{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:LIFMME2NL55M6YPDQMRYUEGUDV","short_pith_number":"pith:LIFMME2N","canonical_record":{"source":{"id":"2405.06371","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T10:13:19Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"aac59195941d6aa0054d28e339eb7db08c869bb3c3e0462d6f9a493e7773df61","abstract_canon_sha256":"ad4274b2781812d7fdfa177a63c2dcf557a830db95b7070e3e0a16117d4148ac"},"schema_version":"1.0"},"canonical_sha256":"5a0ac6134d5f7acf61e383238a10d41d6c3bfa8c442f5759f25858045ab30770","source":{"kind":"arxiv","id":"2405.06371","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06371","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06371v2","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06371","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"LIFMME2NL55M","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"LIFMME2NL55M6YPD","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"LIFMME2N","created_at":"2026-07-05T09:20:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:LIFMME2NL55M6YPDQMRYUEGUDV","target":"record","payload":{"canonical_record":{"source":{"id":"2405.06371","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T10:13:19Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"aac59195941d6aa0054d28e339eb7db08c869bb3c3e0462d6f9a493e7773df61","abstract_canon_sha256":"ad4274b2781812d7fdfa177a63c2dcf557a830db95b7070e3e0a16117d4148ac"},"schema_version":"1.0"},"canonical_sha256":"5a0ac6134d5f7acf61e383238a10d41d6c3bfa8c442f5759f25858045ab30770","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:20:23.353919Z","signature_b64":"Bj7L56iaf5L/kgwxyZVUTq5G7SXgewWMvHG/PBaLaJ0WvN6uzdojT9Tywu20MCLs20vx9i5WB1C4xoeZPLNbAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5a0ac6134d5f7acf61e383238a10d41d6c3bfa8c442f5759f25858045ab30770","last_reissued_at":"2026-07-05T09:20:23.353389Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:20:23.353389Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.06371","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r9tO/jH787rylQpA/EneUJQprCwLMVoAmsK1BjZgnSK4J68Jrx2M06h71V1M4Kno6x0LvvRHk6HxCuN8ExEdCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:55:25.309934Z"},"content_sha256":"efd31fe6f6ec4281a13febefc662802cbbb0d2cc06b010d16c3a0062f007c371","schema_version":"1.0","event_id":"sha256:efd31fe6f6ec4281a13febefc662802cbbb0d2cc06b010d16c3a0062f007c371"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:LIFMME2NL55M6YPDQMRYUEGUDV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"(2) Ruhr University Bochum, (3) University of Bristol, (4) Tufts University, (5) Vrije Universiteit Amsterdam, 6), (6) University of Trento, (7) Auburn University, (8) University of North Carolina at Charlotte), Akond Rahman (7), Alena Naiakshina (2), Awais Rashid (3), Carson Powers (4), Cordelia Ludden (4), Cordell Burton Jr. (4), Daniel Votipka (4), Fabio Massacci (5, Heather Richter Lipford (8), Jan H. Klemmer (1), Nikhil Patnaik (3), Sascha Fahl (1) ((1) CISPA Helmholtz Center for Information Security, Stefan Albert Horstmann (2)","submitted_at":"2024-05-10T10:13:19Z","abstract_excerpt":"Following the recent release of AI assistants, such as OpenAI's ChatGPT and GitHub Copilot, the software industry quickly utilized these tools for software development tasks, e.g., generating code or consulting AI for advice. While recent research has demonstrated that AI-generated code can contain security issues, how software professionals balance AI assistant usage and security remains unclear. This paper investigates how software professionals use AI assistants in secure software development, what security implications and considerations arise, and what impact they foresee on secure softwa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06371","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.06371/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:20:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m6snHCvKM+lxxF/f2UiyVAOW+dTYopKfjReezHCTahr9ygDzgBIFCMGP09TQIRmqwZccVxGv2rbFirRrDAWMCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:55:25.310448Z"},"content_sha256":"224c5dccf27817f435ee2dbb7b12eaacdda082d5a7361bd5578e6af5440d6d5e","schema_version":"1.0","event_id":"sha256:224c5dccf27817f435ee2dbb7b12eaacdda082d5a7361bd5578e6af5440d6d5e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LIFMME2NL55M6YPDQMRYUEGUDV/bundle.json","state_url":"https://pith.science/pith/LIFMME2NL55M6YPDQMRYUEGUDV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LIFMME2NL55M6YPDQMRYUEGUDV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T14:55:25Z","links":{"resolver":"https://pith.science/pith/LIFMME2NL55M6YPDQMRYUEGUDV","bundle":"https://pith.science/pith/LIFMME2NL55M6YPDQMRYUEGUDV/bundle.json","state":"https://pith.science/pith/LIFMME2NL55M6YPDQMRYUEGUDV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LIFMME2NL55M6YPDQMRYUEGUDV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:LIFMME2NL55M6YPDQMRYUEGUDV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad4274b2781812d7fdfa177a63c2dcf557a830db95b7070e3e0a16117d4148ac","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T10:13:19Z","title_canon_sha256":"aac59195941d6aa0054d28e339eb7db08c869bb3c3e0462d6f9a493e7773df61"},"schema_version":"1.0","source":{"id":"2405.06371","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06371","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06371v2","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06371","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_12","alias_value":"LIFMME2NL55M","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_16","alias_value":"LIFMME2NL55M6YPD","created_at":"2026-07-05T09:20:23Z"},{"alias_kind":"pith_short_8","alias_value":"LIFMME2N","created_at":"2026-07-05T09:20:23Z"}],"graph_snapshots":[{"event_id":"sha256:224c5dccf27817f435ee2dbb7b12eaacdda082d5a7361bd5578e6af5440d6d5e","target":"graph","created_at":"2026-07-05T09:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.06371/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Following the recent release of AI assistants, such as OpenAI's ChatGPT and GitHub Copilot, the software industry quickly utilized these tools for software development tasks, e.g., generating code or consulting AI for advice. While recent research has demonstrated that AI-generated code can contain security issues, how software professionals balance AI assistant usage and security remains unclear. This paper investigates how software professionals use AI assistants in secure software development, what security implications and considerations arise, and what impact they foresee on secure softwa","authors_text":"(2) Ruhr University Bochum, (3) University of Bristol, (4) Tufts University, (5) Vrije Universiteit Amsterdam, 6), (6) University of Trento, (7) Auburn University, (8) University of North Carolina at Charlotte), Akond Rahman (7), Alena Naiakshina (2), Awais Rashid (3), Carson Powers (4), Cordelia Ludden (4), Cordell Burton Jr. (4), Daniel Votipka (4), Fabio Massacci (5, Heather Richter Lipford (8), Jan H. Klemmer (1), Nikhil Patnaik (3), Sascha Fahl (1) ((1) CISPA Helmholtz Center for Information Security, Stefan Albert Horstmann (2)","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T10:13:19Z","title":"Using AI Assistants in Software Development: A Qualitative Study on Security Practices and Concerns"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06371","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:efd31fe6f6ec4281a13febefc662802cbbb0d2cc06b010d16c3a0062f007c371","target":"record","created_at":"2026-07-05T09:20:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad4274b2781812d7fdfa177a63c2dcf557a830db95b7070e3e0a16117d4148ac","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-10T10:13:19Z","title_canon_sha256":"aac59195941d6aa0054d28e339eb7db08c869bb3c3e0462d6f9a493e7773df61"},"schema_version":"1.0","source":{"id":"2405.06371","kind":"arxiv","version":2}},"canonical_sha256":"5a0ac6134d5f7acf61e383238a10d41d6c3bfa8c442f5759f25858045ab30770","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5a0ac6134d5f7acf61e383238a10d41d6c3bfa8c442f5759f25858045ab30770","first_computed_at":"2026-07-05T09:20:23.353389Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:20:23.353389Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Bj7L56iaf5L/kgwxyZVUTq5G7SXgewWMvHG/PBaLaJ0WvN6uzdojT9Tywu20MCLs20vx9i5WB1C4xoeZPLNbAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:20:23.353919Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.06371","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:efd31fe6f6ec4281a13febefc662802cbbb0d2cc06b010d16c3a0062f007c371","sha256:224c5dccf27817f435ee2dbb7b12eaacdda082d5a7361bd5578e6af5440d6d5e"],"state_sha256":"095fafd4c89792f943bb06a2d9bc4f8df64c04b3b17393fc00e9fde4770aefb6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aKA+TKIIQZFagIr7FTycAtRXfxU542rt5eotg7N8AFGzWoqJJXUOC7VmznwdjAcvvQCXNRKvsaoEsrqLR/UgAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T14:55:25.315179Z","bundle_sha256":"bdd25917e05148fc710655a2f089cb10b1c43a7b617fed3548b84131e62cb8cc"}}