{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:DLYEHKAI3EZQAIPKX5DUSAE6WF","short_pith_number":"pith:DLYEHKAI","canonical_record":{"source":{"id":"1908.01549","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-05T10:24:07Z","cross_cats_sorted":[],"title_canon_sha256":"ed1cbc49e0d961bcbadb3c812bb0579351a30bff6de62cfd5910ea67af8c0612","abstract_canon_sha256":"2dba252b71dd5b31fc4fe45c00fda4f1efdafc263d4a5e1f3768562492a9fd33"},"schema_version":"1.0"},"canonical_sha256":"1af043a808d9330021eabf4749009eb15b81117de41561b606b98409fac52a74","source":{"kind":"arxiv","id":"1908.01549","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.01549","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"arxiv_version","alias_value":"1908.01549v2","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.01549","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_12","alias_value":"DLYEHKAI3EZQ","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_16","alias_value":"DLYEHKAI3EZQAIPK","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_8","alias_value":"DLYEHKAI","created_at":"2026-07-04T23:52:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:DLYEHKAI3EZQAIPKX5DUSAE6WF","target":"record","payload":{"canonical_record":{"source":{"id":"1908.01549","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-05T10:24:07Z","cross_cats_sorted":[],"title_canon_sha256":"ed1cbc49e0d961bcbadb3c812bb0579351a30bff6de62cfd5910ea67af8c0612","abstract_canon_sha256":"2dba252b71dd5b31fc4fe45c00fda4f1efdafc263d4a5e1f3768562492a9fd33"},"schema_version":"1.0"},"canonical_sha256":"1af043a808d9330021eabf4749009eb15b81117de41561b606b98409fac52a74","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:52:06.932454Z","signature_b64":"//phiVPSFIUhzkG2MVFGgNbkoAKNl29KN34SSFfl/fmzFgPxptTCTSiY2MLlHVF3akJlwYIIq4f45ncG8D4+Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1af043a808d9330021eabf4749009eb15b81117de41561b606b98409fac52a74","last_reissued_at":"2026-07-04T23:52:06.932074Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:52:06.932074Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.01549","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:52:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"es2Aiw4i21wRo02TR1xSV8tfEI0U/8cagFQP3pLQodIFa9BxV/h+NFRdRcSBh39dFHJ3yjJkLT1ELREqfmjBBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:26:09.901691Z"},"content_sha256":"9f0703329739bd8b587747dbc38ee5c04d47e0ad94706d11694ca77cfcd8d142","schema_version":"1.0","event_id":"sha256:9f0703329739bd8b587747dbc38ee5c04d47e0ad94706d11694ca77cfcd8d142"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:DLYEHKAI3EZQAIPKX5DUSAE6WF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How to Kill Symbolic Deobfuscation for Free; or Unleashing the Potential of Path-Oriented Protections","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jean-Yves Marion, Mathilde Ollivier, Richard Bonichon, S\\'ebastien Bardin","submitted_at":"2019-08-05T10:24:07Z","abstract_excerpt":"Code obfuscation is a major tool for protecting software intellectual property from attacks such as reverse engineering or code tampering. Yet, recently proposed (automated) attacks based on Dynamic Symbolic Execution (DSE) shows very promising results, hence threatening software integrity. Current defenses are not fully satisfactory, being either not efficient against symbolic reasoning, or affecting runtime performance too much, or being too easy to spot. We present and study a new class of anti-DSE protections coined as path-oriented protections targeting the weakest spot of DSE, namely pat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.01549","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.01549/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:52:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZfuB2Y+atdfc+UhTiu659WI13bRZVDfwgjZuCtbrHv/+Fr8VvCumv9t0fwUuxUgqVV4LI4aBAPBmF7+9J6TVCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T09:26:09.902165Z"},"content_sha256":"30ccb6629b82e35c8d8a46eae23d94cdc91cee9d090853d1e8e1f4857292be49","schema_version":"1.0","event_id":"sha256:30ccb6629b82e35c8d8a46eae23d94cdc91cee9d090853d1e8e1f4857292be49"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/bundle.json