{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:I33IAZ66XDZY6GWV2QV4XPEFBW","short_pith_number":"pith:I33IAZ66","canonical_record":{"source":{"id":"2505.11857","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-05-17T05:47:46Z","cross_cats_sorted":[],"title_canon_sha256":"aa4e1d32a3ba5c56698b7119c94156e828abb99eafc304e40b41d1c5b427b49a","abstract_canon_sha256":"dd432c10d831349b26332f422143378c09b9a54b51a3b13db5e3967f11fb4f3a"},"schema_version":"1.0"},"canonical_sha256":"46f68067deb8f38f1ad5d42bcbbc850db44cfd8f89303f1e3f4ff71daac56a00","source":{"kind":"arxiv","id":"2505.11857","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.11857","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"arxiv_version","alias_value":"2505.11857v1","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.11857","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_12","alias_value":"I33IAZ66XDZY","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_16","alias_value":"I33IAZ66XDZY6GWV","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_8","alias_value":"I33IAZ66","created_at":"2026-07-05T11:04:53Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:I33IAZ66XDZY6GWV2QV4XPEFBW","target":"record","payload":{"canonical_record":{"source":{"id":"2505.11857","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-05-17T05:47:46Z","cross_cats_sorted":[],"title_canon_sha256":"aa4e1d32a3ba5c56698b7119c94156e828abb99eafc304e40b41d1c5b427b49a","abstract_canon_sha256":"dd432c10d831349b26332f422143378c09b9a54b51a3b13db5e3967f11fb4f3a"},"schema_version":"1.0"},"canonical_sha256":"46f68067deb8f38f1ad5d42bcbbc850db44cfd8f89303f1e3f4ff71daac56a00","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:04:53.313672Z","signature_b64":"8W56GcShIhmgQUtEBHcYTUkub29DOapoXHG8sQnDpjCKydQmaNZWKRyt6MXmes8pBLhEpoZmeucoNO87V6kpCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"46f68067deb8f38f1ad5d42bcbbc850db44cfd8f89303f1e3f4ff71daac56a00","last_reissued_at":"2026-07-05T11:04:53.313194Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:04:53.313194Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.11857","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y+0+Dq/UIUsXYdm55e808FUFgFMJ7K+GkwZjuE2cUBSESkPMPtMOXx4WU1bySgFdihJblgr7qAZJE6mCsuWoBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T03:09:07.499489Z"},"content_sha256":"acb7fe6c6a00d679c209c4a926c1864b9c9601a9c8845d47902f3662315f644b","schema_version":"1.0","event_id":"sha256:acb7fe6c6a00d679c209c4a926c1864b9c9601a9c8845d47902f3662315f644b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:I33IAZ66XDZY6GWV2QV4XPEFBW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Incorporating Verification Standards for Security Requirements Generation from Functional Specifications","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Fang Liu, Hanyu Zou, Jiajun Wu, Li Zhang, Shuaisong Wang, Xiaoli Lian","submitted_at":"2025-05-17T05:47:46Z","abstract_excerpt":"In the current software driven era, ensuring privacy and security is critical. Despite this, the specification of security requirements for software is still largely a manual and labor intensive process. Engineers are tasked with analyzing potential security threats based on functional requirements (FRs), a procedure prone to omissions and errors due to the expertise gap between cybersecurity experts and software engineers. To bridge this gap, we introduce F2SRD (Function to Security Requirements Derivation), an automated approach that proactively derives security requirements (SRs) from funct"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.11857","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.11857/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:04:53Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ClBggTRcbXjRAivINJzGPFy2As0Cu9zafI7Lbh7zNEQUCI3hiDZ7GGS/bY5g3q1pIWA9/dntmEo7hAqQWKbYBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T03:09:07.500429Z"},"content_sha256":"3f0ab0960004d7f59bca07348436e62a5a20d69dcb99aaa28cc3f21cae9fef7e","schema_version":"1.0","event_id":"sha256:3f0ab0960004d7f59bca07348436e62a5a20d69dcb99aaa28cc3f21cae9fef7e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/bundle.json","state_