{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:634I2C4YTBIYDLWEZCLY2FKDN6","short_pith_number":"pith:634I2C4Y","canonical_record":{"source":{"id":"2402.18649","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-28T19:00:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7425ddf71d76c9e3499527ad125c5d88111116809ab3999c8bb3908c8f8fb624","abstract_canon_sha256":"d295a53de2cff1f8ce374dc2cc50b0b5797074ee705160eb518e99a61ac0a8a1"},"schema_version":"1.0"},"canonical_sha256":"f6f88d0b98985181aec4c8978d15436fa8b80c5bae760bdfbe5ac632645ea839","source":{"kind":"arxiv","id":"2402.18649","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.18649","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"arxiv_version","alias_value":"2402.18649v1","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.18649","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_12","alias_value":"634I2C4YTBIY","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_16","alias_value":"634I2C4YTBIYDLWE","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_8","alias_value":"634I2C4Y","created_at":"2026-07-05T07:50:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:634I2C4YTBIYDLWEZCLY2FKDN6","target":"record","payload":{"canonical_record":{"source":{"id":"2402.18649","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-28T19:00:12Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"7425ddf71d76c9e3499527ad125c5d88111116809ab3999c8bb3908c8f8fb624","abstract_canon_sha256":"d295a53de2cff1f8ce374dc2cc50b0b5797074ee705160eb518e99a61ac0a8a1"},"schema_version":"1.0"},"canonical_sha256":"f6f88d0b98985181aec4c8978d15436fa8b80c5bae760bdfbe5ac632645ea839","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:50:25.800113Z","signature_b64":"625B+yzNKaDmmUlfMcwUxJhikucCmidN77b35nTvK5En2PiZxZQYBg1IumFP4+pZuqpbmZ57Go8uNX+oqBIaBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f6f88d0b98985181aec4c8978d15436fa8b80c5bae760bdfbe5ac632645ea839","last_reissued_at":"2026-07-05T07:50:25.799568Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:50:25.799568Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.18649","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"960LZ8m555VUAUdo2kK/FxvjlDh0Ca2ui/vPQGISwuuHPTajqKt7voChDB54zs4OhMuKSQGuz58nJMzfQ51MDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:29:31.114390Z"},"content_sha256":"edbf009bd0ba5e6ec97dc3123029e2da4e85dc4189932c07b0e68f6bd77d58ae","schema_version":"1.0","event_id":"sha256:edbf009bd0ba5e6ec97dc3123029e2da4e85dc4189932c07b0e68f6bd77d58ae"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:634I2C4YTBIYDLWEZCLY2FKDN6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Chaowei Xiao, Fangzhou Wu, Ning Zhang, Patrick McDaniel, Somesh Jha","submitted_at":"2024-02-28T19:00:12Z","abstract_excerpt":"Large Language Model (LLM) systems are inherently compositional, with individual LLM serving as the core foundation with additional layers of objects such as plugins, sandbox, and so on. Along with the great potential, there are also increasing concerns over the security of such probabilistic intelligent systems. However, existing studies on LLM security often focus on individual LLM, but without examining the ecosystem through the lens of LLM systems with other objects (e.g., Frontend, Webtool, Sandbox, and so on). In this paper, we systematically analyze the security of LLM systems, instead "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.18649","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.18649/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gyg9Ry5lhG3OIEW3mwM4v/a1iscRdS4+6lkbabl2ZQsR/HeEYK8DzyoEobiIT+L1OELENXRg/gES4hNwdQzHDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:29:31.114966Z"},"content_sha256":"005b5de7451527e167acb8a9aa5aeb3599770a3dd66217b31fcda02034a6317f","schema_version":"1.0","event_id":"sha256:005b5de7451527e167acb8a9aa5aeb3599770a3dd66217b31fcda02034a6317f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/634I2C4YTBIYDLWEZCLY2FKDN6/bundle.json","state_url":"https://pith.science/pith/634I2C4YTBIYDLWEZCLY2FKDN6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