{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2NFRN4G6J65S7SLCSVOZP3QMS6","short_pith_number":"pith:2NFRN4G6","canonical_record":{"source":{"id":"2401.05641","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.OS","submitted_at":"2024-01-11T03:30:50Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"12cd69f0f96b723ff48948a9059f1f79cb40644f38efe2eb75c1ec81841bd10c","abstract_canon_sha256":"8fc587feaef5776fc544f3ea9ba62a428aabce4c48f566fdfa11f95fab55207b"},"schema_version":"1.0"},"canonical_sha256":"d34b16f0de4fbb2fc962955d97ee0c97baf150c402b0c91ff1d8c605530f9a04","source":{"kind":"arxiv","id":"2401.05641","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.05641","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"arxiv_version","alias_value":"2401.05641v1","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.05641","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_12","alias_value":"2NFRN4G6J65S","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_16","alias_value":"2NFRN4G6J65S7SLC","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_8","alias_value":"2NFRN4G6","created_at":"2026-07-05T07:32:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2NFRN4G6J65S7SLCSVOZP3QMS6","target":"record","payload":{"canonical_record":{"source":{"id":"2401.05641","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.OS","submitted_at":"2024-01-11T03:30:50Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"12cd69f0f96b723ff48948a9059f1f79cb40644f38efe2eb75c1ec81841bd10c","abstract_canon_sha256":"8fc587feaef5776fc544f3ea9ba62a428aabce4c48f566fdfa11f95fab55207b"},"schema_version":"1.0"},"canonical_sha256":"d34b16f0de4fbb2fc962955d97ee0c97baf150c402b0c91ff1d8c605530f9a04","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:32:32.888181Z","signature_b64":"9KmIPGXTv3Qf4UlKy8wE8D7bZ76ZREjtxB3FMjxo0GtZCkaJAJxYeL02xbKZdwaLC5+zRQ8dqU+E/iW8RvFECg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d34b16f0de4fbb2fc962955d97ee0c97baf150c402b0c91ff1d8c605530f9a04","last_reissued_at":"2026-07-05T07:32:32.887784Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:32:32.887784Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.05641","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KyLDw/efHUG+Z1WDmIwYvzvtwcyP6u75ZwQlxEWGI1H8tAogIRlh4fLmLkTLP3gp2JeY93+au8Ziv7qTiH5GBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:11:47.210520Z"},"content_sha256":"10f80d5ead24d0dfb9ffd351ce86e13d19bc2013c27772d3d6cdce6a186e8e08","schema_version":"1.0","event_id":"sha256:10f80d5ead24d0dfb9ffd351ce86e13d19bc2013c27772d3d6cdce6a186e8e08"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2NFRN4G6J65S7SLCSVOZP3QMS6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"When eBPF Meets Machine Learning: On-the-fly OS Kernel Compartmentalization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.OS","authors_text":"Hua Wei, Qingkai Zeng, Qinrun Dai, Tiejin Chen, Yueqi Chen, Zicheng Wang","submitted_at":"2024-01-11T03:30:50Z","abstract_excerpt":"Compartmentalization effectively prevents initial corruption from turning into a successful attack. This paper presents O2C, a pioneering system designed to enforce OS kernel compartmentalization on the fly. It not only provides immediate remediation for sudden threats but also maintains consistent system availability through the enforcement process.\n  O2C is empowered by the newest advancements of the eBPF ecosystem which allows to instrument eBPF programs that perform enforcement actions into the kernel at runtime. O2C takes the lead in embedding a machine learning model into eBPF programs, "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.05641","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.05641/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:32:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6QCqPVSH7w4wAkif/6TJzJIDcMWu+3+6GoOom4xwqLGDBmQEkC5W0+26JOFrhh1W3DyUBPZXdijp42/reIlUCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T21:11:47.211134Z"},"content_sha256":"2750befc8a89188b11d2d2e7a82394fa5de2a534acf68c1b66bf85d5bcf294d4","schema_version":"1.0","event_id":"sha256:2750befc8a89188b11d2d2e7a82394fa5de2a534acf68c1b66bf85d5bcf294d4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/bundle.json","state