{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:EM2SDUFMJPPJWJIZYTVCGHI3MQ","short_pith_number":"pith:EM2SDUFM","canonical_record":{"source":{"id":"2009.11501","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-24T06:04:56Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"bf6db92b6464e2db38d3d03e32922560f8ab74386ed5eff0727c919635d14c11","abstract_canon_sha256":"5404321ff59e55cb7ab6c8566b362994b1c776cd2f70e363f3781148b20c4b89"},"schema_version":"1.0"},"canonical_sha256":"233521d0ac4bde9b2519c4ea231d1b640639c75109ecdcbe786b1a6267a8cc84","source":{"kind":"arxiv","id":"2009.11501","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.11501","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"arxiv_version","alias_value":"2009.11501v1","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.11501","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_12","alias_value":"EM2SDUFMJPPJ","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_16","alias_value":"EM2SDUFMJPPJWJIZ","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_8","alias_value":"EM2SDUFM","created_at":"2026-07-05T04:10:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:EM2SDUFMJPPJWJIZYTVCGHI3MQ","target":"record","payload":{"canonical_record":{"source":{"id":"2009.11501","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-24T06:04:56Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"bf6db92b6464e2db38d3d03e32922560f8ab74386ed5eff0727c919635d14c11","abstract_canon_sha256":"5404321ff59e55cb7ab6c8566b362994b1c776cd2f70e363f3781148b20c4b89"},"schema_version":"1.0"},"canonical_sha256":"233521d0ac4bde9b2519c4ea231d1b640639c75109ecdcbe786b1a6267a8cc84","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:10:34.354811Z","signature_b64":"TMFxy5w58hoTgE2UL7j7Vuq6BOGzh4Whr/Nl7AvR64qGvrLbdCfFxXv111Z4uWXFGx5lAEFg3MVP1wwVcSf6BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"233521d0ac4bde9b2519c4ea231d1b640639c75109ecdcbe786b1a6267a8cc84","last_reissued_at":"2026-07-05T04:10:34.354438Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:10:34.354438Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.11501","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:10:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"COKpFPqp/Y/aV7vcod+uRpxXlYFhEaaF7NlEZBa+p8icMdDHkOc6NkVB4PFRlf2IRweHrIxLtN3jN9EevHq/BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T13:23:01.533170Z"},"content_sha256":"8fa760abdb79207cd797f8f5e6610d76661f5d3370237eb11c42d67b90c43545","schema_version":"1.0","event_id":"sha256:8fa760abdb79207cd797f8f5e6610d76661f5d3370237eb11c42d67b90c43545"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:EM2SDUFMJPPJWJIZYTVCGHI3MQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ThreatZoom: CVE2CWE using Hierarchical Neural Network","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ehab Al-Shaer, Ehsan Aghaei, Waseem Shadid","submitted_at":"2020-09-24T06:04:56Z","abstract_excerpt":"The Common Vulnerabilities and Exposures (CVE) represent standard means for sharing publicly known information security vulnerabilities. One or more CVEs are grouped into the Common Weakness Enumeration (CWE) classes for the purpose of understanding the software or configuration flaws and potential impacts enabled by these vulnerabilities and identifying means to detect or prevent exploitation. As the CVE-to-CWE classification is mostly performed manually by domain experts, thousands of critical and new CVEs remain unclassified, yet they are unpatchable. This significantly limits the utility o"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.11501","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.11501/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:10:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ik4uCti4/M1hbNFTHesZVu285/iY+LVu1CXCj5SVqoIiRA8eP059tgju1olZO3/Xq7x0CTv6oKSbCY6Xx3fhDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-15T13:23:01.534032Z"},"content_sha256":"16aa34c0fde2cd678932113727ea15b576f5e51cd08322963727c83d5d9238f4","schema_version":"1.0","event_id":"sha256:16aa34c0fde2cd678932113727ea15b576f5e51cd08322963727c83d5d9238f4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