{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ND2GLBFU2CVKFHWQIY2JGSEOAK","short_pith_number":"pith:ND2GLBFU","canonical_record":{"source":{"id":"2104.03476","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-04-08T02:24:54Z","cross_cats_sorted":[],"title_canon_sha256":"1a47c6f72959baee69c0cbf9026feb7dd3d5eb356b8d5921f6ca8d24782e1b52","abstract_canon_sha256":"be857594396d20bb7f9f1f7459c0bc7409c31475d29ec2e1683988ff9aff3384"},"schema_version":"1.0"},"canonical_sha256":"68f46584b4d0aaa29ed0463493488e02b56e70dc08db3bd419c8470140534081","source":{"kind":"arxiv","id":"2104.03476","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.03476","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"arxiv_version","alias_value":"2104.03476v1","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.03476","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_12","alias_value":"ND2GLBFU2CVK","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_16","alias_value":"ND2GLBFU2CVKFHWQ","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_8","alias_value":"ND2GLBFU","created_at":"2026-07-05T02:30:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ND2GLBFU2CVKFHWQIY2JGSEOAK","target":"record","payload":{"canonical_record":{"source":{"id":"2104.03476","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-04-08T02:24:54Z","cross_cats_sorted":[],"title_canon_sha256":"1a47c6f72959baee69c0cbf9026feb7dd3d5eb356b8d5921f6ca8d24782e1b52","abstract_canon_sha256":"be857594396d20bb7f9f1f7459c0bc7409c31475d29ec2e1683988ff9aff3384"},"schema_version":"1.0"},"canonical_sha256":"68f46584b4d0aaa29ed0463493488e02b56e70dc08db3bd419c8470140534081","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:30:17.703937Z","signature_b64":"emzujeV0CUuXf01EPKZq++BGjvmNVbm5urYsRNriuouTllw3GTNb2w72zVYxKGJHLqRA5xTP+GRyS71lchcoBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"68f46584b4d0aaa29ed0463493488e02b56e70dc08db3bd419c8470140534081","last_reissued_at":"2026-07-05T02:30:17.703387Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:30:17.703387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.03476","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:30:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6rJW+fF8hhnZ0Zcz6wn0xqIl/io2+WnaqNPfjLGRnI3h14lR944RniIVcAhKqOFMtNXytb0HaaO5mQb/mPrkBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:16:09.943212Z"},"content_sha256":"f34778b2999b9a2e43abc2f4487e2227f474a860e7e2d6e50fc1cc01e5c69fca","schema_version":"1.0","event_id":"sha256:f34778b2999b9a2e43abc2f4487e2227f474a860e7e2d6e50fc1cc01e5c69fca"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ND2GLBFU2CVKFHWQIY2JGSEOAK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Secure Software Engineering in the Financial Services: A Practitioners' Perspective","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Arie van Deursen, Enrique Larios Vargas, Maur\\'icio Aniche, Vivek Arora","submitted_at":"2021-04-08T02:24:54Z","abstract_excerpt":"Secure software engineering is a fundamental activity in modern software development. However, while the field of security research has been advancing quite fast, in practice, there is still a vast knowledge gap between the security experts and the software development teams. After all, we cannot expect developers and other software practitioners to be security experts. Understanding how software development teams incorporate security in their processes and the challenges they face is a step towards reducing this gap. In this paper, we study how financial services companies ensure the security"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.03476","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.03476/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:30:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"npsFvVSlFQkWfKEQRZEeB3WAHM3O/6n/itcUlFBVbzRH5KcC74ImZH9Ez17nLCno8X+rtaR3PE6x1f2I9nF5BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T20:16:09.944124Z"},"content_sha256":"bca21210f0b7c07cb6d68c9d31277519293365b1f8bd10c8fdf0de0813d5be7d","schema_version":"1.0","event_id":"sha256:bca21210f0b7c07cb6d68c9d31277519293365b1f8bd10c8fdf0de0813d5be7d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/bundle.json","state_url":"https://pith.science/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T20:16:09Z","links":{"resolver":"https://pith.science/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK","bundle":"https://pith.science/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/bundle.json","state":"https://pith.science/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ND2GLBFU2CVKFHWQIY2JGSEOAK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ND2GLBFU2CVKFHWQIY2JGSEOAK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be857594396d20bb7f9f1f7459c0bc7409c31475d29ec2e1683988ff9aff3384","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-04-08T02:24:54Z","title_canon_sha256":"1a47c6f72959baee69c0cbf9026feb7dd3d5eb356b8d5921f6ca8d24782e1b52"},"schema_version":"1.0","source":{"id":"2104.03476","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.03476","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"arxiv_version","alias_value":"2104.03476v1","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.03476","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_12","alias_value":"ND2GLBFU2CVK","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_16","alias_value":"ND2GLBFU2CVKFHWQ","created_at":"2026-07-05T02:30:17Z"},{"alias_kind":"pith_short_8","alias_value":"ND2GLBFU","created_at":"2026-07-05T02:30:17Z"}],"graph_snapshots":[{"event_id":"sha256:bca21210f0b7c07cb6d68c9d31277519293365b1f8bd10c8fdf0de0813d5be7d","target":"graph","created_at":"2026-07-05T02:30:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.03476/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Secure software engineering is a fundamental activity in modern software development. However, while the field of security research has been advancing quite fast, in practice, there is still a vast knowledge gap between the security experts and the software development teams. After all, we cannot expect developers and other software practitioners to be security experts. Understanding how software development teams incorporate security in their processes and the challenges they face is a step towards reducing this gap. In this paper, we study how financial services companies ensure the security","authors_text":"Arie van Deursen, Enrique Larios Vargas, Maur\\'icio Aniche, Vivek Arora","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-04-08T02:24:54Z","title":"Secure Software Engineering in the Financial Services: A Practitioners' Perspective"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.03476","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f34778b2999b9a2e43abc2f4487e2227f474a860e7e2d6e50fc1cc01e5c69fca","target":"record","created_at":"2026-07-05T02:30:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be857594396d20bb7f9f1f7459c0bc7409c31475d29ec2e1683988ff9aff3384","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-04-08T02:24:54Z","title_canon_sha256":"1a47c6f72959baee69c0cbf9026feb7dd3d5eb356b8d5921f6ca8d24782e1b52"},"schema_version":"1.0","source":{"id":"2104.03476","kind":"arxiv","version":1}},"canonical_sha256":"68f46584b4d0aaa29ed0463493488e02b56e70dc08db3bd419c8470140534081","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"68f46584b4d0aaa29ed0463493488e02b56e70dc08db3bd419c8470140534081","first_computed_at":"2026-07-05T02:30:17.703387Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:30:17.703387Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"emzujeV0CUuXf01EPKZq++BGjvmNVbm5urYsRNriuouTllw3GTNb2w72zVYxKGJHLqRA5xTP+GRyS71lchcoBg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:30:17.703937Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.03476","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f34778b2999b9a2e43abc2f4487e2227f474a860e7e2d6e50fc1cc01e5c69fca","sha256:bca21210f0b7c07cb6d68c9d31277519293365b1f8bd10c8fdf0de0813d5be7d"],"state_sha256":"f5d27d99194ec2dad93f9b63ae27003361e34497a3130bf6cefd8f74d0d0dd24"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JVlfZOBvr0vnDOgqEfjj1nW6/2BKIRVoXwrFe2075UP56zmx5JpzstzrKqquhmx3iA2L3Eo29AJqpm2vpkf+Cw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T20:16:09.951246Z","bundle_sha256":"8888a243c27fe695867e8ed5f70bde9587021d14ff442f6bb549e3db45a38826"}}