{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:HBZNDHCSBUD44FG3ZKGVLV2LIP","short_pith_number":"pith:HBZNDHCS","canonical_record":{"source":{"id":"1510.00664","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2015-10-02T17:58:54Z","cross_cats_sorted":["cs.CR","cs.NI"],"title_canon_sha256":"5001c1ced244b1b2d39a9c47f16a0bdb6af5b18760fb3fee2b4376fb088b6aa6","abstract_canon_sha256":"36b31f309bdfb0540e9481c9e4c7ab3421f6578f1afa4a49f5e19fdf01cb5e6e"},"schema_version":"1.0"},"canonical_sha256":"3872d19c520d07ce14dbca8d55d74b43c96bdf24ed882bb8fc64a476cdf8ccab","source":{"kind":"arxiv","id":"1510.00664","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1510.00664","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"arxiv_version","alias_value":"1510.00664v1","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1510.00664","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"pith_short_12","alias_value":"HBZNDHCSBUD4","created_at":"2026-05-18T12:29:22Z"},{"alias_kind":"pith_short_16","alias_value":"HBZNDHCSBUD44FG3","created_at":"2026-05-18T12:29:22Z"},{"alias_kind":"pith_short_8","alias_value":"HBZNDHCS","created_at":"2026-05-18T12:29:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:HBZNDHCSBUD44FG3ZKGVLV2LIP","target":"record","payload":{"canonical_record":{"source":{"id":"1510.00664","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2015-10-02T17:58:54Z","cross_cats_sorted":["cs.CR","cs.NI"],"title_canon_sha256":"5001c1ced244b1b2d39a9c47f16a0bdb6af5b18760fb3fee2b4376fb088b6aa6","abstract_canon_sha256":"36b31f309bdfb0540e9481c9e4c7ab3421f6578f1afa4a49f5e19fdf01cb5e6e"},"schema_version":"1.0"},"canonical_sha256":"3872d19c520d07ce14dbca8d55d74b43c96bdf24ed882bb8fc64a476cdf8ccab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:31:12.351211Z","signature_b64":"iROx93Z2wZvIJbRewgKEkf+/wZvny8PlgV7Ij9/WZ+jF2uflUGqQISLjjNAl3Ad8Ox7Lqsgm6klpn+H7sy1WDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3872d19c520d07ce14dbca8d55d74b43c96bdf24ed882bb8fc64a476cdf8ccab","last_reissued_at":"2026-05-18T01:31:12.350719Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:31:12.350719Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1510.00664","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:31:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U+2BgpjlXJzF7rKReJsDjtVJS3Oa0Kpf7ADSz1UWXNAISgveoe9/HK0XgSJS+7YTdwSE1Rn6uJz5WbLdQl6EAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-20T21:46:34.651196Z"},"content_sha256":"914125ccaae98a15dc0af40c05441b58845548442b51b9f725e331a208d55ae6","schema_version":"1.0","event_id":"sha256:914125ccaae98a15dc0af40c05441b58845548442b51b9f725e331a208d55ae6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:HBZNDHCSBUD44FG3ZKGVLV2LIP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards the Forensic Identification and Investigation of Cloud Hosted Servers through Noninvasive Wiretaps","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.NI"],"primary_cat":"cs.DC","authors_text":"Hessel Schut, Jason Farina, Mark Scanlon, Nhien-An Le-Khac","submitted_at":"2015-10-02T17:58:54Z","abstract_excerpt":"When conducting modern cybercrime investigations, evidence has often to be gathered from computer systems located at cloud-based data centres of hosting providers. In cases where the investigation cannot rely on the cooperation of the hosting provider, or where documentation is not available, investigators can often find the identification of which distinct server among many is of interest difficult and extremely time consuming. To address the problem of identifying these servers, in this paper a new approach to rapidly and reliably identify these cloud hosting computer systems is