url":"https://pith.science/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T03:09:07Z","links":{"resolver":"https://pith.science/pith/I33IAZ66XDZY6GWV2QV4XPEFBW","bundle":"https://pith.science/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/bundle.json","state":"https://pith.science/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I33IAZ66XDZY6GWV2QV4XPEFBW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:I33IAZ66XDZY6GWV2QV4XPEFBW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dd432c10d831349b26332f422143378c09b9a54b51a3b13db5e3967f11fb4f3a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-05-17T05:47:46Z","title_canon_sha256":"aa4e1d32a3ba5c56698b7119c94156e828abb99eafc304e40b41d1c5b427b49a"},"schema_version":"1.0","source":{"id":"2505.11857","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.11857","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"arxiv_version","alias_value":"2505.11857v1","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.11857","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_12","alias_value":"I33IAZ66XDZY","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_16","alias_value":"I33IAZ66XDZY6GWV","created_at":"2026-07-05T11:04:53Z"},{"alias_kind":"pith_short_8","alias_value":"I33IAZ66","created_at":"2026-07-05T11:04:53Z"}],"graph_snapshots":[{"event_id":"sha256:3f0ab0960004d7f59bca07348436e62a5a20d69dcb99aaa28cc3f21cae9fef7e","target":"graph","created_at":"2026-07-05T11:04:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.11857/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In the current software driven era, ensuring privacy and security is critical. Despite this, the specification of security requirements for software is still largely a manual and labor intensive process. Engineers are tasked with analyzing potential security threats based on functional requirements (FRs), a procedure prone to omissions and errors due to the expertise gap between cybersecurity experts and software engineers. To bridge this gap, we introduce F2SRD (Function to Security Requirements Derivation), an automated approach that proactively derives security requirements (SRs) from funct","authors_text":"Fang Liu, Hanyu Zou, Jiajun Wu, Li Zhang, Shuaisong Wang, Xiaoli Lian","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-05-17T05:47:46Z","title":"Incorporating Verification Standards for Security Requirements Generation from Functional Specifications"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.11857","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:acb7fe6c6a00d679c209c4a926c1864b9c9601a9c8845d47902f3662315f644b","target":"record","created_at":"2026-07-05T11:04:53Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dd432c10d831349b26332f422143378c09b9a54b51a3b13db5e3967f11fb4f3a","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-05-17T05:47:46Z","title_canon_sha256":"aa4e1d32a3ba5c56698b7119c94156e828abb99eafc304e40b41d1c5b427b49a"},"schema_version":"1.0","source":{"id":"2505.11857","kind":"arxiv","version":1}},"canonical_sha256":"46f68067deb8f38f1ad5d42bcbbc850db44cfd8f89303f1e3f4ff71daac56a00","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"46f68067deb8f38f1ad5d42bcbbc850db44cfd8f89303f1e3f4ff71daac56a00","first_computed_at":"2026-07-05T11:04:53.313194Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:04:53.313194Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8W56GcShIhmgQUtEBHcYTUkub29DOapoXHG8sQnDpjCKydQmaNZWKRyt6MXmes8pBLhEpoZmeucoNO87V6kpCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:04:53.313672Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.11857","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:acb7fe6c6a00d679c209c4a926c1864b9c9601a9c8845d47902f3662315f644b","sha256:3f0ab0960004d7f59bca07348436e62a5a20d69dcb99aaa28cc3f21cae9fef7e"],"state_sha256":"00ba05a811f6f72f242de2a1eaf634e50e95b1b71723f5a4e5001e7941161d81"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rl3uOR4kypHL8ap0j32KX28uXs8SBuBzLP3AU7MsRHfiqBWm+y1bMgB6BtckImCfi+KA6dI31FQQSoBTpZEuAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T03:09:07.506585Z","bundle_sha256":"cd4d74b6d1b47f73b484285df4c1fa9810d42599acb998e8cebc9b97253a0acd"}}