{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:GIQPLPEMNITHMV5FAS4L63DQK5","short_pith_number":"pith:GIQPLPEM","canonical_record":{"source":{"id":"2404.00196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-30T00:14:17Z","cross_cats_sorted":[],"title_canon_sha256":"b3e20b6f4777c2c484629c298290854712413da2c2fa7e0121edeb3c971fd16b","abstract_canon_sha256":"fee8bf993b97bbe97a23323df8b303a3ceadb2cc750c0ea259ac400801d92136"},"schema_version":"1.0"},"canonical_sha256":"3220f5bc8c6a267657a504b8bf6c70576248d092fd9e838da014ad96d78b93d1","source":{"kind":"arxiv","id":"2404.00196","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.00196","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"arxiv_version","alias_value":"2404.00196v1","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.00196","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_12","alias_value":"GIQPLPEMNITH","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_16","alias_value":"GIQPLPEMNITHMV5F","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_8","alias_value":"GIQPLPEM","created_at":"2026-07-05T08:02:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:GIQPLPEMNITHMV5FAS4L63DQK5","target":"record","payload":{"canonical_record":{"source":{"id":"2404.00196","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-30T00:14:17Z","cross_cats_sorted":[],"title_canon_sha256":"b3e20b6f4777c2c484629c298290854712413da2c2fa7e0121edeb3c971fd16b","abstract_canon_sha256":"fee8bf993b97bbe97a23323df8b303a3ceadb2cc750c0ea259ac400801d92136"},"schema_version":"1.0"},"canonical_sha256":"3220f5bc8c6a267657a504b8bf6c70576248d092fd9e838da014ad96d78b93d1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:02:29.619459Z","signature_b64":"wZPsJI0xOgIZW/Lc10PskSY7Og7BLUf57wt5GPqq/dUezNfoPBEcWPJB/OHppFqBjGAP7xkNNl3NyJXIjx8IDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3220f5bc8c6a267657a504b8bf6c70576248d092fd9e838da014ad96d78b93d1","last_reissued_at":"2026-07-05T08:02:29.618963Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:02:29.618963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.00196","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:02:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6wU/HDlsfU1hjCPSJZbLcxWDgS4lRrTN3/16OUqnDtjVn85sffo+9nsAD2XzskJjMXvTYEYoPzHzJJ5aEhQbCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:54:54.926952Z"},"content_sha256":"dcac9d7e62cc43d4c9710acc03288f06d53914d823be9cea3bd9560893cbfa92","schema_version":"1.0","event_id":"sha256:dcac9d7e62cc43d4c9710acc03288f06d53914d823be9cea3bd9560893cbfa92"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:GIQPLPEMNITHMV5FAS4L63DQK5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Combined Static Analysis and Machine Learning Prediction for Application Debloating","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chris Porter, Kangqi Ni, Santosh Pande, Sharjeel Khan","submitted_at":"2024-03-30T00:14:17Z","abstract_excerpt":"Software debloating can effectively thwart certain code reuse attacks by reducing attack surfaces to break gadget chains. Approaches based on static analysis enable a reduced set of functions reachable at a callsite for execution by leveraging static properties of the callgraph. This achieves low runtime overhead, but the function set is conservatively computed, negatively affecting reduction. In contrast, approaches based on machine learning (ML) have much better precision and can sharply reduce function sets, leading to significant improvement in attack surface. Nevertheless, mispredictions "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.00196","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.00196/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:02:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0W3u3i2LA/ScAID4tuXAzjgv4uP2d/Uxmq5K7rdewiETq8vtBKcIW9y6zFnZivTQM6JhjqarEkn+zLXHKPZJCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T21:54:54.927475Z"},"content_sha256":"ca7537a2969ca519b3c812f5ad90cafb9350c9e248eccf03ce466235778d57d3","schema_version":"1.0","event_id":"sha256:ca7537a2969ca519b3c812f5ad90cafb9350c9e248eccf03ce466235778d57d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/GIQPLPEMNITHMV5FAS4L63DQK5/bundle.json","state_url":"https://pith.science