{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:H2YNUBZAY7CBFO4MCEFZVI4T3V","short_pith_number":"pith:H2YNUBZA","canonical_record":{"source":{"id":"2605.26665","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-26T07:54:24Z","cross_cats_sorted":[],"title_canon_sha256":"fe28ed52ab879ac4f3f08c76d48b7b34e19386fa06453b05bcea6aae4fee7a71","abstract_canon_sha256":"ede808f4d48e6e9e4d939b87dfa954bc6dd9c73446bfa1b3db44d1683828b350"},"schema_version":"1.0"},"canonical_sha256":"3eb0da0720c7c412bb8c110b9aa393dd53e502e9ff20d42f752fc7da894df3b5","source":{"kind":"arxiv","id":"2605.26665","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.26665","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"arxiv_version","alias_value":"2605.26665v1","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.26665","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_12","alias_value":"H2YNUBZAY7CB","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_16","alias_value":"H2YNUBZAY7CBFO4M","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_8","alias_value":"H2YNUBZA","created_at":"2026-05-27T01:06:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:H2YNUBZAY7CBFO4MCEFZVI4T3V","target":"record","payload":{"canonical_record":{"source":{"id":"2605.26665","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-26T07:54:24Z","cross_cats_sorted":[],"title_canon_sha256":"fe28ed52ab879ac4f3f08c76d48b7b34e19386fa06453b05bcea6aae4fee7a71","abstract_canon_sha256":"ede808f4d48e6e9e4d939b87dfa954bc6dd9c73446bfa1b3db44d1683828b350"},"schema_version":"1.0"},"canonical_sha256":"3eb0da0720c7c412bb8c110b9aa393dd53e502e9ff20d42f752fc7da894df3b5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-27T01:06:04.710278Z","signature_b64":"SfQUseEOt8oYkRc8sZyeoktKM9/l0T4A8+v/CskTl1g/D6TB2JAayQ6nzS9rOWWZAsXm+u+ZGPQTM7iXacJMBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3eb0da0720c7c412bb8c110b9aa393dd53e502e9ff20d42f752fc7da894df3b5","last_reissued_at":"2026-05-27T01:06:04.709542Z","signature_status":"signed_v1","first_computed_at":"2026-05-27T01:06:04.709542Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.26665","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-27T01:06:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+nBXNHL6ZXJCiY+WHugHCSrjgnKzfHP06Ga0HFGpskc2+3R0KdP2KzNM/r3ee5ksBGN9BQNeU1poekTgK2tJAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T21:53:30.044107Z"},"content_sha256":"07da0466f6540073107e02d73e4cd44df01775b31308c66bb2111b1c1142d3ea","schema_version":"1.0","event_id":"sha256:07da0466f6540073107e02d73e4cd44df01775b31308c66bb2111b1c1142d3ea"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:H2YNUBZAY7CBFO4MCEFZVI4T3V","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Can Ozkan, Dave Singelee","submitted_at":"2026-05-26T07:54:24Z","abstract_excerpt":"Shared library hijacking attacks in the Linux ecosystem, including embedded Linux, are a significant concern. It fundamentally exploits the dynamic linker's library-resolution semantics rather than modifying trusted libraries directly. Prior research has extensively analyzed attack vectors exploiting environment variables, embedded search paths, and dynamic loader internals, demonstrating that hijacking is rooted in fundamental loader behavior rather than isolated misconfigurations. Existing defenses either harden or replace the loader, enforce control-flow integrity after libraries are loaded"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.26665","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.26665/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-27T01:06:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BAf9yj7+sv0+ZBDqseW0AfFjH0s3A2c1YzB8XpyOLmiTB4Nhj0v56Q9R7H1MRhBL5I6ZAKxpMHkI73WNjXI/DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T21:53:30.044751Z"},"content_sha256":"45f40dab34e229e9ebbe5b3fe697dd282c95619306c84302e1da6b9df5368338","schema_version":"1.0","event_id":"sha256:45f40dab34e229e9ebbe5b3fe697dd282c95619306c84302e1da6b9df5368338"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/bundle.json","state_url":"https://pith.science/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