{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GAJDB4NKSYDWU6YC6VI6FMVWYR","short_pith_number":"pith:GAJDB4NK","canonical_record":{"source":{"id":"2403.15723","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-23T05:18:46Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"c7b1eb80b5fbcc47872d5d127fa651bc4cd42ec1ecf06a84f8fe22bb59005131","abstract_canon_sha256":"30ab42613da8cf8da34a3fc5e422abc1a2155a8b6adc3e57534f4d98ef16fa12"},"schema_version":"1.0"},"canonical_sha256":"301230f1aa96076a7b02f551e2b2b6c4738cee4df537a30d47d510f1a93b5e03","source":{"kind":"arxiv","id":"2403.15723","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15723","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15723v2","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15723","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_12","alias_value":"GAJDB4NKSYDW","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_16","alias_value":"GAJDB4NKSYDWU6YC","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_8","alias_value":"GAJDB4NK","created_at":"2026-07-05T08:41:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GAJDB4NKSYDWU6YC6VI6FMVWYR","target":"record","payload":{"canonical_record":{"source":{"id":"2403.15723","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-23T05:18:46Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"c7b1eb80b5fbcc47872d5d127fa651bc4cd42ec1ecf06a84f8fe22bb59005131","abstract_canon_sha256":"30ab42613da8cf8da34a3fc5e422abc1a2155a8b6adc3e57534f4d98ef16fa12"},"schema_version":"1.0"},"canonical_sha256":"301230f1aa96076a7b02f551e2b2b6c4738cee4df537a30d47d510f1a93b5e03","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:41:44.192082Z","signature_b64":"ja4eW9RndevlXI6vCv1746Nenl+wbHBY3BpLMnRDBIEhw3QuMKiMfDhLHFomuI6JapQZ99rp4vVyZrrxyubUCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"301230f1aa96076a7b02f551e2b2b6c4738cee4df537a30d47d510f1a93b5e03","last_reissued_at":"2026-07-05T08:41:44.191677Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:41:44.191677Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.15723","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:41:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DId76ZsARj++ZQWQ+xBPhq17C5kVnAE9n04X1DJwGTcyXKNaOcgZFIOOTRTooBYoo0D8QY3vXhO/pXFUQUAmBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:51:19.261012Z"},"content_sha256":"b36be51342d52a442be7ffa617dde143620766100de0a1aab11b7cc0cc8946f6","schema_version":"1.0","event_id":"sha256:b36be51342d52a442be7ffa617dde143620766100de0a1aab11b7cc0cc8946f6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GAJDB4NKSYDWU6YC6VI6FMVWYR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A hybrid LLM workflow can help identify user privilege related variables in programs of any size","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Haizhou Wang, Peng Liu, Zhilong Wang","submitted_at":"2024-03-23T05:18:46Z","abstract_excerpt":"Many programs involves operations and logic manipulating user privileges, which is essential for the security of an organization. Therefore, one common malicious goal of attackers is to obtain or escalate the privileges, causing privilege leakage. To protect the program and the organization against privilege leakage attacks, it is important to eliminate the vulnerabilities which can be exploited to achieve such attacks. Unfortunately, while memory vulnerabilities are less challenging to find, logic vulnerabilities are much more imminent, harmful and difficult to identify. Accordingly, many ana"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15723","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.15723/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:41:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kWabujGv1Muq4kFsLfUVww6I3mZh0yuSwDHMjd93r+j7gUKKz/GT6C0qZ+xacUpnH1vk6h8n3t5/ZZkI7/0zAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:51:19.261522Z"},"content_sha256":"7fa7bb2bb4377754a25a0039b52ac2d1e8bcc4f730c86b561804cd21fb307360","schema_version":"1.0","event_id":"sha256:7fa7bb2bb4377754a25a0039b52ac2d1e8bcc4f730c86b561804cd21fb307360"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/bundle.json","state_url":"https://pith.science/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:51:19Z","links":{"resolver":"https://pith.science/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR","bundle":"https://pith.science/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/bundle.json","state":"https://pith.science/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GAJDB4NKSYDWU6YC6VI6FMVWYR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GAJDB4NKSYDWU6YC6VI6FMVWYR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"30ab42613da8cf8da34a3fc5e422abc1a2155a8b6adc3e57534f4d98ef16fa12","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-23T05:18:46Z","title_canon_sha256":"c7b1eb80b5fbcc47872d5d127fa651bc4cd42ec1ecf06a84f8fe22bb59005131"},"schema_version":"1.0","source":{"id":"2403.15723","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.15723","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"arxiv_version","alias_value":"2403.15723v2","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.15723","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_12","alias_value":"GAJDB4NKSYDW","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_16","alias_value":"GAJDB4NKSYDWU6YC","created_at":"2026-07-05T08:41:44Z"},{"alias_kind":"pith_short_8","alias_value":"GAJDB4NK","created_at":"2026-07-05T08:41:44Z"}],"graph_snapshots":[{"event_id":"sha256:7fa7bb2bb4377754a25a0039b52ac2d1e8bcc4f730c86b561804cd21fb307360","target":"graph","created_at":"2026-07-05T08:41:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.15723/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Many programs involves operations and logic manipulating user privileges, which is essential for the security of an organization. Therefore, one common malicious goal of attackers is to obtain or escalate the privileges, causing privilege leakage. To protect the program and the organization against privilege leakage attacks, it is important to eliminate the vulnerabilities which can be exploited to achieve such attacks. Unfortunately, while memory vulnerabilities are less challenging to find, logic vulnerabilities are much more imminent, harmful and difficult to identify. Accordingly, many ana","authors_text":"Haizhou Wang, Peng Liu, Zhilong Wang","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-23T05:18:46Z","title":"A hybrid LLM workflow can help identify user privilege related variables in programs of any size"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.15723","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b36be51342d52a442be7ffa617dde143620766100de0a1aab11b7cc0cc8946f6","target":"record","created_at":"2026-07-05T08:41:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"30ab42613da8cf8da34a3fc5e422abc1a2155a8b6adc3e57534f4d98ef16fa12","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-23T05:18:46Z","title_canon_sha256":"c7b1eb80b5fbcc47872d5d127fa651bc4cd42ec1ecf06a84f8fe22bb59005131"},"schema_version":"1.0","source":{"id":"2403.15723","kind":"arxiv","version":2}},"canonical_sha256":"301230f1aa96076a7b02f551e2b2b6c4738cee4df537a30d47d510f1a93b5e03","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"301230f1aa96076a7b02f551e2b2b6c4738cee4df537a30d47d510f1a93b5e03","first_computed_at":"2026-07-05T08:41:44.191677Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:41:44.191677Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ja4eW9RndevlXI6vCv1746Nenl+wbHBY3BpLMnRDBIEhw3QuMKiMfDhLHFomuI6JapQZ99rp4vVyZrrxyubUCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:41:44.192082Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.15723","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b36be51342d52a442be7ffa617dde143620766100de0a1aab11b7cc0cc8946f6","sha256:7fa7bb2bb4377754a25a0039b52ac2d1e8bcc4f730c86b561804cd21fb307360"],"state_sha256":"6c75882577eae81399b2c70dcef09be98f9d1fbbb61d266b62c00a427155618c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+wBu2ohXM3i2B5IC4BL4JeeXbsG0yjKj8AVDBsRvPIQJG8WptKwb2z4CEAGY1LMGEdwVSZrTHoJs2OEBTaqzAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:51:19.265224Z","bundle_sha256":"3d5a30f383143af6254df1664c5a09b3c382889275b044108b73a24a52b52253"}}