{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:OQX64UVDCH6BFX5U5FTOYPXE33","short_pith_number":"pith:OQX64UVD","canonical_record":{"source":{"id":"2605.29620","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T08:54:54Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"72ee35b25d52658939f66b975f3c41230ab284cc419b4f65ea5fbcb2ec7af720","abstract_canon_sha256":"eb42522db0added55cfddf7516d218a2d1f9b1609c76e59f9703dc49d5326b59"},"schema_version":"1.0"},"canonical_sha256":"742fee52a311fc12dfb4e966ec3ee4deec90850790fd157ee73a59b18d296ac3","source":{"kind":"arxiv","id":"2605.29620","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.29620","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"arxiv_version","alias_value":"2605.29620v1","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.29620","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_12","alias_value":"OQX64UVDCH6B","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_16","alias_value":"OQX64UVDCH6BFX5U","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_8","alias_value":"OQX64UVD","created_at":"2026-05-29T01:05:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:OQX64UVDCH6BFX5U5FTOYPXE33","target":"record","payload":{"canonical_record":{"source":{"id":"2605.29620","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T08:54:54Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"72ee35b25d52658939f66b975f3c41230ab284cc419b4f65ea5fbcb2ec7af720","abstract_canon_sha256":"eb42522db0added55cfddf7516d218a2d1f9b1609c76e59f9703dc49d5326b59"},"schema_version":"1.0"},"canonical_sha256":"742fee52a311fc12dfb4e966ec3ee4deec90850790fd157ee73a59b18d296ac3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-29T01:05:51.356539Z","signature_b64":"EEwuesBVHWraO5hefDS6tjU5TwbMUi22XVHqX5Qqc5HrRCkKlBEMJ0KmJTjI+5iYEx9+QNMVkfqLmb3vhei2Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"742fee52a311fc12dfb4e966ec3ee4deec90850790fd157ee73a59b18d296ac3","last_reissued_at":"2026-05-29T01:05:51.355375Z","signature_status":"signed_v1","first_computed_at":"2026-05-29T01:05:51.355375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2605.29620","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-29T01:05:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gS+39f62gI5JTUMvJuF3I2xDP/yrL/1P/3bcX+b6UBcM6hi9HpJVQMNQMpfPM/AcMXPHBMBbdNYM94NVxQESCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T16:16:14.021392Z"},"content_sha256":"8be8ca7bd615995852589e76b717970f942c21b44f5dbee074b4a419c3288a3e","schema_version":"1.0","event_id":"sha256:8be8ca7bd615995852589e76b717970f942c21b44f5dbee074b4a419c3288a3e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:OQX64UVDCH6BFX5U5FTOYPXE33","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Control Flow Graph Recovery for Dynamically Loaded Code via Symbolic Library Resolution","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Oleksandr Mostovyi","submitted_at":"2026-05-28T08:54:54Z","abstract_excerpt":"Control Flow Graphs are one of the main data sources for software analysis that use dynamic and static software analysis methods. Protected software and modern malware increasingly depend on dynamic code loading techniques to evade static analysis. Usage of runtime dynamic linking mechanisms introduces unresolved indirect calls that stop static Control Flow Graph recovery. This serves to hide dynamic library that can be used for prevention of security analysis. To address this limitation, an analysis technique is proposed that combines symbolic execution with speculative library preloading to "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.29620","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2605.29620/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-29T01:05:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hsEi8DTtfCPWVimfyyl7W9XQAXTv8GaXCw/L6/fkv92Pq9zDvP/IsuwGXPccNciAf3K+NuVvo5kVPiQ++6jZDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T16:16:14.022010Z"},"content_sha256":"3d33dd8dbde1b1608d2d01e9ec088638ce6b9c688a140c9dd3de73b729475fbb","schema_version":"1.0","event_id":"sha256:3d33dd8dbde1b1608d2d01e9ec088638ce6b9c688a140c9dd3de73b729475fbb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OQX64UVDCH6BFX5U5FTOYPXE33/bundle.json","state_url":"https://pith