{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ONTGGEPFTYT7GPXNW6W6ZSK3QO","short_pith_number":"pith:ONTGGEPF","canonical_record":{"source":{"id":"2102.10452","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-20T21:40:53Z","cross_cats_sorted":[],"title_canon_sha256":"bd49af347ccf3f4c9136bc225c5300564098e42e067d75a829a33f9508534e13","abstract_canon_sha256":"0fbf7c7838b6b20042d5a99772c0fb31147b40ee5b4d422334c3f34e1aa3c04b"},"schema_version":"1.0"},"canonical_sha256":"73666311e59e27f33eedb7adecc95b83bc6a288f602df7ec9c68cfadb2e5e0f2","source":{"kind":"arxiv","id":"2102.10452","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.10452","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"arxiv_version","alias_value":"2102.10452v1","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.10452","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_12","alias_value":"ONTGGEPFTYT7","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_16","alias_value":"ONTGGEPFTYT7GPXN","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_8","alias_value":"ONTGGEPF","created_at":"2026-07-05T02:16:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ONTGGEPFTYT7GPXNW6W6ZSK3QO","target":"record","payload":{"canonical_record":{"source":{"id":"2102.10452","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-20T21:40:53Z","cross_cats_sorted":[],"title_canon_sha256":"bd49af347ccf3f4c9136bc225c5300564098e42e067d75a829a33f9508534e13","abstract_canon_sha256":"0fbf7c7838b6b20042d5a99772c0fb31147b40ee5b4d422334c3f34e1aa3c04b"},"schema_version":"1.0"},"canonical_sha256":"73666311e59e27f33eedb7adecc95b83bc6a288f602df7ec9c68cfadb2e5e0f2","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:16:58.033974Z","signature_b64":"mYPjhNtiPBrRBCuvru1mqG4ifj5eLJpMmnLfpc/wZS1kfDbdAdGIKN1z3nExbDgRmAGSiP/EtZmhEynw9G/TCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"73666311e59e27f33eedb7adecc95b83bc6a288f602df7ec9c68cfadb2e5e0f2","last_reissued_at":"2026-07-05T02:16:58.033536Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:16:58.033536Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2102.10452","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:16:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2sOOyCHBuKwMpZCEgyUbzayztDafgZOqaU2W/Fc7c+CC6EWXzFGWUzesaCfd0BJ93RkS07Vnjmc6QPPaVI0vDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:10:09.207054Z"},"content_sha256":"556cab41b0db73261fe4dc1b115fc949148696a573b78313880d68d7ebcb3a27","schema_version":"1.0","event_id":"sha256:556cab41b0db73261fe4dc1b115fc949148696a573b78313880d68d7ebcb3a27"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ONTGGEPFTYT7GPXNW6W6ZSK3QO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Spotting Silent Buffer Overflows in Execution Trace through Graph Neural Network Assisted Data Flow Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Li Yu, Peng Liu, Suhang Wang, Zhilong Wang","submitted_at":"2021-02-20T21:40:53Z","abstract_excerpt":"A software vulnerability could be exploited without any visible symptoms. When no source code is available, although such silent program executions could cause very serious damage, the general problem of analyzing silent yet harmful executions is still an open problem. In this work, we propose a graph neural network (GNN) assisted data flow analysis method for spotting silent buffer overflows in execution traces. The new method combines a novel graph structure (denoted DFG+) beyond data-flow graphs, a tool to extract {\\tt DFG+} from execution traces, and a modified Relational Graph Convolution"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.10452","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2102.10452/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:16:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WKxHOAIcZerMLKPQZwglredRfRPH4Q2IPRXUGlo0RrGSvrydLSKp20JeT3KphQ+g+T8x8L1OIhlOWIfH4kylDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T07:10:09.207598Z"},"content_sha256":"248a4440f68d0e20d12cf780f752b26b3e681bd716aaef1a3c9e7d016ed1925d","schema_version":"1.0","event_id":"sha256:248a4440f68d0e20d12cf780f752b26b3e681bd716aaef1a3c9e7d016ed1925d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/bundle.json","