{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:CFZDR42W2GKF4QMMO3XBRZU7PJ","short_pith_number":"pith:CFZDR42W","canonical_record":{"source":{"id":"1807.11110","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-29T20:45:05Z","cross_cats_sorted":[],"title_canon_sha256":"5634572a95fb1b30301f92005f336eb5b5b9c9bc4716e6e8a64727cb7b34863b","abstract_canon_sha256":"ab12fc33e10418db4f85b7c58f5cedfa3cafecf25715bd5afd406aa3b7283f53"},"schema_version":"1.0"},"canonical_sha256":"117238f356d1945e418c76ee18e69f7a616b56404c0a96725f06f6a8f8c77553","source":{"kind":"arxiv","id":"1807.11110","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.11110","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"arxiv_version","alias_value":"1807.11110v3","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.11110","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_12","alias_value":"CFZDR42W2GKF","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_16","alias_value":"CFZDR42W2GKF4QMM","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_8","alias_value":"CFZDR42W","created_at":"2026-07-05T07:44:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:CFZDR42W2GKF4QMMO3XBRZU7PJ","target":"record","payload":{"canonical_record":{"source":{"id":"1807.11110","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-29T20:45:05Z","cross_cats_sorted":[],"title_canon_sha256":"5634572a95fb1b30301f92005f336eb5b5b9c9bc4716e6e8a64727cb7b34863b","abstract_canon_sha256":"ab12fc33e10418db4f85b7c58f5cedfa3cafecf25715bd5afd406aa3b7283f53"},"schema_version":"1.0"},"canonical_sha256":"117238f356d1945e418c76ee18e69f7a616b56404c0a96725f06f6a8f8c77553","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:44:14.775227Z","signature_b64":"jNoJvvk7BL2oJ7yMut4z9rUbu+R87/VCV0PG27x4H/WqkepLrq2XsenNZyuL7xwALaQhR6rFkBX4xgcNm7wxAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"117238f356d1945e418c76ee18e69f7a616b56404c0a96725f06f6a8f8c77553","last_reissued_at":"2026-07-05T07:44:14.774736Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:44:14.774736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1807.11110","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+gEXGnSh0GVywDVC6WJNq18aGFA2dzf/e/Ji+7lH2ZPLU0x3iYagEfQvoqZPIWkA/3AidmGNkNNVdOZtgqjTAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:49:38.805959Z"},"content_sha256":"0635f0e03b39fd91db28c9e51e53086c255baed445db4e220c3d78b96fa38ae3","schema_version":"1.0","event_id":"sha256:0635f0e03b39fd91db28c9e51e53086c255baed445db4e220c3d78b96fa38ae3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:CFZDR42W2GKF4QMMO3XBRZU7PJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ROPNN: Detection of ROP Payloads Using Deep Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Haizhou Wang, Minghui Zhu, Peng Liu, Ping Chen, Xusheng Li, Yiwei Fu, Zhisheng Hu","submitted_at":"2018-07-29T20:45:05Z","abstract_excerpt":"Return-oriented programming (ROP) is a code reuse attack that chains short snippets of existing code to perform arbitrary operations on target machines. Existing detection methods against ROP exhibit unsatisfactory detection accuracy and/or have high runtime overhead.\n  In this paper, we present ROPNN, which innovatively combines address space layout guided disassembly and deep neural networks to detect ROP payloads. The disassembler treats application input data as code pointers and aims to find any potential gadget chains, which are then classified by a deep neural network as benign or malic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.11110","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1807.11110/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:44:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GzWfwBGa647L74ns+KRPZ0AxrXoi/UnkZuWckM9hYHBymYa1xMPTaCZMXaUOmFFdS5N+wwIpvPRYQKxPSgVSBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T20:49:38.806481Z"},"content_sha256":"7a285b3158ed37327eed2040c05f50d509e13e76668b0b9e8d086045df8320ae","schema_version":"1.0","event_id":"sha256:7a285b3158ed37327eed2040c05f50d509e13e76668b0b9e8d086045df8320ae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/bundle.json","state_url":"https://pith.science/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T20:49:38Z","links":{"resolver":"https://pith.science/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ","bundle":"https://pith.science/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/bundle.json","state":"https://pith.science/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CFZDR42W2GKF4QMMO3XBRZU7PJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:CFZDR42W2GKF4QMMO3XBRZU7PJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ab12fc33e10418db4f85b7c58f5cedfa3cafecf25715bd5afd406aa3b7283f53","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-29T20:45:05Z","title_canon_sha256":"5634572a95fb1b30301f92005f336eb5b5b9c9bc4716e6e8a64727cb7b34863b"},"schema_version":"1.0","source":{"id":"1807.11110","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.11110","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"arxiv_version","alias_value":"1807.11110v3","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.11110","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_12","alias_value":"CFZDR42W2GKF","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_16","alias_value":"CFZDR42W2GKF4QMM","created_at":"2026-07-05T07:44:14Z"},{"alias_kind":"pith_short_8","alias_value":"CFZDR42W","created_at":"2026-07-05T07:44:14Z"}],"graph_snapshots":[{"event_id":"sha256:7a285b3158ed37327eed2040c05f50d509e13e76668b0b9e8d086045df8320ae","target":"graph","created_at":"2026-07-05T07:44:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1807.11110/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Return-oriented programming (ROP) is a code reuse attack that chains short snippets of existing code to perform arbitrary operations on target machines. Existing detection methods against ROP exhibit unsatisfactory detection accuracy and/or have high runtime overhead.\n  In this paper, we present ROPNN, which innovatively combines address space layout guided disassembly and deep neural networks to detect ROP payloads. The disassembler treats application input data as code pointers and aims to find any potential gadget chains, which are then classified by a deep neural network as benign or malic","authors_text":"Haizhou Wang, Minghui Zhu, Peng Liu, Ping Chen, Xusheng Li, Yiwei Fu, Zhisheng Hu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-29T20:45:05Z","title":"ROPNN: Detection of ROP Payloads Using Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.11110","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0635f0e03b39fd91db28c9e51e53086c255baed445db4e220c3d78b96fa38ae3","target":"record","created_at":"2026-07-05T07:44:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ab12fc33e10418db4f85b7c58f5cedfa3cafecf25715bd5afd406aa3b7283f53","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-07-29T20:45:05Z","title_canon_sha256":"5634572a95fb1b30301f92005f336eb5b5b9c9bc4716e6e8a64727cb7b34863b"},"schema_version":"1.0","source":{"id":"1807.11110","kind":"arxiv","version":3}},"canonical_sha256":"117238f356d1945e418c76ee18e69f7a616b56404c0a96725f06f6a8f8c77553","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"117238f356d1945e418c76ee18e69f7a616b56404c0a96725f06f6a8f8c77553","first_computed_at":"2026-07-05T07:44:14.774736Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:44:14.774736Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jNoJvvk7BL2oJ7yMut4z9rUbu+R87/VCV0PG27x4H/WqkepLrq2XsenNZyuL7xwALaQhR6rFkBX4xgcNm7wxAA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:44:14.775227Z","signed_message":"canonical_sha256_bytes"},"source_id":"1807.11110","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0635f0e03b39fd91db28c9e51e53086c255baed445db4e220c3d78b96fa38ae3","sha256:7a285b3158ed37327eed2040c05f50d509e13e76668b0b9e8d086045df8320ae"],"state_sha256":"40d4029dc3b9e009d453293bb78d1edd030d131df056e8b21614b9f06b226c4a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B296+C0F6pafywKr9tVt6GmZSQ5W9SOnKbc/Qpz5fcVu2DKNHCZq5EfntVZ+C+zEYcuOpdayUG3/EO5UUY5RAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T20:49:38.811487Z","bundle_sha256":"e68f23df663a6fe165763f48b6c1673f6ec7774282432592731792e036078ec7"}}