{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:OYMRFT3QKCDGIPLSHZOJF7N6ZB","short_pith_number":"pith:OYMRFT3Q","canonical_record":{"source":{"id":"2103.05088","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-03-08T21:39:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e1be93682479c1d9ababf550a4fd469360e1b81d17a7cb2c03f19791e6f83ec2","abstract_canon_sha256":"5006f125fe44cd4506ef182817b9fbee5e3fca04089bf5cc6e95fc755b8ddc37"},"schema_version":"1.0"},"canonical_sha256":"761912cf705086643d723e5c92fdbec84dfcd5b1a533ed166446ea6b31b61507","source":{"kind":"arxiv","id":"2103.05088","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.05088","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"arxiv_version","alias_value":"2103.05088v1","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.05088","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_12","alias_value":"OYMRFT3QKCDG","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_16","alias_value":"OYMRFT3QKCDGIPLS","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_8","alias_value":"OYMRFT3Q","created_at":"2026-07-05T02:21:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:OYMRFT3QKCDGIPLSHZOJF7N6ZB","target":"record","payload":{"canonical_record":{"source":{"id":"2103.05088","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-03-08T21:39:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"e1be93682479c1d9ababf550a4fd469360e1b81d17a7cb2c03f19791e6f83ec2","abstract_canon_sha256":"5006f125fe44cd4506ef182817b9fbee5e3fca04089bf5cc6e95fc755b8ddc37"},"schema_version":"1.0"},"canonical_sha256":"761912cf705086643d723e5c92fdbec84dfcd5b1a533ed166446ea6b31b61507","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:21:22.185392Z","signature_b64":"eWv6yJNReoTjhGVXXjkru/2JHnVspH4umr7Z7JWEKq3T5qwCsTd4V99ZF8kzBkuvr+bV2Ciycs+Kvz+EOu+WDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"761912cf705086643d723e5c92fdbec84dfcd5b1a533ed166446ea6b31b61507","last_reissued_at":"2026-07-05T02:21:22.184863Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:21:22.184863Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.05088","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:21:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wrQyMBXAaspyajE+aA1Hk1pkuB0rt2g1DiNc5HHwOfQFt9OSWb3gxuLnlKC2B7duqiYyu4dBjg4k3Bch0KRtCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:54:26.273423Z"},"content_sha256":"bc3f9796279d51859a9507f4c55731ebcb00f8f94fe5d4f8260213fe3c934921","schema_version":"1.0","event_id":"sha256:bc3f9796279d51859a9507f4c55731ebcb00f8f94fe5d4f8260213fe3c934921"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:OYMRFT3QKCDGIPLSHZOJF7N6ZB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Laurie Williams, Nusrat Zahan, Rui Shu, Sarah Elder, Tim Menzies, Val Kozarev","submitted_at":"2021-03-08T21:39:14Z","abstract_excerpt":"Lack of security expertise among software practitioners is a problem with many implications. First, there is a deficit of security professionals to meet current needs. Additionally, even practitioners who do not plan to work in security may benefit from increased understanding of security. The goal of this paper is to aid software engineering educators in designing a comprehensive software security course by sharing an experience running a software security course for the eleventh time. Through all the eleven years of running the software security course, the course objectives have been compre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.05088","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.05088/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:21:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NLgapgQUhsXkVjau7oS2Y6OaXftuPoWK+R0WsZEuCkWYydW+aK73HgxDzFMSjPZGZQJJrEbv6unaqj86wIkoCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T08:54:26.273922Z"},"content_sha256":"a29ec278c0e7b824998029d6d43df07104d5911766f10f2365151a9f2100d052","schema_version":"1.0","event_id":"sha256:a29ec278c0e7b824998029d6d43df07104d5911766f10f2365151a9f2100d052"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/bundle.json","state_url":"https://pith.science/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T08:54:26Z","links":{"resolver":"https://pith.science/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB","bundle":"https://pith.science/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/bundle.json","state":"https://pith.science/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OYMRFT3QKCDGIPLSHZOJF7N6ZB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:OYMRFT3QKCDGIPLSHZOJF7N6ZB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5006f125fe44cd4506ef182817b9fbee5e3fca04089bf5cc6e95fc755b8ddc37","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-03-08T21:39:14Z","title_canon_sha256":"e1be93682479c1d9ababf550a4fd469360e1b81d17a7cb2c03f19791e6f83ec2"},"schema_version":"1.0","source":{"id":"2103.05088","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.05088","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"arxiv_version","alias_value":"2103.05088v1","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.05088","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_12","alias_value":"OYMRFT3QKCDG","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_16","alias_value":"OYMRFT3QKCDGIPLS","created_at":"2026-07-05T02:21:22Z"},{"alias_kind":"pith_short_8","alias_value":"OYMRFT3Q","created_at":"2026-07-05T02:21:22Z"}],"graph_snapshots":[{"event_id":"sha256:a29ec278c0e7b824998029d6d43df07104d5911766f10f2365151a9f2100d052","target":"graph","created_at":"2026-07-05T02:21:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.05088/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Lack of security expertise among software practitioners is a problem with many implications. First, there is a deficit of security professionals to meet current needs. Additionally, even practitioners who do not plan to work in security may benefit from increased understanding of security. The goal of this paper is to aid software engineering educators in designing a comprehensive software security course by sharing an experience running a software security course for the eleventh time. Through all the eleven years of running the software security course, the course objectives have been compre","authors_text":"Laurie Williams, Nusrat Zahan, Rui Shu, Sarah Elder, Tim Menzies, Val Kozarev","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-03-08T21:39:14Z","title":"Structuring a Comprehensive Software Security Course Around the OWASP Application Security Verification Standard"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.05088","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bc3f9796279d51859a9507f4c55731ebcb00f8f94fe5d4f8260213fe3c934921","target":"record","created_at":"2026-07-05T02:21:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5006f125fe44cd4506ef182817b9fbee5e3fca04089bf5cc6e95fc755b8ddc37","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2021-03-08T21:39:14Z","title_canon_sha256":"e1be93682479c1d9ababf550a4fd469360e1b81d17a7cb2c03f19791e6f83ec2"},"schema_version":"1.0","source":{"id":"2103.05088","kind":"arxiv","version":1}},"canonical_sha256":"761912cf705086643d723e5c92fdbec84dfcd5b1a533ed166446ea6b31b61507","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"761912cf705086643d723e5c92fdbec84dfcd5b1a533ed166446ea6b31b61507","first_computed_at":"2026-07-05T02:21:22.184863Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:21:22.184863Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"eWv6yJNReoTjhGVXXjkru/2JHnVspH4umr7Z7JWEKq3T5qwCsTd4V99ZF8kzBkuvr+bV2Ciycs+Kvz+EOu+WDw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:21:22.185392Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.05088","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bc3f9796279d51859a9507f4c55731ebcb00f8f94fe5d4f8260213fe3c934921","sha256:a29ec278c0e7b824998029d6d43df07104d5911766f10f2365151a9f2100d052"],"state_sha256":"6c2c6626cebf1ec6f05b9836052a6545981faa4da66b61ecc7a98648b3278c86"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j+vRy8CBr5QYzOXFWsuI+H4+sHZCheZVj2A0evvxr19oXtrCUbamjC5462/6JNwdIRo+xIe7xB+nZtp9XgmwCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T08:54:26.279049Z","bundle_sha256":"29764d88aae0e74630d9e94d9f374ea05ac54122d96ebe9ec080b302744ec650"}}