{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:H5M3ZXNJVQUFGRXXJMG5HU6ILH","short_pith_number":"pith:H5M3ZXNJ","canonical_record":{"source":{"id":"1706.07257","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-22T11:17:24Z","cross_cats_sorted":[],"title_canon_sha256":"6523d5e2ee301196004d9648b433d4b73f939cdd538e6c94f83d415ee25238c7","abstract_canon_sha256":"83c5b58c462e32c4f2db2718f5786041312bfecc478eaf4ac26e684ecc350d7d"},"schema_version":"1.0"},"canonical_sha256":"3f59bcdda9ac285346f74b0dd3d3c859f70ee28700ce0c0555d288e716b56361","source":{"kind":"arxiv","id":"1706.07257","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.07257","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"arxiv_version","alias_value":"1706.07257v2","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.07257","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"pith_short_12","alias_value":"H5M3ZXNJVQUF","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"H5M3ZXNJVQUFGRXX","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"H5M3ZXNJ","created_at":"2026-05-18T12:31:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:H5M3ZXNJVQUFGRXXJMG5HU6ILH","target":"record","payload":{"canonical_record":{"source":{"id":"1706.07257","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-22T11:17:24Z","cross_cats_sorted":[],"title_canon_sha256":"6523d5e2ee301196004d9648b433d4b73f939cdd538e6c94f83d415ee25238c7","abstract_canon_sha256":"83c5b58c462e32c4f2db2718f5786041312bfecc478eaf4ac26e684ecc350d7d"},"schema_version":"1.0"},"canonical_sha256":"3f59bcdda9ac285346f74b0dd3d3c859f70ee28700ce0c0555d288e716b56361","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:39:12.031978Z","signature_b64":"2pkVw36rGgTzreU3xlrEUG4HJ/GySdaJx4be6zJapXDU+a0u/QA6QNvVqXCJC2quf6X3Ws3pKLmw46nZKmBLAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3f59bcdda9ac285346f74b0dd3d3c859f70ee28700ce0c0555d288e716b56361","last_reissued_at":"2026-05-18T00:39:12.031359Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:39:12.031359Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1706.07257","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:39:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rPGmxJ9teSw95b54Mi+KjANZkLyxdFknVxij0YmNklfwz2siGPJHJELTTk9ZvdWWIUa1UazNX74i3g13HbkzAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T00:04:13.440661Z"},"content_sha256":"73bb0848456e3e210ddb3462440a7b08ba1b694b04da178a649319b91b769975","schema_version":"1.0","event_id":"sha256:73bb0848456e3e210ddb3462440a7b08ba1b694b04da178a649319b91b769975"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:H5M3ZXNJVQUFGRXXJMG5HU6ILH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A survey of Hardware-based Control Flow Integrity (CFI)","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ingrid Verbauwhede, Ruan de Clercq","submitted_at":"2017-06-22T11:17:24Z","abstract_excerpt":"CFI is a computer security technique that detects runtime attacks by monitoring a program's branching behavior. This work presents a detailed analysis of the security policies enforced by 21 recent hardware-based CFI architectures. The goal is to evaluate the security, limitations, hardware cost, performance, and practicality of using these policies. We show that many architectures are not suitable for widespread adoption, since they have practical issues, such as relying on accurate control flow model (which is difficult to obtain) or they implement policies which provide only limited securit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.07257","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:39:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EO0n49qt2BeK4s/0ReUm9+T0TMir0yY5AMsGcpvLhsC2HM16GhoFqXk/a92bNyNghejSu6EcKoOg3+aavpPhCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T00:04:13.441482Z"},"content_sha256":"d7b2fe91e09b9431103de33131ebde982967c1ebb949bf49ce52e3d0f4f60602","schema_version":"1.0","event_id":"sha256:d7b2fe91e09b9431103de33131ebde982967c1ebb949bf49ce52e3d0f4f60602"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/bundle.json","state_url":"https://pith.science/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T00:04:13Z","links":{"resolver":"https://pith.science/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH","bundle":"https://pith.science/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/bundle.json","state":"https://pith.science/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H5M3ZXNJVQUFGRXXJMG5HU6ILH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:H5M3ZXNJVQUFGRXXJMG5HU6ILH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83c5b58c462e32c4f2db2718f5786041312bfecc478eaf4ac26e684ecc350d7d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-22T11:17:24Z","title_canon_sha256":"6523d5e2ee301196004d9648b433d4b73f939cdd538e6c94f83d415ee25238c7"},"schema_version":"1.0","source":{"id":"1706.07257","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.07257","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"arxiv_version","alias_value":"1706.07257v2","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.07257","created_at":"2026-05-18T00:39:12Z"},{"alias_kind":"pith_short_12","alias_value":"H5M3ZXNJVQUF","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_16","alias_value":"H5M3ZXNJVQUFGRXX","created_at":"2026-05-18T12:31:18Z"},{"alias_kind":"pith_short_8","alias_value":"H5M3ZXNJ","created_at":"2026-05-18T12:31:18Z"}],"graph_snapshots":[{"event_id":"sha256:d7b2fe91e09b9431103de33131ebde982967c1ebb949bf49ce52e3d0f4f60602","target":"graph","created_at":"2026-05-18T00:39:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"CFI is a computer security technique that detects runtime attacks by monitoring a program's branching behavior. This work presents a detailed analysis of the security policies enforced by 21 recent hardware-based CFI architectures. The goal is to evaluate the security, limitations, hardware cost, performance, and practicality of using these policies. We show that many architectures are not suitable for widespread adoption, since they have practical issues, such as relying on accurate control flow model (which is difficult to obtain) or they implement policies which provide only limited securit","authors_text":"Ingrid Verbauwhede, Ruan de Clercq","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-22T11:17:24Z","title":"A survey of Hardware-based Control Flow Integrity (CFI)"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.07257","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:73bb0848456e3e210ddb3462440a7b08ba1b694b04da178a649319b91b769975","target":"record","created_at":"2026-05-18T00:39:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83c5b58c462e32c4f2db2718f5786041312bfecc478eaf4ac26e684ecc350d7d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-06-22T11:17:24Z","title_canon_sha256":"6523d5e2ee301196004d9648b433d4b73f939cdd538e6c94f83d415ee25238c7"},"schema_version":"1.0","source":{"id":"1706.07257","kind":"arxiv","version":2}},"canonical_sha256":"3f59bcdda9ac285346f74b0dd3d3c859f70ee28700ce0c0555d288e716b56361","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3f59bcdda9ac285346f74b0dd3d3c859f70ee28700ce0c0555d288e716b56361","first_computed_at":"2026-05-18T00:39:12.031359Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:39:12.031359Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2pkVw36rGgTzreU3xlrEUG4HJ/GySdaJx4be6zJapXDU+a0u/QA6QNvVqXCJC2quf6X3Ws3pKLmw46nZKmBLAA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:39:12.031978Z","signed_message":"canonical_sha256_bytes"},"source_id":"1706.07257","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:73bb0848456e3e210ddb3462440a7b08ba1b694b04da178a649319b91b769975","sha256:d7b2fe91e09b9431103de33131ebde982967c1ebb949bf49ce52e3d0f4f60602"],"state_sha256":"917c06c391a90f4deaa4eb5d1dfe28295997484a12e2cf6938a243b606326578"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rgb/2i4cAn+PCaMSTziHb7965J2WBqzyDk6E3hALshm0H1Q1uJaaoH28lQV9f2FMsjgvXEhrHIjBARxW2JlXCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T00:04:13.446324Z","bundle_sha256":"ecefa9a03655831cbc20480828ea86129bd75d585715294b505395e54f395135"}}