{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EPUPOVO375DXP75ZMKBLWAXFGI","short_pith_number":"pith:EPUPOVO3","canonical_record":{"source":{"id":"2405.13175","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-21T19:54:19Z","cross_cats_sorted":[],"title_canon_sha256":"48e0e34fc60c3a518ac7eab1c58b03cb1c32d97ec0b3b9b039dd0e39d1e1b2b4","abstract_canon_sha256":"4ad6d6c48b37fa7c44134985ae7d028580eae0a5c3bdda3f1da1ec13fe764617"},"schema_version":"1.0"},"canonical_sha256":"23e8f755dbff4777ffb96282bb02e53200ae6845a6326c0fc1256cc4363eff7b","source":{"kind":"arxiv","id":"2405.13175","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.13175","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"arxiv_version","alias_value":"2405.13175v1","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.13175","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_12","alias_value":"EPUPOVO375DX","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_16","alias_value":"EPUPOVO375DXP75Z","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_8","alias_value":"EPUPOVO3","created_at":"2026-07-05T08:21:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EPUPOVO375DXP75ZMKBLWAXFGI","target":"record","payload":{"canonical_record":{"source":{"id":"2405.13175","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-21T19:54:19Z","cross_cats_sorted":[],"title_canon_sha256":"48e0e34fc60c3a518ac7eab1c58b03cb1c32d97ec0b3b9b039dd0e39d1e1b2b4","abstract_canon_sha256":"4ad6d6c48b37fa7c44134985ae7d028580eae0a5c3bdda3f1da1ec13fe764617"},"schema_version":"1.0"},"canonical_sha256":"23e8f755dbff4777ffb96282bb02e53200ae6845a6326c0fc1256cc4363eff7b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:21:59.235742Z","signature_b64":"7qFHJjEqD6zRuhnRIyYWzd1DGTMxWp6Y7DQORWa3XESebZSdAqHUOJYcSBxVoY6f3xFl30aCKHHs/xDjd2wLDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"23e8f755dbff4777ffb96282bb02e53200ae6845a6326c0fc1256cc4363eff7b","last_reissued_at":"2026-07-05T08:21:59.235293Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:21:59.235293Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.13175","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:21:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EMiNtADlHfs+FSeRPC//7zwpNRzRRKe6CTSnXi4jo4uCsinALZ+md4GY7BVz75kV51m196kRttFJkktRt6v2Cw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:44:08.605896Z"},"content_sha256":"700784c0b6ef843b20edcd2d1f94c229b813f59ed945f810199f8971c0bc8454","schema_version":"1.0","event_id":"sha256:700784c0b6ef843b20edcd2d1f94c229b813f59ed945f810199f8971c0bc8454"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EPUPOVO375DXP75ZMKBLWAXFGI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Alexandros Kapravelos, Nikolaos Pantelaios","submitted_at":"2024-05-21T19:54:19Z","abstract_excerpt":"Evasion techniques allow malicious code to never be observed. This impacts significantly the detection capabilities of tools that rely on either dynamic or static analysis, as they never get to process the malicious code. The dynamic nature of JavaScript, where code is often injected dynamically, makes evasions particularly effective. Yet, we lack tools that can detect evasive techniques in a challenging environment such as JavaScript.\n  In this paper, we present FV8, a modified V8 JavaScript engine designed to identify evasion techniques in JavaScript code. FV8 selectively enforces code execu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.13175","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.13175/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:21:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ErLiRuC0GT/uQIgx862i43TbcKr2u4oiG7fsj0OHcOwPAQCLUgcp4rOLuwz+85pPzuqlTsCZZ0S6HqrM26K6DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T11:44:08.606521Z"},"content_sha256":"df365bbdf3750562c988f282335b12bd0ff8b9ae88e060fb67bf4b14e9e9f0d6","schema_version":"1.0","event_id":"sha256:df365bbdf3750562c988f282335b12bd0ff8b9ae88e060fb67bf4b14e9e9f0d6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EPUPOVO375DXP75ZMKBLWAXFGI/bundle.json","state_url":"https://pith.science/pith/EPUPOVO375DXP75ZMKBLWAXFGI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EPUPOVO375DXP75ZMKBLWAXFGI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T11:44:08Z","links":{"resolver":"https://pith.science/pith/EPUPOVO375DXP75ZMKBLWAXFGI","bundle":"https://pith.science/pith/EPUPOVO375DXP75ZMKBLWAXFGI/bundle.json","state":"https://pith.science/pith/EPUPOVO375DXP75ZMKBLWAXFGI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EPUPOVO375DXP75ZMKBLWAXFGI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EPUPOVO375DXP75ZMKBLWAXFGI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4ad6d6c48b37fa7c44134985ae7d028580eae0a5c3bdda3f1da1ec13fe764617","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-21T19:54:19Z","title_canon_sha256":"48e0e34fc60c3a518ac7eab1c58b03cb1c32d97ec0b3b9b039dd0e39d1e1b2b4"},"schema_version":"1.0","source":{"id":"2405.13175","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.13175","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"arxiv_version","alias_value":"2405.13175v1","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.13175","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_12","alias_value":"EPUPOVO375DX","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_16","alias_value":"EPUPOVO375DXP75Z","created_at":"2026-07-05T08:21:59Z"},{"alias_kind":"pith_short_8","alias_value":"EPUPOVO3","created_at":"2026-07-05T08:21:59Z"}],"graph_snapshots":[{"event_id":"sha256:df365bbdf3750562c988f282335b12bd0ff8b9ae88e060fb67bf4b14e9e9f0d6","target":"graph","created_at":"2026-07-05T08:21:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.13175/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Evasion techniques allow malicious code to never be observed. This impacts significantly the detection capabilities of tools that rely on either dynamic or static analysis, as they never get to process the malicious code. The dynamic nature of JavaScript, where code is often injected dynamically, makes evasions particularly effective. Yet, we lack tools that can detect evasive techniques in a challenging environment such as JavaScript.\n  In this paper, we present FV8, a modified V8 JavaScript engine designed to identify evasion techniques in JavaScript code. FV8 selectively enforces code execu","authors_text":"Alexandros Kapravelos, Nikolaos Pantelaios","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-21T19:54:19Z","title":"FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.13175","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:700784c0b6ef843b20edcd2d1f94c229b813f59ed945f810199f8971c0bc8454","target":"record","created_at":"2026-07-05T08:21:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4ad6d6c48b37fa7c44134985ae7d028580eae0a5c3bdda3f1da1ec13fe764617","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-05-21T19:54:19Z","title_canon_sha256":"48e0e34fc60c3a518ac7eab1c58b03cb1c32d97ec0b3b9b039dd0e39d1e1b2b4"},"schema_version":"1.0","source":{"id":"2405.13175","kind":"arxiv","version":1}},"canonical_sha256":"23e8f755dbff4777ffb96282bb02e53200ae6845a6326c0fc1256cc4363eff7b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"23e8f755dbff4777ffb96282bb02e53200ae6845a6326c0fc1256cc4363eff7b","first_computed_at":"2026-07-05T08:21:59.235293Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:21:59.235293Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7qFHJjEqD6zRuhnRIyYWzd1DGTMxWp6Y7DQORWa3XESebZSdAqHUOJYcSBxVoY6f3xFl30aCKHHs/xDjd2wLDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:21:59.235742Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.13175","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:700784c0b6ef843b20edcd2d1f94c229b813f59ed945f810199f8971c0bc8454","sha256:df365bbdf3750562c988f282335b12bd0ff8b9ae88e060fb67bf4b14e9e9f0d6"],"state_sha256":"bb2b289642c71f924d48f2087906684995d881f18c840135e15b892ba1d269bd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RqjH+FeHzaWj/3K8rQP9bygFwtMaCJ3d+NN43PX7uL28h/JEzYEUhR29zFCWLL2JbMSCm3mS2BA7pzPVKiaEAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T11:44:08.610663Z","bundle_sha256":"49d3c588f81f21a604a7021ab4595d3a6204c84d2e73bdc816012263e9928989"}}