{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GUL3NR5ULGUWNUWB7CSNTG6BG4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"60378f1f58835e090bf20233e71201b9d4ae1125e639b8843582f7396d60f8db","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-04T16:47:13Z","title_canon_sha256":"415e835fb4bcd83cd46773f38134fefd9973eac7d7bdbbb63861b090b9d6a6ec"},"schema_version":"1.0","source":{"id":"2410.03817","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2410.03817","created_at":"2026-07-05T09:16:25Z"},{"alias_kind":"arxiv_version","alias_value":"2410.03817v1","created_at":"2026-07-05T09:16:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2410.03817","created_at":"2026-07-05T09:16:25Z"},{"alias_kind":"pith_short_12","alias_value":"GUL3NR5ULGUW","created_at":"2026-07-05T09:16:25Z"},{"alias_kind":"pith_short_16","alias_value":"GUL3NR5ULGUWNUWB","created_at":"2026-07-05T09:16:25Z"},{"alias_kind":"pith_short_8","alias_value":"GUL3NR5U","created_at":"2026-07-05T09:16:25Z"}],"graph_snapshots":[{"event_id":"sha256:34c27de45962f598a52654fe314890a16b401af733c7c954a5a95faed42a3673","target":"graph","created_at":"2026-07-05T09:16:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2410.03817/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Malicious domains are part of the landscape of the internet but are becoming more prevalent and more dangerous to both companies and individuals. They can be hosted on variety of technologies and serve an array of content, ranging from Malware, command and control, and complex Phishing sites that are designed to deceive and expose. Tracking, blocking and detecting such domains is complex, and very often involves complex allow or deny list management or SIEM integration with open-source TLS fingerprinting techniques. Many fingerprint techniques such as JARM and JA3 are used by threat hunters to","authors_text":"Amanda Thomson, Leandros Maglaras, Naghmeh Moradpoor","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-04T16:47:13Z","title":"A novel TLS-based Fingerprinting approach that combines feature expansion and similarity mapping"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2410.03817","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2f268945bda5d4ea552e5f4cd67938908f75e4bd36e59f587f0b1bb1ef5d7b11","target":"record","created_at":"2026-07-05T09:16:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"60378f1f58835e090bf20233e71201b9d4ae1125e639b8843582f7396d60f8db","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-10-04T16:47:13Z","title_canon_sha256":"415e835fb4bcd83cd46773f38134fefd9973eac7d7bdbbb63861b090b9d6a6ec"},"schema_version":"1.0","source":{"id":"2410.03817","kind":"arxiv","version":1}},"canonical_sha256":"3517b6c7b459a966d2c1f8a4d99bc13734a64641f26c82c5a19fea2e66317d7a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3517b6c7b459a966d2c1f8a4d99bc13734a64641f26c82c5a19fea2e66317d7a","first_computed_at":"2026-07-05T09:16:25.213221Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:16:25.213221Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tF1oJpWSjEGLTgRk/V5O0DM/c81sps5hxPCG+ByYd3ZtHRqxeaYIFwjqEBlxJca69uSvcmikWI4AWu+JW0k7Bw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:16:25.213656Z","signed_message":"canonical_sha256_bytes"},"source_id":"2410.03817","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2f268945bda5d4ea552e5f4cd67938908f75e4bd36e59f587f0b1bb1ef5d7b11","sha256:34c27de45962f598a52654fe314890a16b401af733c7c954a5a95faed42a3673"],"state_sha256":"19728d3c7fba394898ed56bb9432b9fc81332de6e7e2f131aee23d9338a3ddcb"}