{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:6RJQTP24EFNLWEEI6CO5WHZU4E","short_pith_number":"pith:6RJQTP24","schema_version":"1.0","canonical_sha256":"f45309bf5c215abb1088f09ddb1f34e121f451c2b7ff92ac87e6fabbfddb9fb4","source":{"kind":"arxiv","id":"2111.05770","version":2},"attestation_state":"computed","paper":{"title":"Symbolic Security Predicates: Hunt Program Weaknesses","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Alexey Vishnyakov, Andrey Fedotov, Daniil Kuts, Darya Parygina, Eli Kobrin, Vlada Logunova","submitted_at":"2021-11-10T16:17:13Z","abstract_excerpt":"Dynamic symbolic execution (DSE) is a powerful method for path exploration during hybrid fuzzing and automatic bug detection. We propose security predicates to effectively detect undefined behavior and memory access violation errors. Initially, we symbolically execute program on paths that don't trigger any errors (hybrid fuzzing may explore these paths). Then we construct a symbolic security predicate to verify some error condition. Thus, we may change the program data flow to entail null pointer dereference, division by zero, out-of-bounds access, or integer overflow weaknesses. Unlike stati"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2111.05770","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2021-11-10T16:17:13Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"e302c066012da626c01219242ebf1fbcc263d2487e9941f89733d29ab5542e79","abstract_canon_sha256":"8fb6bef0874598c594799aa06343913726d265ef6b3e388123609f12999b6c64"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:07:06.249688Z","signature_b64":"fFLoOCD7gkJEPC19Kdo7dbUEhT/aPPcjEw+li5pbjB39R2GEX8kGl/j3YMdDYfAuraseczQJbWl409w3/F4nCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f45309bf5c215abb1088f09ddb1f34e121f451c2b7ff92ac87e6fabbfddb9fb4","last_reissued_at":"2026-07-05T04:07:06.249253Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:07:06.249253Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Symbolic Security Predicates: Hunt Program Weaknesses","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Alexey Vishnyakov, Andrey Fedotov, Daniil Kuts, Darya Parygina, Eli Kobrin, Vlada Logunova","submitted_at":"2021-11-10T16:17:13Z","abstract_excerpt":"Dynamic symbolic execution (DSE) is a powerful method for path exploration during hybrid fuzzing and automatic bug detection. We propose security predicates to effectively detect undefined behavior and memory access violation errors. Initially, we symbolically execute program on paths that don't trigger any errors (hybrid fuzzing may explore these paths). Then we construct a symbolic security predicate to verify some error condition. Thus, we may change the program data flow to entail null pointer dereference, division by zero, out-of-bounds access, or integer overflow weaknesses. Unlike stati"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.05770","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.05770/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2111.05770","created_at":"2026-07-05T04:07:06.249310+00:00"},{"alias_kind":"arxiv_version","alias_value":"2111.05770v2","created_at":"2026-07-05T04:07:06.249310+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.05770","created_at":"2026-07-05T04:07:06.249310+00:00"},{"alias_kind":"pith_short_12","alias_value":"6RJQTP24EFNL","created_at":"2026-07-05T04:07:06.249310+00:00"},{"alias_kind":"pith_short_16","alias_value":"6RJQTP24EFNLWEEI","created_at":"2026-07-05T04:07:06.249310+00:00"},{"alias_kind":"pith_short_8","alias_value":"6RJQTP24","created_at":"2026-07-05T04:07:06.249310+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2412.12039","citing_title":"Can LLM Prompting Serve as a Proxy for Static Analysis in Vulnerability Detection","ref_index":25,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E","json":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E.json","graph_json":"https://pith.science/api/pith-number/6RJQTP24EFNLWEEI6CO5WHZU4E/graph.json","events_json":"https://pith.science/api/pith-number/6RJQTP24EFNLWEEI6CO5WHZU4E/events.json","paper":"https://pith.science/paper/6RJQTP24"},"agent_actions":{"view_html":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E","download_json":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E.json","view_paper":"https://pith.science/paper/6RJQTP24","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2111.05770&json=true","fetch_graph":"https://pith.science/api/pith-number/6RJQTP24EFNLWEEI6CO5WHZU4E/graph.json","fetch_events":"https://pith.science/api/pith-number/6RJQTP24EFNLWEEI6CO5WHZU4E/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E/action/timestamp_anchor","attest_storage":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E/action/storage_attestation","attest_author":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E/action/author_attestation","sign_citation":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E/action/citation_signature","submit_replication":"https://pith.science/pith/6RJQTP24EFNLWEEI6CO5WHZU4E/action/replication_record"}},"created_at":"2026-07-05T04:07:06.249310+00:00","updated_at":"2026-07-05T04:07:06.249310+00:00"}