{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:5A6GTI6JKLCJDNLPPSOEP2ZHJP","short_pith_number":"pith:5A6GTI6J","canonical_record":{"source":{"id":"2211.02341","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-04T09:44:45Z","cross_cats_sorted":[],"title_canon_sha256":"1761fd4638e6ad13bef9869a9d66d4ebfcce361d5cc5c41bfffa0dac137f96a7","abstract_canon_sha256":"6177fcd97e5683e258c4dee1e523297887f9f5e363136890e74e615b857281bb"},"schema_version":"1.0"},"canonical_sha256":"e83c69a3c952c491b56f7c9c47eb274bced85ff1f694cb417ac4f1a3c9fb4131","source":{"kind":"arxiv","id":"2211.02341","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02341","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02341v1","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02341","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_12","alias_value":"5A6GTI6JKLCJ","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_16","alias_value":"5A6GTI6JKLCJDNLP","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_8","alias_value":"5A6GTI6J","created_at":"2026-07-05T05:13:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:5A6GTI6JKLCJDNLPPSOEP2ZHJP","target":"record","payload":{"canonical_record":{"source":{"id":"2211.02341","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-04T09:44:45Z","cross_cats_sorted":[],"title_canon_sha256":"1761fd4638e6ad13bef9869a9d66d4ebfcce361d5cc5c41bfffa0dac137f96a7","abstract_canon_sha256":"6177fcd97e5683e258c4dee1e523297887f9f5e363136890e74e615b857281bb"},"schema_version":"1.0"},"canonical_sha256":"e83c69a3c952c491b56f7c9c47eb274bced85ff1f694cb417ac4f1a3c9fb4131","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:13:14.421794Z","signature_b64":"K06XvmL5LVFKu5lcWwN0Ke7mM5dx3iSMco9rTLHXBjt/5Vxdvb/GNa72bTRkxvsI3OA+BzlVIYRhIojrj3qVCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e83c69a3c952c491b56f7c9c47eb274bced85ff1f694cb417ac4f1a3c9fb4131","last_reissued_at":"2026-07-05T05:13:14.421400Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:13:14.421400Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.02341","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rqvEGQXt3Jcs4OHO83fm43wtSsni3bpixLdncLCqGpZqAFci9H8mefFaR4RTygM2dVVej+/5OS3wwGXEL+KKDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T23:04:13.734985Z"},"content_sha256":"3a7e6f882132456069c3fd0c98e57789627d200f8ab1eb49c41b2679cde79206","schema_version":"1.0","event_id":"sha256:3a7e6f882132456069c3fd0c98e57789627d200f8ab1eb49c41b2679cde79206"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:5A6GTI6JKLCJDNLPPSOEP2ZHJP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Better Call Saltzer \\& Schroeder: A Retrospective Security Analysis of SolarWinds \\& Log4j","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Awais Rashid, Mohammad Tahaei, Partha Das Chowdhury","submitted_at":"2022-11-04T09:44:45Z","abstract_excerpt":"Saltzer \\& Schroeder's principles aim to bring security to the design of computer systems. We investigate SolarWinds Orion update and Log4j to unpack the intersections where observance of these principles could have mitigated the embedded vulnerabilities. The common principles that were not observed include \\emph{fail safe defaults}, \\emph{economy of mechanism}, \\emph{complete mediation} and \\emph{least privilege}. Then we explore the literature on secure software development interventions for developers to identify usable analysis tools and frameworks that can contribute towards improved obse"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02341","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.02341/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7HMNoHK9o6wDB9J3xs0WMVUR4upkLnPqTOe7mkykscKo/gybYZHV9bHGaVeAvcXssUoIuJ4GR3zwv7nezeb7Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T23:04:13.735608Z"},"content_sha256":"53db5f7aed14813d770254efc64ac6871f8f8b9eca26bf0ee6ff1af75918d1a4","schema_version":"1.0","event_id":"sha256:53db5f7aed14813d770254efc64ac6871f8f8b9eca26bf0ee6ff1af75918d1a4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/bundle.json","state_url":"https://pith.science/