","state_url":"https://pith.science/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T09:26:09Z","links":{"resolver":"https://pith.science/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF","bundle":"https://pith.science/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/bundle.json","state":"https://pith.science/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DLYEHKAI3EZQAIPKX5DUSAE6WF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:DLYEHKAI3EZQAIPKX5DUSAE6WF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2dba252b71dd5b31fc4fe45c00fda4f1efdafc263d4a5e1f3768562492a9fd33","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-05T10:24:07Z","title_canon_sha256":"ed1cbc49e0d961bcbadb3c812bb0579351a30bff6de62cfd5910ea67af8c0612"},"schema_version":"1.0","source":{"id":"1908.01549","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.01549","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"arxiv_version","alias_value":"1908.01549v2","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.01549","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_12","alias_value":"DLYEHKAI3EZQ","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_16","alias_value":"DLYEHKAI3EZQAIPK","created_at":"2026-07-04T23:52:06Z"},{"alias_kind":"pith_short_8","alias_value":"DLYEHKAI","created_at":"2026-07-04T23:52:06Z"}],"graph_snapshots":[{"event_id":"sha256:30ccb6629b82e35c8d8a46eae23d94cdc91cee9d090853d1e8e1f4857292be49","target":"graph","created_at":"2026-07-04T23:52:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.01549/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Code obfuscation is a major tool for protecting software intellectual property from attacks such as reverse engineering or code tampering. Yet, recently proposed (automated) attacks based on Dynamic Symbolic Execution (DSE) shows very promising results, hence threatening software integrity. Current defenses are not fully satisfactory, being either not efficient against symbolic reasoning, or affecting runtime performance too much, or being too easy to spot. We present and study a new class of anti-DSE protections coined as path-oriented protections targeting the weakest spot of DSE, namely pat","authors_text":"Jean-Yves Marion, Mathilde Ollivier, Richard Bonichon, S\\'ebastien Bardin","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-05T10:24:07Z","title":"How to Kill Symbolic Deobfuscation for Free; or Unleashing the Potential of Path-Oriented Protections"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.01549","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9f0703329739bd8b587747dbc38ee5c04d47e0ad94706d11694ca77cfcd8d142","target":"record","created_at":"2026-07-04T23:52:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2dba252b71dd5b31fc4fe45c00fda4f1efdafc263d4a5e1f3768562492a9fd33","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-05T10:24:07Z","title_canon_sha256":"ed1cbc49e0d961bcbadb3c812bb0579351a30bff6de62cfd5910ea67af8c0612"},"schema_version":"1.0","source":{"id":"1908.01549","kind":"arxiv","version":2}},"canonical_sha256":"1af043a808d9330021eabf4749009eb15b81117de41561b606b98409fac52a74","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1af043a808d9330021eabf4749009eb15b81117de41561b606b98409fac52a74","first_computed_at":"2026-07-04T23:52:06.932074Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:52:06.932074Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"//phiVPSFIUhzkG2MVFGgNbkoAKNl29KN34SSFfl/fmzFgPxptTCTSiY2MLlHVF3akJlwYIIq4f45ncG8D4+Dw==","signature_status":"signed_v1","signed_at":"2026-07-04T23:52:06.932454Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.01549","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9f0703329739bd8b587747dbc38ee5c04d47e0ad94706d11694ca77cfcd8d142","sha256:30ccb6629b82e35c8d8a46eae23d94cdc91cee9d090853d1e8e1f4857292be49"],"state_sha256":"b4ec5a8c24eb396da613d911965f05333483db7068b20624b3ddbaeae509d468"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Je98+YY1KCL0ctH0nwMZfD2ahwuEXqh4xPLZa4SkxpDABAeuzlcm7+ko+GevOZtPyqxZYWDiSjiQhIj+P2VPAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T09:26:09.906960Z","bundle_sha256":"d25cc1ce4fd193ebf7b4623665d9659c3fd791d5b7137200799413af5e357947"}}