{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:SOU7JZMX7WGE2GR2MN252Y2ZJR","short_pith_number":"pith:SOU7JZMX","canonical_record":{"source":{"id":"1602.03153","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-02-09T20:21:18Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9ffe33472930c328bcef871c7f9c5d6eecce9b923d988ae7ba6a39613c964531","abstract_canon_sha256":"21bc1ebbfd3646bfcb96d3c48d0ebfde79d1663efd3378e3c09efd522aaabb62"},"schema_version":"1.0"},"canonical_sha256":"93a9f4e597fd8c4d1a3a6375dd63594c70d0cdf03bd16213a9fc5068e0f41b84","source":{"kind":"arxiv","id":"1602.03153","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1602.03153","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"arxiv_version","alias_value":"1602.03153v1","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1602.03153","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"pith_short_12","alias_value":"SOU7JZMX7WGE","created_at":"2026-05-18T12:30:44Z"},{"alias_kind":"pith_short_16","alias_value":"SOU7JZMX7WGE2GR2","created_at":"2026-05-18T12:30:44Z"},{"alias_kind":"pith_short_8","alias_value":"SOU7JZMX","created_at":"2026-05-18T12:30:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:SOU7JZMX7WGE2GR2MN252Y2ZJR","target":"record","payload":{"canonical_record":{"source":{"id":"1602.03153","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-02-09T20:21:18Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"9ffe33472930c328bcef871c7f9c5d6eecce9b923d988ae7ba6a39613c964531","abstract_canon_sha256":"21bc1ebbfd3646bfcb96d3c48d0ebfde79d1663efd3378e3c09efd522aaabb62"},"schema_version":"1.0"},"canonical_sha256":"93a9f4e597fd8c4d1a3a6375dd63594c70d0cdf03bd16213a9fc5068e0f41b84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:21:03.330366Z","signature_b64":"o6ZaddgPZWFVBe6gl4i0KzAoxuT2KT44JC/T3Dn7RFCdTSS1/fTekbhHHWGW6TVGj5PdwGNNDTn9lpDYtyATDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"93a9f4e597fd8c4d1a3a6375dd63594c70d0cdf03bd16213a9fc5068e0f41b84","last_reissued_at":"2026-05-18T01:21:03.329784Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:21:03.329784Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1602.03153","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:21:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"umcE44qXgQIR0zo3TGDinT6TRoMme6iqhyJLReFg5L28v+iDzOddCZ6YCmOAEvkWGfU08hSZkyC+4ilMT9IgDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T06:53:37.084671Z"},"content_sha256":"6eef0d6be2fe98d569fc7b0c25079c0cfef099c25b8fabe450e79d446c51d2ab","schema_version":"1.0","event_id":"sha256:6eef0d6be2fe98d569fc7b0c25079c0cfef099c25b8fabe450e79d446c51d2ab"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:SOU7JZMX7WGE2GR2MN252Y2ZJR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Limiting Self-Propagating Malware Based on Connection Failure Behavior through Hyper-Compact Estimators","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.NI","authors_text":"O. Patrick Kreidl, Shigang Chen, Yian Zhou, You Zhou","submitted_at":"2016-02-09T20:21:18Z","abstract_excerpt":"Self-propagating malware (e.g., an Internet worm) exploits security loopholes in software to infect servers and then use them to scan the Internet for more vulnerable servers. While the mechanisms of worm infection and their propagation models are well understood, defense against worms remains an open problem. One branch of defense research investigates the behavioral difference between worm-infected hosts and normal hosts to set them apart. One particular observation is that a worm-infected host, which scans the Internet with randomly selected addresses, has a much higher connection-failure