presented. I"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1510.00664","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:31:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OBd82TwF56BVEbrUiFY/EmJG7szAO/xDOpGP52EDRKiPYq5v7LTYwhtEx2Fs/Mwxe3yGSJBtqvsJCQ73YT9cDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-20T21:46:34.651560Z"},"content_sha256":"991dea04135f9342eb52352d92b06acdf292ad6e2c9494d00c6b262bd5f2b58e","schema_version":"1.0","event_id":"sha256:991dea04135f9342eb52352d92b06acdf292ad6e2c9494d00c6b262bd5f2b58e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/bundle.json","state_url":"https://pith.science/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-20T21:46:34Z","links":{"resolver":"https://pith.science/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP","bundle":"https://pith.science/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/bundle.json","state":"https://pith.science/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HBZNDHCSBUD44FG3ZKGVLV2LIP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:HBZNDHCSBUD44FG3ZKGVLV2LIP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36b31f309bdfb0540e9481c9e4c7ab3421f6578f1afa4a49f5e19fdf01cb5e6e","cross_cats_sorted":["cs.CR","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2015-10-02T17:58:54Z","title_canon_sha256":"5001c1ced244b1b2d39a9c47f16a0bdb6af5b18760fb3fee2b4376fb088b6aa6"},"schema_version":"1.0","source":{"id":"1510.00664","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1510.00664","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"arxiv_version","alias_value":"1510.00664v1","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1510.00664","created_at":"2026-05-18T01:31:12Z"},{"alias_kind":"pith_short_12","alias_value":"HBZNDHCSBUD4","created_at":"2026-05-18T12:29:22Z"},{"alias_kind":"pith_short_16","alias_value":"HBZNDHCSBUD44FG3","created_at":"2026-05-18T12:29:22Z"},{"alias_kind":"pith_short_8","alias_value":"HBZNDHCS","created_at":"2026-05-18T12:29:22Z"}],"graph_snapshots":[{"event_id":"sha256:991dea04135f9342eb52352d92b06acdf292ad6e2c9494d00c6b262bd5f2b58e","target":"graph","created_at":"2026-05-18T01:31:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"When conducting modern cybercrime investigations, evidence has often to be gathered from computer systems located at cloud-based data centres of hosting providers. In cases where the investigation cannot rely on the cooperation of the hosting provider, or where documentation is not available, investigators can often find the identification of which distinct server among many is of interest difficult and extremely time consuming. To address the problem of identifying these servers, in this paper a new approach to rapidly and reliably identify these cloud hosting computer systems is presented. I","authors_text":"Hessel Schut, Jason Farina, Mark Scanlon, Nhien-An Le-Khac","cross_cats":["cs.CR","cs.NI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2015-10-02T17:58:54Z","title":"Towards the Forensic Identification and Investigation of Cloud Hosted Servers through Noninvasive Wiretaps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1510.00664","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:914125ccaae98a15dc0af40c05441b58845548442b51b9f725e331a208d55ae6","target":"record","created_at":"2026-05-18T01:31:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36b31f309bdfb0540e9481c9e4c7ab3421f6578f1afa4a49f5e19fdf01cb5e6e","cross_cats_sorted":["cs.CR","cs.NI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.DC","submitted_at":"2015-10-02T17:58:54Z","title_canon_sha256":"5001c1ced244b1b2d39a9c47f16a0bdb6af5b18760fb3fee2b4376fb088b6aa6"},"schema_version":"1.0","source":{"id":"1510.00664","kind":"arxiv","version":1}},"canonical_sha256":"3872d19c520d07ce14dbca8d55d74b43c96bdf24ed882bb8fc64a476cdf8ccab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3872d19c520d07ce14dbca8d55d74b43c96bdf24ed882bb8fc64a476cdf8ccab","first_computed_at":"2026-05-18T01:31:12.350719Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:31:12.350719Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iROx93Z2wZvIJbRewgKEkf+/wZvny8PlgV7Ij9/WZ+jF2uflUGqQISLjjNAl3Ad8Ox7Lqsgm6klpn+H7sy1WDw==","signature_status":"signed_v1","signed_at":"2026-05-18T01:31:12.351211Z","signed_message":"canonical_sha256_bytes"},"source_id":"1510.00664","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:914125ccaae98a15dc0af40c05441b58845548442b51b9f725e331a208d55ae6","sha256:991dea04135f9342eb52352d92b06acdf292ad6e2c9494d00c6b262bd5f2b58e"],"state_sha256":"95abb7f7305281b2e70338151c8cbe84f0c3a0e17b67daa157d38fa60ca5a8d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pk87g5717fA23GossSqXGv8DADCvAmix4q7W5+idbNf9n2X2RIEl++LCQB6YlxjFsvMLblwG8F3sN+f688jlCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-20T21:46:34.653618Z","bundle_sha256":"8de87115a5dc5f8b28d09805ac9f8fbb663a18156f8e498924b331c2861799a4"}}