/pith/GIQPLPEMNITHMV5FAS4L63DQK5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/GIQPLPEMNITHMV5FAS4L63DQK5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T21:54:54Z","links":{"resolver":"https://pith.science/pith/GIQPLPEMNITHMV5FAS4L63DQK5","bundle":"https://pith.science/pith/GIQPLPEMNITHMV5FAS4L63DQK5/bundle.json","state":"https://pith.science/pith/GIQPLPEMNITHMV5FAS4L63DQK5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/GIQPLPEMNITHMV5FAS4L63DQK5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:GIQPLPEMNITHMV5FAS4L63DQK5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fee8bf993b97bbe97a23323df8b303a3ceadb2cc750c0ea259ac400801d92136","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-30T00:14:17Z","title_canon_sha256":"b3e20b6f4777c2c484629c298290854712413da2c2fa7e0121edeb3c971fd16b"},"schema_version":"1.0","source":{"id":"2404.00196","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.00196","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"arxiv_version","alias_value":"2404.00196v1","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.00196","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_12","alias_value":"GIQPLPEMNITH","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_16","alias_value":"GIQPLPEMNITHMV5F","created_at":"2026-07-05T08:02:29Z"},{"alias_kind":"pith_short_8","alias_value":"GIQPLPEM","created_at":"2026-07-05T08:02:29Z"}],"graph_snapshots":[{"event_id":"sha256:ca7537a2969ca519b3c812f5ad90cafb9350c9e248eccf03ce466235778d57d3","target":"graph","created_at":"2026-07-05T08:02:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.00196/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Software debloating can effectively thwart certain code reuse attacks by reducing attack surfaces to break gadget chains. Approaches based on static analysis enable a reduced set of functions reachable at a callsite for execution by leveraging static properties of the callgraph. This achieves low runtime overhead, but the function set is conservatively computed, negatively affecting reduction. In contrast, approaches based on machine learning (ML) have much better precision and can sharply reduce function sets, leading to significant improvement in attack surface. Nevertheless, mispredictions ","authors_text":"Chris Porter, Kangqi Ni, Santosh Pande, Sharjeel Khan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-30T00:14:17Z","title":"Combined Static Analysis and Machine Learning Prediction for Application Debloating"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.00196","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dcac9d7e62cc43d4c9710acc03288f06d53914d823be9cea3bd9560893cbfa92","target":"record","created_at":"2026-07-05T08:02:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fee8bf993b97bbe97a23323df8b303a3ceadb2cc750c0ea259ac400801d92136","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-30T00:14:17Z","title_canon_sha256":"b3e20b6f4777c2c484629c298290854712413da2c2fa7e0121edeb3c971fd16b"},"schema_version":"1.0","source":{"id":"2404.00196","kind":"arxiv","version":1}},"canonical_sha256":"3220f5bc8c6a267657a504b8bf6c70576248d092fd9e838da014ad96d78b93d1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3220f5bc8c6a267657a504b8bf6c70576248d092fd9e838da014ad96d78b93d1","first_computed_at":"2026-07-05T08:02:29.618963Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:02:29.618963Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wZPsJI0xOgIZW/Lc10PskSY7Og7BLUf57wt5GPqq/dUezNfoPBEcWPJB/OHppFqBjGAP7xkNNl3NyJXIjx8IDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:02:29.619459Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.00196","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dcac9d7e62cc43d4c9710acc03288f06d53914d823be9cea3bd9560893cbfa92","sha256:ca7537a2969ca519b3c812f5ad90cafb9350c9e248eccf03ce466235778d57d3"],"state_sha256":"6f2523cf6c66d93b3d79a2e0fef51132854bdeb4e692c37d06ee71c21cbc8661"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pAPuYq5YjFA9slbK3+7kIPPLA6KJbsFc05m6TN+HoIN22BvdvxhWykgdK9uVcfR3DqH9z3AjKREw5cIE+iq0AQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T21:54:54.931548Z","bundle_sha256":"09c15da61029a23236185183c196ae6a97456331282ef96eed0cc5ed1ac16b8f"}}