{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:J6TGVUXN3JYYUW3SDZYRMN7I4B","short_pith_number":"pith:J6TGVUXN","canonical_record":{"source":{"id":"2110.03296","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-10-07T09:30:51Z","cross_cats_sorted":[],"title_canon_sha256":"62082387532578f2c39eca3f6e650406d32378c7dde74e59a5f8885c6fee7d16","abstract_canon_sha256":"1046bc06618b5d7514a2d49be4bd2269ba240e2a993c9337e11367583b3715c7"},"schema_version":"1.0"},"canonical_sha256":"4fa66ad2edda718a5b721e711637e8e05ebc174bd3c9aba28048a298c6df6734","source":{"kind":"arxiv","id":"2110.03296","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.03296","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"arxiv_version","alias_value":"2110.03296v1","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.03296","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_12","alias_value":"J6TGVUXN3JYY","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_16","alias_value":"J6TGVUXN3JYYUW3S","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_8","alias_value":"J6TGVUXN","created_at":"2026-07-05T05:00:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:J6TGVUXN3JYYUW3SDZYRMN7I4B","target":"record","payload":{"canonical_record":{"source":{"id":"2110.03296","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-10-07T09:30:51Z","cross_cats_sorted":[],"title_canon_sha256":"62082387532578f2c39eca3f6e650406d32378c7dde74e59a5f8885c6fee7d16","abstract_canon_sha256":"1046bc06618b5d7514a2d49be4bd2269ba240e2a993c9337e11367583b3715c7"},"schema_version":"1.0"},"canonical_sha256":"4fa66ad2edda718a5b721e711637e8e05ebc174bd3c9aba28048a298c6df6734","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:00:59.508020Z","signature_b64":"+rqeYA2bdnfiJW056FsCzGa459Rlti2SCUDSAkHcI1hcvUgQkDqEVswTsDw/jhPzrR1reHL7ZLq++rXTc09XAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4fa66ad2edda718a5b721e711637e8e05ebc174bd3c9aba28048a298c6df6734","last_reissued_at":"2026-07-05T05:00:59.507521Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:00:59.507521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.03296","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:00:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j3MKVQyQy0jahO/GeYetZe0NqmTSGips1zfhvZ4P2PpPYurMJTmPnntyc/zWTyI4Sx3tzEezWv57T+HmiywkAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T16:34:20.731190Z"},"content_sha256":"080bc8e563f32623d835c6e77feed0af82165d82cc282fa673af09b2853e7a9b","schema_version":"1.0","event_id":"sha256:080bc8e563f32623d835c6e77feed0af82165d82cc282fa673af09b2853e7a9b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:J6TGVUXN3JYYUW3SDZYRMN7I4B","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Ranking Warnings of Static Analysis Tools Using Representation Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Dinh-Truong Do, Hieu Dinh Vo, Kien-Tuan Ngo, Thu-Trang Nguyen","submitted_at":"2021-10-07T09:30:51Z","abstract_excerpt":"Static analysis tools are frequently used to detect potential vulnerabilities in software systems. However, an inevitable problem of these tools is their large number of warnings with a high false positive rate, which consumes time and effort for investigating. In this paper, we present DeFP, a novel method for ranking static analysis warnings. Based on the intuition that warnings which have similar contexts tend to have similar labels (true positive or false positive), DeFP is built with two BiLSTM models to capture the patterns associated with the contexts of labeled warnings. After that, fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.03296","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.03296/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:00:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"44Ob04Z4854+Yn25+7sP/MsbzhnMd4ykbdHDjT9/QKcTqkn/BkR0v4Xz+vYeoo+MiSv2PJHbtwzRZIVdGESqDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T16:34:20.732093Z"},"content_sha256":"af8c12069b269b5ef8a684d30b2b4713a74af5642a8e140683182304efb14a15","schema_version":"1.0","event_id":"sha256:af8c12069b269b5ef8a684d30b2b4713a74af5642a8e140683182304efb14a15"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/bundle.