{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:HHLNSTUJY6QJEXW6TIQQ5DG3I6","short_pith_number":"pith:HHLNSTUJ","canonical_record":{"source":{"id":"2306.08869","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-15T05:53:23Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"72dc15eaf528d09a84ffadcd48243573bad37c48b981e1cd99fe24671fb39f45","abstract_canon_sha256":"2d0cd39b4c1ee40fe1becc31cbfba0be6b8dd7f0b5f46678059126e161d087fa"},"schema_version":"1.0"},"canonical_sha256":"39d6d94e89c7a0925ede9a210e8cdb478b1648c90945c294801127d42248e236","source":{"kind":"arxiv","id":"2306.08869","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08869","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08869v4","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08869","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_12","alias_value":"HHLNSTUJY6QJ","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_16","alias_value":"HHLNSTUJY6QJEXW6","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_8","alias_value":"HHLNSTUJ","created_at":"2026-07-05T11:02:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:HHLNSTUJY6QJEXW6TIQQ5DG3I6","target":"record","payload":{"canonical_record":{"source":{"id":"2306.08869","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-15T05:53:23Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"72dc15eaf528d09a84ffadcd48243573bad37c48b981e1cd99fe24671fb39f45","abstract_canon_sha256":"2d0cd39b4c1ee40fe1becc31cbfba0be6b8dd7f0b5f46678059126e161d087fa"},"schema_version":"1.0"},"canonical_sha256":"39d6d94e89c7a0925ede9a210e8cdb478b1648c90945c294801127d42248e236","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:02:37.319293Z","signature_b64":"sc6GkpMP88FDTNoE+7k1ETwwF90JrD3+fP+VlQzHL/IdYcLyloGT4xthLwdPqg/oZQCUm4icjWGhA68FsTHrDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"39d6d94e89c7a0925ede9a210e8cdb478b1648c90945c294801127d42248e236","last_reissued_at":"2026-07-05T11:02:37.318699Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:02:37.318699Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.08869","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vh5RKe93xGGROU0bR/nALbPzYAxWH6k6z2ObmYZbdrxm4YNZ/K95PNIsdg4dtqhWolwFnuGVZzQAOSsym+f3Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T09:17:46.536431Z"},"content_sha256":"45e9c75f098109a1b6ab822584b435911702286eda997f56777708c1f96d8d9f","schema_version":"1.0","event_id":"sha256:45e9c75f098109a1b6ab822584b435911702286eda997f56777708c1f96d8d9f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:HHLNSTUJY6QJEXW6TIQQ5DG3I6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Misuse of Security APIs: A Systematic Review","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Alsharif Abuadbba, Chadni Islam, Kristen Moore, M. Ali Babar, Zahra Mousavi","submitted_at":"2023-06-15T05:53:23Z","abstract_excerpt":"Security Application Programming Interfaces (APIs) are crucial for ensuring software security. However, their misuse introduces vulnerabilities, potentially leading to severe data breaches and substantial financial loss. Complex API design, inadequate documentation, and insufficient security training often lead to unintentional misuse by developers. The software security community has devised and evaluated several approaches to detecting security API misuse to help developers and organizations. This study rigorously reviews the literature on detecting misuse of security APIs to gain a comprehe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08869","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.08869/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:02:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J04X4IzqAY7ybS8QpswSPeeNZR461aE7ct5ugZfyhctNuNLtzQnIivaj4B90sTeVRCnPhd2hYwaj0efDw1XqBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T09:17:46.537215Z"},"content_sha256":"176064b068344c122489ad253aff18b7c69af7887e60551d06ccd1f7b7f5aedd","schema_version":"1.0","event_id":"sha256:176064b068344c122489ad253aff18b7c69af7887e60551d06ccd1f7b7f5aedd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/bundle.json","state_url":"https://pith.science/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T09:17:46Z","links":{"resolver":"https://pith.science/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6","bundle":"https://pith.science/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/bundle.json","state":"https://pith.science/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HHLNSTUJY6QJEXW6TIQQ5DG3I6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:HHLNSTUJY6QJEXW6TIQQ5DG3I6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2d0cd39b4c1ee40fe1becc31cbfba0be6b8dd7f0b5f46678059126e161d087fa","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-15T05:53:23Z","title_canon_sha256":"72dc15eaf528d09a84ffadcd48243573bad37c48b981e1cd99fe24671fb39f45"},"schema_version":"1.0","source":{"id":"2306.08869","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.08869","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"arxiv_version","alias_value":"2306.08869v4","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.08869","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_12","alias_value":"HHLNSTUJY6QJ","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_16","alias_value":"HHLNSTUJY6QJEXW6","created_at":"2026-07-05T11:02:37Z"},{"alias_kind":"pith_short_8","alias_value":"HHLNSTUJ","created_at":"2026-07-05T11:02:37Z"}],"graph_snapshots":[{"event_id":"sha256:176064b068344c122489ad253aff18b7c69af7887e60551d06ccd1f7b7f5aedd","target":"graph","created_at":"2026-07-05T11:02:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.08869/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security Application Programming Interfaces (APIs) are crucial for ensuring software security. However, their misuse introduces vulnerabilities, potentially leading to severe data breaches and substantial financial loss. Complex API design, inadequate documentation, and insufficient security training often lead to unintentional misuse by developers. The software security community has devised and evaluated several approaches to detecting security API misuse to help developers and organizations. This study rigorously reviews the literature on detecting misuse of security APIs to gain a comprehe","authors_text":"Alsharif Abuadbba, Chadni Islam, Kristen Moore, M. Ali Babar, Zahra Mousavi","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-15T05:53:23Z","title":"Detecting Misuse of Security APIs: A Systematic Review"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.08869","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:45e9c75f098109a1b6ab822584b435911702286eda997f56777708c1f96d8d9f","target":"record","created_at":"2026-07-05T11:02:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2d0cd39b4c1ee40fe1becc31cbfba0be6b8dd7f0b5f46678059126e161d087fa","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-06-15T05:53:23Z","title_canon_sha256":"72dc15eaf528d09a84ffadcd48243573bad37c48b981e1cd99fe24671fb39f45"},"schema_version":"1.0","source":{"id":"2306.08869","kind":"arxiv","version":4}},"canonical_sha256":"39d6d94e89c7a0925ede9a210e8cdb478b1648c90945c294801127d42248e236","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"39d6d94e89c7a0925ede9a210e8cdb478b1648c90945c294801127d42248e236","first_computed_at":"2026-07-05T11:02:37.318699Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:02:37.318699Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sc6GkpMP88FDTNoE+7k1ETwwF90JrD3+fP+VlQzHL/IdYcLyloGT4xthLwdPqg/oZQCUm4icjWGhA68FsTHrDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:02:37.319293Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.08869","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:45e9c75f098109a1b6ab822584b435911702286eda997f56777708c1f96d8d9f","sha256:176064b068344c122489ad253aff18b7c69af7887e60551d06ccd1f7b7f5aedd"],"state_sha256":"4e47ce5a3d79b9b9e74b3e85143171db9aa6cb66608dc2a79eec8a09d54564d5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uuxumLaCOl9uet730bQoR4XBJ4j4hmzwoLPpHxed7L8CxXDb7L/P9hTfCV4Rg6t8mLWQa8Tbk5zHDIo5JmBIAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T09:17:46.544061Z","bundle_sha256":"9a19bb81e22e67e5666c3f9eac86ae019dcedbefede4c93bbec2413891063b38"}}