.science/pith/OQX64UVDCH6BFX5U5FTOYPXE33/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OQX64UVDCH6BFX5U5FTOYPXE33/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T16:16:14Z","links":{"resolver":"https://pith.science/pith/OQX64UVDCH6BFX5U5FTOYPXE33","bundle":"https://pith.science/pith/OQX64UVDCH6BFX5U5FTOYPXE33/bundle.json","state":"https://pith.science/pith/OQX64UVDCH6BFX5U5FTOYPXE33/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OQX64UVDCH6BFX5U5FTOYPXE33/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:OQX64UVDCH6BFX5U5FTOYPXE33","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"eb42522db0added55cfddf7516d218a2d1f9b1609c76e59f9703dc49d5326b59","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T08:54:54Z","title_canon_sha256":"72ee35b25d52658939f66b975f3c41230ab284cc419b4f65ea5fbcb2ec7af720"},"schema_version":"1.0","source":{"id":"2605.29620","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2605.29620","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"arxiv_version","alias_value":"2605.29620v1","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2605.29620","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_12","alias_value":"OQX64UVDCH6B","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_16","alias_value":"OQX64UVDCH6BFX5U","created_at":"2026-05-29T01:05:51Z"},{"alias_kind":"pith_short_8","alias_value":"OQX64UVD","created_at":"2026-05-29T01:05:51Z"}],"graph_snapshots":[{"event_id":"sha256:3d33dd8dbde1b1608d2d01e9ec088638ce6b9c688a140c9dd3de73b729475fbb","target":"graph","created_at":"2026-05-29T01:05:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2605.29620/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Control Flow Graphs are one of the main data sources for software analysis that use dynamic and static software analysis methods. Protected software and modern malware increasingly depend on dynamic code loading techniques to evade static analysis. Usage of runtime dynamic linking mechanisms introduces unresolved indirect calls that stop static Control Flow Graph recovery. This serves to hide dynamic library that can be used for prevention of security analysis. To address this limitation, an analysis technique is proposed that combines symbolic execution with speculative library preloading to ","authors_text":"Oleksandr Mostovyi","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T08:54:54Z","title":"Control Flow Graph Recovery for Dynamically Loaded Code via Symbolic Library Resolution"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2605.29620","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8be8ca7bd615995852589e76b717970f942c21b44f5dbee074b4a419c3288a3e","target":"record","created_at":"2026-05-29T01:05:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"eb42522db0added55cfddf7516d218a2d1f9b1609c76e59f9703dc49d5326b59","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-05-28T08:54:54Z","title_canon_sha256":"72ee35b25d52658939f66b975f3c41230ab284cc419b4f65ea5fbcb2ec7af720"},"schema_version":"1.0","source":{"id":"2605.29620","kind":"arxiv","version":1}},"canonical_sha256":"742fee52a311fc12dfb4e966ec3ee4deec90850790fd157ee73a59b18d296ac3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"742fee52a311fc12dfb4e966ec3ee4deec90850790fd157ee73a59b18d296ac3","first_computed_at":"2026-05-29T01:05:51.355375Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-29T01:05:51.355375Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EEwuesBVHWraO5hefDS6tjU5TwbMUi22XVHqX5Qqc5HrRCkKlBEMJ0KmJTjI+5iYEx9+QNMVkfqLmb3vhei2Aw==","signature_status":"signed_v1","signed_at":"2026-05-29T01:05:51.356539Z","signed_message":"canonical_sha256_bytes"},"source_id":"2605.29620","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8be8ca7bd615995852589e76b717970f942c21b44f5dbee074b4a419c3288a3e","sha256:3d33dd8dbde1b1608d2d01e9ec088638ce6b9c688a140c9dd3de73b729475fbb"],"state_sha256":"0b1722ca3712bf77cf44aa9411db1e76c75d124c195a371603ae53cfda4036ff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6iLm/ShwooHoU3Ay3CbacQ9tLrBQFhrVK9BR70rQsfAx9mJhonmBwxjLqjUpk/i9j7hs7Ij26zcZd/LgztA9Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T16:16:14.026717Z","bundle_sha256":"be3da566239619116da4ffc6bc1feb9dc7ecf31624fcfcf4f3298911e50a8fd1"}}