json","state_url":"https://pith.science/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T16:34:20Z","links":{"resolver":"https://pith.science/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B","bundle":"https://pith.science/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/bundle.json","state":"https://pith.science/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J6TGVUXN3JYYUW3SDZYRMN7I4B/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:J6TGVUXN3JYYUW3SDZYRMN7I4B","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1046bc06618b5d7514a2d49be4bd2269ba240e2a993c9337e11367583b3715c7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-10-07T09:30:51Z","title_canon_sha256":"62082387532578f2c39eca3f6e650406d32378c7dde74e59a5f8885c6fee7d16"},"schema_version":"1.0","source":{"id":"2110.03296","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.03296","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"arxiv_version","alias_value":"2110.03296v1","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.03296","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_12","alias_value":"J6TGVUXN3JYY","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_16","alias_value":"J6TGVUXN3JYYUW3S","created_at":"2026-07-05T05:00:59Z"},{"alias_kind":"pith_short_8","alias_value":"J6TGVUXN","created_at":"2026-07-05T05:00:59Z"}],"graph_snapshots":[{"event_id":"sha256:af8c12069b269b5ef8a684d30b2b4713a74af5642a8e140683182304efb14a15","target":"graph","created_at":"2026-07-05T05:00:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.03296/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Static analysis tools are frequently used to detect potential vulnerabilities in software systems. However, an inevitable problem of these tools is their large number of warnings with a high false positive rate, which consumes time and effort for investigating. In this paper, we present DeFP, a novel method for ranking static analysis warnings. Based on the intuition that warnings which have similar contexts tend to have similar labels (true positive or false positive), DeFP is built with two BiLSTM models to capture the patterns associated with the contexts of labeled warnings. After that, fo","authors_text":"Dinh-Truong Do, Hieu Dinh Vo, Kien-Tuan Ngo, Thu-Trang Nguyen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-10-07T09:30:51Z","title":"Ranking Warnings of Static Analysis Tools Using Representation Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.03296","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:080bc8e563f32623d835c6e77feed0af82165d82cc282fa673af09b2853e7a9b","target":"record","created_at":"2026-07-05T05:00:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1046bc06618b5d7514a2d49be4bd2269ba240e2a993c9337e11367583b3715c7","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2021-10-07T09:30:51Z","title_canon_sha256":"62082387532578f2c39eca3f6e650406d32378c7dde74e59a5f8885c6fee7d16"},"schema_version":"1.0","source":{"id":"2110.03296","kind":"arxiv","version":1}},"canonical_sha256":"4fa66ad2edda718a5b721e711637e8e05ebc174bd3c9aba28048a298c6df6734","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4fa66ad2edda718a5b721e711637e8e05ebc174bd3c9aba28048a298c6df6734","first_computed_at":"2026-07-05T05:00:59.507521Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:00:59.507521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"+rqeYA2bdnfiJW056FsCzGa459Rlti2SCUDSAkHcI1hcvUgQkDqEVswTsDw/jhPzrR1reHL7ZLq++rXTc09XAw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:00:59.508020Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.03296","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:080bc8e563f32623d835c6e77feed0af82165d82cc282fa673af09b2853e7a9b","sha256:af8c12069b269b5ef8a684d30b2b4713a74af5642a8e140683182304efb14a15"],"state_sha256":"1f4a2d686064302ecd89a520dc8ea3571057e311c78a3b627631eb583f0d3cc3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Epgt+g1hVCaoijuIw8p3TOpvQ7rjCziiZQJpXbBcYGoHVu/7fO+w39/eY8/oe2NJJQyB1OWrSkgmUC6RNrc8CQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T16:34:20.796032Z","bundle_sha256":"c7b22c51c0a798ba9b288a4057f7ff4276a4a83a4257fb38d2d33be881946e6a"}}