/634I2C4YTBIYDLWEZCLY2FKDN6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:29:31Z","links":{"resolver":"https://pith.science/pith/634I2C4YTBIYDLWEZCLY2FKDN6","bundle":"https://pith.science/pith/634I2C4YTBIYDLWEZCLY2FKDN6/bundle.json","state":"https://pith.science/pith/634I2C4YTBIYDLWEZCLY2FKDN6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/634I2C4YTBIYDLWEZCLY2FKDN6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:634I2C4YTBIYDLWEZCLY2FKDN6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d295a53de2cff1f8ce374dc2cc50b0b5797074ee705160eb518e99a61ac0a8a1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-28T19:00:12Z","title_canon_sha256":"7425ddf71d76c9e3499527ad125c5d88111116809ab3999c8bb3908c8f8fb624"},"schema_version":"1.0","source":{"id":"2402.18649","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.18649","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"arxiv_version","alias_value":"2402.18649v1","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.18649","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_12","alias_value":"634I2C4YTBIY","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_16","alias_value":"634I2C4YTBIYDLWE","created_at":"2026-07-05T07:50:25Z"},{"alias_kind":"pith_short_8","alias_value":"634I2C4Y","created_at":"2026-07-05T07:50:25Z"}],"graph_snapshots":[{"event_id":"sha256:005b5de7451527e167acb8a9aa5aeb3599770a3dd66217b31fcda02034a6317f","target":"graph","created_at":"2026-07-05T07:50:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.18649/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large Language Model (LLM) systems are inherently compositional, with individual LLM serving as the core foundation with additional layers of objects such as plugins, sandbox, and so on. Along with the great potential, there are also increasing concerns over the security of such probabilistic intelligent systems. However, existing studies on LLM security often focus on individual LLM, but without examining the ecosystem through the lens of LLM systems with other objects (e.g., Frontend, Webtool, Sandbox, and so on). In this paper, we systematically analyze the security of LLM systems, instead ","authors_text":"Chaowei Xiao, Fangzhou Wu, Ning Zhang, Patrick McDaniel, Somesh Jha","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-28T19:00:12Z","title":"A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.18649","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:edbf009bd0ba5e6ec97dc3123029e2da4e85dc4189932c07b0e68f6bd77d58ae","target":"record","created_at":"2026-07-05T07:50:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d295a53de2cff1f8ce374dc2cc50b0b5797074ee705160eb518e99a61ac0a8a1","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-02-28T19:00:12Z","title_canon_sha256":"7425ddf71d76c9e3499527ad125c5d88111116809ab3999c8bb3908c8f8fb624"},"schema_version":"1.0","source":{"id":"2402.18649","kind":"arxiv","version":1}},"canonical_sha256":"f6f88d0b98985181aec4c8978d15436fa8b80c5bae760bdfbe5ac632645ea839","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f6f88d0b98985181aec4c8978d15436fa8b80c5bae760bdfbe5ac632645ea839","first_computed_at":"2026-07-05T07:50:25.799568Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:50:25.799568Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"625B+yzNKaDmmUlfMcwUxJhikucCmidN77b35nTvK5En2PiZxZQYBg1IumFP4+pZuqpbmZ57Go8uNX+oqBIaBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:50:25.800113Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.18649","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:edbf009bd0ba5e6ec97dc3123029e2da4e85dc4189932c07b0e68f6bd77d58ae","sha256:005b5de7451527e167acb8a9aa5aeb3599770a3dd66217b31fcda02034a6317f"],"state_sha256":"f98dd439c4a8f0b2eec433daaf357d5fc328e34fb4da7ca337633135818c8025"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"88iKWItnFRgVEGCSSQKueIZgg7EWcAdKiDQshPDvtnMSrk9nQ/rxLR46WbaKS3U+bXZX1lu8ZPzdVmUqU62VDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:29:31.119776Z","bundle_sha256":"0677baa6d1be8bd1b1ba504992eaffd4b83c40583bbf21b8d4dff04a356ee5c3"}}