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T23:04:13Z","links":{"resolver":"https://pith.science/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP","bundle":"https://pith.science/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/bundle.json","state":"https://pith.science/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5A6GTI6JKLCJDNLPPSOEP2ZHJP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:5A6GTI6JKLCJDNLPPSOEP2ZHJP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6177fcd97e5683e258c4dee1e523297887f9f5e363136890e74e615b857281bb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-04T09:44:45Z","title_canon_sha256":"1761fd4638e6ad13bef9869a9d66d4ebfcce361d5cc5c41bfffa0dac137f96a7"},"schema_version":"1.0","source":{"id":"2211.02341","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02341","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02341v1","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02341","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_12","alias_value":"5A6GTI6JKLCJ","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_16","alias_value":"5A6GTI6JKLCJDNLP","created_at":"2026-07-05T05:13:14Z"},{"alias_kind":"pith_short_8","alias_value":"5A6GTI6J","created_at":"2026-07-05T05:13:14Z"}],"graph_snapshots":[{"event_id":"sha256:53db5f7aed14813d770254efc64ac6871f8f8b9eca26bf0ee6ff1af75918d1a4","target":"graph","created_at":"2026-07-05T05:13:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.02341/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Saltzer \\& Schroeder's principles aim to bring security to the design of computer systems. We investigate SolarWinds Orion update and Log4j to unpack the intersections where observance of these principles could have mitigated the embedded vulnerabilities. The common principles that were not observed include \\emph{fail safe defaults}, \\emph{economy of mechanism}, \\emph{complete mediation} and \\emph{least privilege}. Then we explore the literature on secure software development interventions for developers to identify usable analysis tools and frameworks that can contribute towards improved obse","authors_text":"Awais Rashid, Mohammad Tahaei, Partha Das Chowdhury","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-04T09:44:45Z","title":"Better Call Saltzer \\& Schroeder: A Retrospective Security Analysis of SolarWinds \\& Log4j"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02341","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3a7e6f882132456069c3fd0c98e57789627d200f8ab1eb49c41b2679cde79206","target":"record","created_at":"2026-07-05T05:13:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6177fcd97e5683e258c4dee1e523297887f9f5e363136890e74e615b857281bb","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-11-04T09:44:45Z","title_canon_sha256":"1761fd4638e6ad13bef9869a9d66d4ebfcce361d5cc5c41bfffa0dac137f96a7"},"schema_version":"1.0","source":{"id":"2211.02341","kind":"arxiv","version":1}},"canonical_sha256":"e83c69a3c952c491b56f7c9c47eb274bced85ff1f694cb417ac4f1a3c9fb4131","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e83c69a3c952c491b56f7c9c47eb274bced85ff1f694cb417ac4f1a3c9fb4131","first_computed_at":"2026-07-05T05:13:14.421400Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:13:14.421400Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K06XvmL5LVFKu5lcWwN0Ke7mM5dx3iSMco9rTLHXBjt/5Vxdvb/GNa72bTRkxvsI3OA+BzlVIYRhIojrj3qVCw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:13:14.421794Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.02341","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3a7e6f882132456069c3fd0c98e57789627d200f8ab1eb49c41b2679cde79206","sha256:53db5f7aed14813d770254efc64ac6871f8f8b9eca26bf0ee6ff1af75918d1a4"],"state_sha256":"88f65d6aca432b2149486de301f494208a1b44012f3a9b94ed5ce2b6b45fa477"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IyzqrW0QgOQnwGVW1ASzn1FvicpkUwBwjSkKAaPN1qXxS2CFb11wpm03bALfTZH2Ul8XoNrCbRNo1rE3GSsvAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T23:04:13.741140Z","bundle_sha256":"9d2636a66d7aac2fc162838dcf2af6f6a71afbaf8ffb3cf3892e2c309d4560f7"}}