r"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1602.03153","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:21:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oVksLqlo6YIRjklzRRWwfFB7abpBHh5RwCJkj1SrUih1PmOCjd8tqCbc+KfK8JH4BFlxlsVSkn09CyVEnXiIAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-28T06:53:37.085006Z"},"content_sha256":"cadb6bde12a316664a7b7b716867c549870986058d4fab53d9e636340922f5b8","schema_version":"1.0","event_id":"sha256:cadb6bde12a316664a7b7b716867c549870986058d4fab53d9e636340922f5b8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/bundle.json","state_url":"https://pith.science/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-28T06:53:37Z","links":{"resolver":"https://pith.science/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR","bundle":"https://pith.science/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/bundle.json","state":"https://pith.science/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SOU7JZMX7WGE2GR2MN252Y2ZJR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:SOU7JZMX7WGE2GR2MN252Y2ZJR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"21bc1ebbfd3646bfcb96d3c48d0ebfde79d1663efd3378e3c09efd522aaabb62","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-02-09T20:21:18Z","title_canon_sha256":"9ffe33472930c328bcef871c7f9c5d6eecce9b923d988ae7ba6a39613c964531"},"schema_version":"1.0","source":{"id":"1602.03153","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1602.03153","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"arxiv_version","alias_value":"1602.03153v1","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1602.03153","created_at":"2026-05-18T01:21:03Z"},{"alias_kind":"pith_short_12","alias_value":"SOU7JZMX7WGE","created_at":"2026-05-18T12:30:44Z"},{"alias_kind":"pith_short_16","alias_value":"SOU7JZMX7WGE2GR2","created_at":"2026-05-18T12:30:44Z"},{"alias_kind":"pith_short_8","alias_value":"SOU7JZMX","created_at":"2026-05-18T12:30:44Z"}],"graph_snapshots":[{"event_id":"sha256:cadb6bde12a316664a7b7b716867c549870986058d4fab53d9e636340922f5b8","target":"graph","created_at":"2026-05-18T01:21:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Self-propagating malware (e.g., an Internet worm) exploits security loopholes in software to infect servers and then use them to scan the Internet for more vulnerable servers. While the mechanisms of worm infection and their propagation models are well understood, defense against worms remains an open problem. One branch of defense research investigates the behavioral difference between worm-infected hosts and normal hosts to set them apart. One particular observation is that a worm-infected host, which scans the Internet with randomly selected addresses, has a much higher connection-failure r","authors_text":"O. Patrick Kreidl, Shigang Chen, Yian Zhou, You Zhou","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-02-09T20:21:18Z","title":"Limiting Self-Propagating Malware Based on Connection Failure Behavior through Hyper-Compact Estimators"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1602.03153","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6eef0d6be2fe98d569fc7b0c25079c0cfef099c25b8fabe450e79d446c51d2ab","target":"record","created_at":"2026-05-18T01:21:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"21bc1ebbfd3646bfcb96d3c48d0ebfde79d1663efd3378e3c09efd522aaabb62","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.NI","submitted_at":"2016-02-09T20:21:18Z","title_canon_sha256":"9ffe33472930c328bcef871c7f9c5d6eecce9b923d988ae7ba6a39613c964531"},"schema_version":"1.0","source":{"id":"1602.03153","kind":"arxiv","version":1}},"canonical_sha256":"93a9f4e597fd8c4d1a3a6375dd63594c70d0cdf03bd16213a9fc5068e0f41b84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"93a9f4e597fd8c4d1a3a6375dd63594c70d0cdf03bd16213a9fc5068e0f41b84","first_computed_at":"2026-05-18T01:21:03.329784Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:21:03.329784Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o6ZaddgPZWFVBe6gl4i0KzAoxuT2KT44JC/T3Dn7RFCdTSS1/fTekbhHHWGW6TVGj5PdwGNNDTn9lpDYtyATDQ==","signature_status":"signed_v1","signed_at":"2026-05-18T01:21:03.330366Z","signed_message":"canonical_sha256_bytes"},"source_id":"1602.03153","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6eef0d6be2fe98d569fc7b0c25079c0cfef099c25b8fabe450e79d446c51d2ab","sha256:cadb6bde12a316664a7b7b716867c549870986058d4fab53d9e636340922f5b8"],"state_sha256":"eb6e5fee2c49e837b8823cafb53272932901e132c5378e4d0c25a39062ec5517"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"H7Gamonc3cNAeLxagQLiTH5OUuEH1erfddfRlab16RsO59+IIFTugRNfBi0SCSxTM5TMc4SirZPEc9yWbrSgAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-28T06:53:37.086853Z","bundle_sha256":"39dd73354e80aaff30e68da039e84304193a673b981b183d6665a436a0a49da0"}}