd137a08439bbd79a9338f8598876909b9e375b99240e0ae03575cd48ab83b3f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"cd137a08439bbd79a9338f8598876909b9e375b99240e0ae03575cd48ab83b3f","first_computed_at":"2026-05-17T23:41:23.223460Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:41:23.223460Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Gnv+u669ZpCLpFhrwE/0RjioUKE4p3+hXxoTdpKNm9xQoOVH4bnwMD5p8iQorpRkJda0E1xNGxHS735BefWACQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:41:23.224128Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.02765","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:341cded3cc56a061bdb07f6b3074c9331cf3b0de5b0e766d224582aab50f0375","sha256:87b66814c057d8f7b5d1ffdc0a5b5dea7a419873d8a644d365406ce7a5fa07ad"],"state_sha256":"2fe5e848276a1336d321a36494d5a2ea5107aa16631f138e52ee69d9b7ebcf49"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/yoscXoDaeJDqk9XCh2RAPfVy+KJ8Q1v3a5Lg1KkYJyVrF67/4PVcEyl6D4SMBZgHHWZHpljLLSwjMSIfnP+BQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-02T11:34:22.212308Z","bundle_sha256":"4b276b251ce6fb978e73ffd3a75ab8d4f118d578dcc565be9bc28bf965367bc0"}}