{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:M3KFFFOV3KDFLPIXHTQMPPSWKR","short_pith_number":"pith:M3KFFFOV","canonical_record":{"source":{"id":"2110.09557","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-18T18:12:53Z","cross_cats_sorted":[],"title_canon_sha256":"dc3f03cc0fa750b17491cef1af94b90f30b6744421e4090c8cf6d759517b9bde","abstract_canon_sha256":"df30ae99fa666e74bda9200141df23560f4e400b890caee13d471a3110c5d37e"},"schema_version":"1.0"},"canonical_sha256":"66d45295d5da8655bd173ce0c7be56546edb7bd6f65318c38fefc500d3bcbf10","source":{"kind":"arxiv","id":"2110.09557","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.09557","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"arxiv_version","alias_value":"2110.09557v1","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.09557","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_12","alias_value":"M3KFFFOV3KDF","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_16","alias_value":"M3KFFFOV3KDFLPIX","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_8","alias_value":"M3KFFFOV","created_at":"2026-07-05T03:23:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:M3KFFFOV3KDFLPIXHTQMPPSWKR","target":"record","payload":{"canonical_record":{"source":{"id":"2110.09557","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-18T18:12:53Z","cross_cats_sorted":[],"title_canon_sha256":"dc3f03cc0fa750b17491cef1af94b90f30b6744421e4090c8cf6d759517b9bde","abstract_canon_sha256":"df30ae99fa666e74bda9200141df23560f4e400b890caee13d471a3110c5d37e"},"schema_version":"1.0"},"canonical_sha256":"66d45295d5da8655bd173ce0c7be56546edb7bd6f65318c38fefc500d3bcbf10","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:23:30.323401Z","signature_b64":"kTVrLlRZhSBOubwcIFh5KTBG4sfJQLpH+LAMMT9Nuwa7N36h5kwCsgKQO5iSozoUNA3IdWvNBxi6NfJ3fq5rAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"66d45295d5da8655bd173ce0c7be56546edb7bd6f65318c38fefc500d3bcbf10","last_reissued_at":"2026-07-05T03:23:30.322927Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:23:30.322927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2110.09557","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:23:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FGNSU9MTL5FXzDQU8X3t0oqnIYZRRLxyvMf7nva/4VBs4HM7ElBtPcADZ9hRgp5ePqnwxoRiIzS1W9lMK/ntBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:15:31.182553Z"},"content_sha256":"5114fc09772e49599b7c3ebf4e9f1e5a220b6aaefcc67e5bba5822f0bf6d7f81","schema_version":"1.0","event_id":"sha256:5114fc09772e49599b7c3ebf4e9f1e5a220b6aaefcc67e5bba5822f0bf6d7f81"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:M3KFFFOV3KDFLPIXHTQMPPSWKR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On-the-fly Code Activation for Attack Surface Reduction","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chris Porter, Santosh Pande, Sharjeel Khan","submitted_at":"2021-10-18T18:12:53Z","abstract_excerpt":"Modern code reuse attacks are taking full advantage of bloated software. Attackers piece together short sequences of instructions in otherwise benign code to carry out malicious actions. Eliminating these reusable code snippets, known as gadgets, has become one of the prime concerns of attack surface reduction. The aim is to break these chains of gadgets, thereby making such code reuse attacks impossible or substantially less common. Previous work on attack surface reduction has typically tried to eliminate such attacks by subsetting the application, e.g. via user-specified inputs, configurati"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.09557","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2110.09557/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:23:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vKltneQWjpPlMjNr9dKSrNxYPvkL0JOxyGX9eMpf1CWVDzEfa7yIS36RaMDGaIQM3hJP6bv7sjN0QCx5GxUJDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:15:31.183109Z"},"content_sha256":"ee30e83b4297e5a3c13838e95906e7f29bf4c23882dd62ee1d6fcc742404634a","schema_version":"1.0","event_id":"sha256:ee30e83b4297e5a3c13838e95906e7f29bf4c23882dd62ee1d6fcc742404634a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/bundle.json","