_url":"https://pith.science/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T21:11:47Z","links":{"resolver":"https://pith.science/pith/2NFRN4G6J65S7SLCSVOZP3QMS6","bundle":"https://pith.science/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/bundle.json","state":"https://pith.science/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2NFRN4G6J65S7SLCSVOZP3QMS6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2NFRN4G6J65S7SLCSVOZP3QMS6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fc587feaef5776fc544f3ea9ba62a428aabce4c48f566fdfa11f95fab55207b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.OS","submitted_at":"2024-01-11T03:30:50Z","title_canon_sha256":"12cd69f0f96b723ff48948a9059f1f79cb40644f38efe2eb75c1ec81841bd10c"},"schema_version":"1.0","source":{"id":"2401.05641","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.05641","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"arxiv_version","alias_value":"2401.05641v1","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.05641","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_12","alias_value":"2NFRN4G6J65S","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_16","alias_value":"2NFRN4G6J65S7SLC","created_at":"2026-07-05T07:32:32Z"},{"alias_kind":"pith_short_8","alias_value":"2NFRN4G6","created_at":"2026-07-05T07:32:32Z"}],"graph_snapshots":[{"event_id":"sha256:2750befc8a89188b11d2d2e7a82394fa5de2a534acf68c1b66bf85d5bcf294d4","target":"graph","created_at":"2026-07-05T07:32:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.05641/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Compartmentalization effectively prevents initial corruption from turning into a successful attack. This paper presents O2C, a pioneering system designed to enforce OS kernel compartmentalization on the fly. It not only provides immediate remediation for sudden threats but also maintains consistent system availability through the enforcement process.\n  O2C is empowered by the newest advancements of the eBPF ecosystem which allows to instrument eBPF programs that perform enforcement actions into the kernel at runtime. O2C takes the lead in embedding a machine learning model into eBPF programs, ","authors_text":"Hua Wei, Qingkai Zeng, Qinrun Dai, Tiejin Chen, Yueqi Chen, Zicheng Wang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.OS","submitted_at":"2024-01-11T03:30:50Z","title":"When eBPF Meets Machine Learning: On-the-fly OS Kernel Compartmentalization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.05641","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:10f80d5ead24d0dfb9ffd351ce86e13d19bc2013c27772d3d6cdce6a186e8e08","target":"record","created_at":"2026-07-05T07:32:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fc587feaef5776fc544f3ea9ba62a428aabce4c48f566fdfa11f95fab55207b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.OS","submitted_at":"2024-01-11T03:30:50Z","title_canon_sha256":"12cd69f0f96b723ff48948a9059f1f79cb40644f38efe2eb75c1ec81841bd10c"},"schema_version":"1.0","source":{"id":"2401.05641","kind":"arxiv","version":1}},"canonical_sha256":"d34b16f0de4fbb2fc962955d97ee0c97baf150c402b0c91ff1d8c605530f9a04","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d34b16f0de4fbb2fc962955d97ee0c97baf150c402b0c91ff1d8c605530f9a04","first_computed_at":"2026-07-05T07:32:32.887784Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:32:32.887784Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9KmIPGXTv3Qf4UlKy8wE8D7bZ76ZREjtxB3FMjxo0GtZCkaJAJxYeL02xbKZdwaLC5+zRQ8dqU+E/iW8RvFECg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:32:32.888181Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.05641","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:10f80d5ead24d0dfb9ffd351ce86e13d19bc2013c27772d3d6cdce6a186e8e08","sha256:2750befc8a89188b11d2d2e7a82394fa5de2a534acf68c1b66bf85d5bcf294d4"],"state_sha256":"77242c7603eebc6603b0a4768bd863cbf33cae66e2ee656ff8abaed5d7b9e6d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FVrqtsdcRYUr280m2E9NBr60xM1Jf/bdAOHtj16PwjUZ1QhFdJ7xOOS2Xe5sOveBmbsuYjK+EL5Byl1KC5oPAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T21:11:47.215682Z","bundle_sha256":"7a381e4ad9bf73141466681d6af1bd02f7784c1c42fdbd61d4f87ae29ee92cb5"}}