state_url":"https://pith.science/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T07:10:09Z","links":{"resolver":"https://pith.science/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO","bundle":"https://pith.science/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/bundle.json","state":"https://pith.science/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ONTGGEPFTYT7GPXNW6W6ZSK3QO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ONTGGEPFTYT7GPXNW6W6ZSK3QO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0fbf7c7838b6b20042d5a99772c0fb31147b40ee5b4d422334c3f34e1aa3c04b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-20T21:40:53Z","title_canon_sha256":"bd49af347ccf3f4c9136bc225c5300564098e42e067d75a829a33f9508534e13"},"schema_version":"1.0","source":{"id":"2102.10452","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2102.10452","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"arxiv_version","alias_value":"2102.10452v1","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2102.10452","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_12","alias_value":"ONTGGEPFTYT7","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_16","alias_value":"ONTGGEPFTYT7GPXN","created_at":"2026-07-05T02:16:58Z"},{"alias_kind":"pith_short_8","alias_value":"ONTGGEPF","created_at":"2026-07-05T02:16:58Z"}],"graph_snapshots":[{"event_id":"sha256:248a4440f68d0e20d12cf780f752b26b3e681bd716aaef1a3c9e7d016ed1925d","target":"graph","created_at":"2026-07-05T02:16:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2102.10452/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"A software vulnerability could be exploited without any visible symptoms. When no source code is available, although such silent program executions could cause very serious damage, the general problem of analyzing silent yet harmful executions is still an open problem. In this work, we propose a graph neural network (GNN) assisted data flow analysis method for spotting silent buffer overflows in execution traces. The new method combines a novel graph structure (denoted DFG+) beyond data-flow graphs, a tool to extract {\\tt DFG+} from execution traces, and a modified Relational Graph Convolution","authors_text":"Li Yu, Peng Liu, Suhang Wang, Zhilong Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-20T21:40:53Z","title":"Spotting Silent Buffer Overflows in Execution Trace through Graph Neural Network Assisted Data Flow Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2102.10452","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:556cab41b0db73261fe4dc1b115fc949148696a573b78313880d68d7ebcb3a27","target":"record","created_at":"2026-07-05T02:16:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0fbf7c7838b6b20042d5a99772c0fb31147b40ee5b4d422334c3f34e1aa3c04b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-02-20T21:40:53Z","title_canon_sha256":"bd49af347ccf3f4c9136bc225c5300564098e42e067d75a829a33f9508534e13"},"schema_version":"1.0","source":{"id":"2102.10452","kind":"arxiv","version":1}},"canonical_sha256":"73666311e59e27f33eedb7adecc95b83bc6a288f602df7ec9c68cfadb2e5e0f2","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"73666311e59e27f33eedb7adecc95b83bc6a288f602df7ec9c68cfadb2e5e0f2","first_computed_at":"2026-07-05T02:16:58.033536Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:16:58.033536Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"mYPjhNtiPBrRBCuvru1mqG4ifj5eLJpMmnLfpc/wZS1kfDbdAdGIKN1z3nExbDgRmAGSiP/EtZmhEynw9G/TCw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:16:58.033974Z","signed_message":"canonical_sha256_bytes"},"source_id":"2102.10452","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:556cab41b0db73261fe4dc1b115fc949148696a573b78313880d68d7ebcb3a27","sha256:248a4440f68d0e20d12cf780f752b26b3e681bd716aaef1a3c9e7d016ed1925d"],"state_sha256":"8e49d57f1868f1b795a2ae189b4aa0df58c0468f98255c02c838a8cd1833f672"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8OmPrEKYw45Ldor4dxfhoVTOxFO4mN2bwIeO4rvQZWbn+suMDEas6gIERIZZ/IbQdnPpOMRVky6EyZNokPH/Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T07:10:09.212520Z","bundle_sha256":"8d9916ee7d892750ce774202cd41e01a26ff258ff5fa5377853b2a6628e43b6a"}}