-27T21:53:30Z","links":{"resolver":"https://pith.science/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V","bundle":"https://pith.science/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/bundle.json","state":"https://pith.science/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H2YNUBZAY7CBFO4MCEFZVI4T3V/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:H2YNUBZAY7CBFO4MCEFZVI4T3V","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ede808f4d48e6e9e4d939b87dfa954bc6dd9c73446bfa1b3db44d1683828b350","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-26T07:54:24Z","title_canon_sha256":"fe28ed52ab879ac4f3f08c76d48b7b34e19386fa06453b05bcea6aae4fee7a71"},"schema_version":"1.0","source":{"id":"2605.26665","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.26665","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"arxiv_version","alias_value":"2605.26665v1","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.26665","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_12","alias_value":"H2YNUBZAY7CB","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_16","alias_value":"H2YNUBZAY7CBFO4M","created_at":"2026-05-27T01:06:04Z"},{"alias_kind":"pith_short_8","alias_value":"H2YNUBZA","created_at":"2026-05-27T01:06:04Z"}],"graph_snapshots":[{"event_id":"sha256:45f40dab34e229e9ebbe5b3fe697dd282c95619306c84302e1da6b9df5368338","target":"graph","created_at":"2026-05-27T01:06:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.26665/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Shared library hijacking attacks in the Linux ecosystem, including embedded Linux, are a significant concern. It fundamentally exploits the dynamic linker's library-resolution semantics rather than modifying trusted libraries directly. Prior research has extensively analyzed attack vectors exploiting environment variables, embedded search paths, and dynamic loader internals, demonstrating that hijacking is rooted in fundamental loader behavior rather than isolated misconfigurations. Existing defenses either harden or replace the loader, enforce control-flow integrity after libraries are loaded","authors_text":"Can Ozkan, Dave Singelee","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-26T07:54:24Z","title":"Resolving the Correct Library: A Loader-Level Defense Solution Against Shared Object Hijacking"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.26665","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:07da0466f6540073107e02d73e4cd44df01775b31308c66bb2111b1c1142d3ea","target":"record","created_at":"2026-05-27T01:06:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ede808f4d48e6e9e4d939b87dfa954bc6dd9c73446bfa1b3db44d1683828b350","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-05-26T07:54:24Z","title_canon_sha256":"fe28ed52ab879ac4f3f08c76d48b7b34e19386fa06453b05bcea6aae4fee7a71"},"schema_version":"1.0","source":{"id":"2605.26665","kind":"arxiv","version":1}},"canonical_sha256":"3eb0da0720c7c412bb8c110b9aa393dd53e502e9ff20d42f752fc7da894df3b5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3eb0da0720c7c412bb8c110b9aa393dd53e502e9ff20d42f752fc7da894df3b5","first_computed_at":"2026-05-27T01:06:04.709542Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-27T01:06:04.709542Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"SfQUseEOt8oYkRc8sZyeoktKM9/l0T4A8+v/CskTl1g/D6TB2JAayQ6nzS9rOWWZAsXm+u+ZGPQTM7iXacJMBA==","signature_status":"signed_v1","signed_at":"2026-05-27T01:06:04.710278Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.26665","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:07da0466f6540073107e02d73e4cd44df01775b31308c66bb2111b1c1142d3ea","sha256:45f40dab34e229e9ebbe5b3fe697dd282c95619306c84302e1da6b9df5368338"],"state_sha256":"95361b476c2ead79358f3a6afa9863550dd44e72f14d0410647a15fdd87ea95a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s2uWmZy61zQ1qmFOtp0KIsYc+8/5o8DZHh09GF6TE5jD1i2CF7sjXImbfn2goXjPbUeINYHfl0mWOXoYbN6cCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-27T21:53:30.048105Z","bundle_sha256":"0f6f1bf931bdb90d807b75ec36ec7d5d349ffa85a80f253b281b68f6c5552c4f"}}