/bundle.json","state_url":"https://pith.science/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-15T13:23:01Z","links":{"resolver":"https://pith.science/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ","bundle":"https://pith.science/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/bundle.json","state":"https://pith.science/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EM2SDUFMJPPJWJIZYTVCGHI3MQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:EM2SDUFMJPPJWJIZYTVCGHI3MQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5404321ff59e55cb7ab6c8566b362994b1c776cd2f70e363f3781148b20c4b89","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-24T06:04:56Z","title_canon_sha256":"bf6db92b6464e2db38d3d03e32922560f8ab74386ed5eff0727c919635d14c11"},"schema_version":"1.0","source":{"id":"2009.11501","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.11501","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"arxiv_version","alias_value":"2009.11501v1","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.11501","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_12","alias_value":"EM2SDUFMJPPJ","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_16","alias_value":"EM2SDUFMJPPJWJIZ","created_at":"2026-07-05T04:10:34Z"},{"alias_kind":"pith_short_8","alias_value":"EM2SDUFM","created_at":"2026-07-05T04:10:34Z"}],"graph_snapshots":[{"event_id":"sha256:16aa34c0fde2cd678932113727ea15b576f5e51cd08322963727c83d5d9238f4","target":"graph","created_at":"2026-07-05T04:10:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.11501/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Common Vulnerabilities and Exposures (CVE) represent standard means for sharing publicly known information security vulnerabilities. One or more CVEs are grouped into the Common Weakness Enumeration (CWE) classes for the purpose of understanding the software or configuration flaws and potential impacts enabled by these vulnerabilities and identifying means to detect or prevent exploitation. As the CVE-to-CWE classification is mostly performed manually by domain experts, thousands of critical and new CVEs remain unclassified, yet they are unpatchable. This significantly limits the utility o","authors_text":"Ehab Al-Shaer, Ehsan Aghaei, Waseem Shadid","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-24T06:04:56Z","title":"ThreatZoom: CVE2CWE using Hierarchical Neural Network"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.11501","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8fa760abdb79207cd797f8f5e6610d76661f5d3370237eb11c42d67b90c43545","target":"record","created_at":"2026-07-05T04:10:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5404321ff59e55cb7ab6c8566b362994b1c776cd2f70e363f3781148b20c4b89","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-09-24T06:04:56Z","title_canon_sha256":"bf6db92b6464e2db38d3d03e32922560f8ab74386ed5eff0727c919635d14c11"},"schema_version":"1.0","source":{"id":"2009.11501","kind":"arxiv","version":1}},"canonical_sha256":"233521d0ac4bde9b2519c4ea231d1b640639c75109ecdcbe786b1a6267a8cc84","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"233521d0ac4bde9b2519c4ea231d1b640639c75109ecdcbe786b1a6267a8cc84","first_computed_at":"2026-07-05T04:10:34.354438Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:10:34.354438Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TMFxy5w58hoTgE2UL7j7Vuq6BOGzh4Whr/Nl7AvR64qGvrLbdCfFxXv111Z4uWXFGx5lAEFg3MVP1wwVcSf6BA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:10:34.354811Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.11501","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8fa760abdb79207cd797f8f5e6610d76661f5d3370237eb11c42d67b90c43545","sha256:16aa34c0fde2cd678932113727ea15b576f5e51cd08322963727c83d5d9238f4"],"state_sha256":"feb2849da0217607469e5b032fb2f0d2eb3c4dbcb82ad6f9f59124fe4158c190"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8bnzWnF9ZsvryZzRXvh8d5vhRTQHZjRYKU3CPfm3tZyKH1RK6HNd7/xeYE/kgDlQFFB/5mrvAvKYI1xpaCNaBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-15T13:23:01.540640Z","bundle_sha256":"68b9a5a54ae87c6a529877eee58c296c8d7bdb45cc1ee2e645483e5f8f964cca"}}