state_url":"https://pith.science/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T23:15:31Z","links":{"resolver":"https://pith.science/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR","bundle":"https://pith.science/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/bundle.json","state":"https://pith.science/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M3KFFFOV3KDFLPIXHTQMPPSWKR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:M3KFFFOV3KDFLPIXHTQMPPSWKR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df30ae99fa666e74bda9200141df23560f4e400b890caee13d471a3110c5d37e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-18T18:12:53Z","title_canon_sha256":"dc3f03cc0fa750b17491cef1af94b90f30b6744421e4090c8cf6d759517b9bde"},"schema_version":"1.0","source":{"id":"2110.09557","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2110.09557","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"arxiv_version","alias_value":"2110.09557v1","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2110.09557","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_12","alias_value":"M3KFFFOV3KDF","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_16","alias_value":"M3KFFFOV3KDFLPIX","created_at":"2026-07-05T03:23:30Z"},{"alias_kind":"pith_short_8","alias_value":"M3KFFFOV","created_at":"2026-07-05T03:23:30Z"}],"graph_snapshots":[{"event_id":"sha256:ee30e83b4297e5a3c13838e95906e7f29bf4c23882dd62ee1d6fcc742404634a","target":"graph","created_at":"2026-07-05T03:23:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2110.09557/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Modern code reuse attacks are taking full advantage of bloated software. Attackers piece together short sequences of instructions in otherwise benign code to carry out malicious actions. Eliminating these reusable code snippets, known as gadgets, has become one of the prime concerns of attack surface reduction. The aim is to break these chains of gadgets, thereby making such code reuse attacks impossible or substantially less common. Previous work on attack surface reduction has typically tried to eliminate such attacks by subsetting the application, e.g. via user-specified inputs, configurati","authors_text":"Chris Porter, Santosh Pande, Sharjeel Khan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-18T18:12:53Z","title":"On-the-fly Code Activation for Attack Surface Reduction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2110.09557","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5114fc09772e49599b7c3ebf4e9f1e5a220b6aaefcc67e5bba5822f0bf6d7f81","target":"record","created_at":"2026-07-05T03:23:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df30ae99fa666e74bda9200141df23560f4e400b890caee13d471a3110c5d37e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-10-18T18:12:53Z","title_canon_sha256":"dc3f03cc0fa750b17491cef1af94b90f30b6744421e4090c8cf6d759517b9bde"},"schema_version":"1.0","source":{"id":"2110.09557","kind":"arxiv","version":1}},"canonical_sha256":"66d45295d5da8655bd173ce0c7be56546edb7bd6f65318c38fefc500d3bcbf10","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"66d45295d5da8655bd173ce0c7be56546edb7bd6f65318c38fefc500d3bcbf10","first_computed_at":"2026-07-05T03:23:30.322927Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:23:30.322927Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kTVrLlRZhSBOubwcIFh5KTBG4sfJQLpH+LAMMT9Nuwa7N36h5kwCsgKQO5iSozoUNA3IdWvNBxi6NfJ3fq5rAA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:23:30.323401Z","signed_message":"canonical_sha256_bytes"},"source_id":"2110.09557","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5114fc09772e49599b7c3ebf4e9f1e5a220b6aaefcc67e5bba5822f0bf6d7f81","sha256:ee30e83b4297e5a3c13838e95906e7f29bf4c23882dd62ee1d6fcc742404634a"],"state_sha256":"a536126f040a12859889a609c03956127114207223a56d2a4410d85eb2e20377"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4KBw8MbHEnMdlEuUL60cjF7L5AAk1cayIMsyPK8hmB+LTsj34BWwxQJnVipb86Co9cFpqkup8ybMlywiFjmpAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T23:15:31.186746Z","bundle_sha256":"6dde7c61458ab932c92006b5fa5c5bae5b827d2a2a72dd0b1dfa0e43396e6996"}}