{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:P6QO6GM22WYIDRZXLGCJRF6FUL","short_pith_number":"pith:P6QO6GM2","canonical_record":{"source":{"id":"2007.03302","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-07T09:32:06Z","cross_cats_sorted":[],"title_canon_sha256":"c9a68d0f606ed55f314fb6e140bf2b2d69eb6be54432cced1b932b11c0bddcbb","abstract_canon_sha256":"fb16af8b3af6292f580f160e2fed96697eb61dcfe8940000cd850082636cb756"},"schema_version":"1.0"},"canonical_sha256":"7fa0ef199ad5b081c73759849897c5a2e8d36debda76466abb83967b6e2094a5","source":{"kind":"arxiv","id":"2007.03302","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.03302","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"arxiv_version","alias_value":"2007.03302v1","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.03302","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_12","alias_value":"P6QO6GM22WYI","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_16","alias_value":"P6QO6GM22WYIDRZX","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_8","alias_value":"P6QO6GM2","created_at":"2026-07-05T01:17:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:P6QO6GM22WYIDRZXLGCJRF6FUL","target":"record","payload":{"canonical_record":{"source":{"id":"2007.03302","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-07T09:32:06Z","cross_cats_sorted":[],"title_canon_sha256":"c9a68d0f606ed55f314fb6e140bf2b2d69eb6be54432cced1b932b11c0bddcbb","abstract_canon_sha256":"fb16af8b3af6292f580f160e2fed96697eb61dcfe8940000cd850082636cb756"},"schema_version":"1.0"},"canonical_sha256":"7fa0ef199ad5b081c73759849897c5a2e8d36debda76466abb83967b6e2094a5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:17:01.511333Z","signature_b64":"Du4WpADJHC0SAoAW9rRjPnF/JKN+v4jBnPo9y/ewFoZ8wxEItxNjudR0626NygYZ8YZXveyvK3rc+sXsgvOOBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7fa0ef199ad5b081c73759849897c5a2e8d36debda76466abb83967b6e2094a5","last_reissued_at":"2026-07-05T01:17:01.510892Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:17:01.510892Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2007.03302","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:17:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GFe3Ty2JDYVsbSCd3e+IADJ4UqP1MZDbxycQzehTxm1Boan4Hs1e8HUqti6UzWsy21LzCWv1uTbEcDlYZCI/Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:40:16.099938Z"},"content_sha256":"d6e220044a025385e6ca126f5b06a1c4777dd9ecb5b089c842eac439dc52f46f","schema_version":"1.0","event_id":"sha256:d6e220044a025385e6ca126f5b06a1c4777dd9ecb5b089c842eac439dc52f46f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:P6QO6GM22WYIDRZXLGCJRF6FUL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andre Pawlowski, Cristiano Giuffrida, Dennis Andriesse, Erik van der Kouwe, Herbert Bos, Thorsten Holz, Victor van der Veen","submitted_at":"2020-07-07T09:32:06Z","abstract_excerpt":"Polymorphism and inheritance make C++ suitable for writing complex software, but significantly increase the attack surface because the implementation relies on virtual function tables (vtables). These vtables contain function pointers that attackers can potentially hijack and in practice, vtable hijacking is one of the most important attack vector for C++ binaries.\n  In this paper, we present VTable Pointer Separation (VPS), a practical binary-level defense against vtable hijacking in C++ applications. Unlike previous binary-level defenses, which rely on unsound static analyses to match classe"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.03302","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2007.03302/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:17:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BNMQFxqJ5zPUiAdmC4nacpwFjQxLLhZQ9u/IU9NmwQgJkezf4oipowoUTVtBNXO4HiYRuoT2qDHTTzoDLMm5BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T15:40:16.100793Z"},"content_sha256":"e7288f9dcd16fad51691b5b9bd83e1254546ed01b93dcc139702e1a4a893862c","schema_version":"1.0","event_id":"sha256:e7288f9dcd16fad51691b5b9bd83e1254546ed01b93dcc139702e1a4a893862c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/bundle.json","state_url":"https://pith.science/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T15:40:16Z","links":{"resolver":"https://pith.science/pith/P6QO6GM22WYIDRZXLGCJRF6FUL","bundle":"https://pith.science/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/bundle.json","state":"https://pith.science/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/P6QO6GM22WYIDRZXLGCJRF6FUL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:P6QO6GM22WYIDRZXLGCJRF6FUL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fb16af8b3af6292f580f160e2fed96697eb61dcfe8940000cd850082636cb756","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-07T09:32:06Z","title_canon_sha256":"c9a68d0f606ed55f314fb6e140bf2b2d69eb6be54432cced1b932b11c0bddcbb"},"schema_version":"1.0","source":{"id":"2007.03302","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2007.03302","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"arxiv_version","alias_value":"2007.03302v1","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2007.03302","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_12","alias_value":"P6QO6GM22WYI","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_16","alias_value":"P6QO6GM22WYIDRZX","created_at":"2026-07-05T01:17:01Z"},{"alias_kind":"pith_short_8","alias_value":"P6QO6GM2","created_at":"2026-07-05T01:17:01Z"}],"graph_snapshots":[{"event_id":"sha256:e7288f9dcd16fad51691b5b9bd83e1254546ed01b93dcc139702e1a4a893862c","target":"graph","created_at":"2026-07-05T01:17:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2007.03302/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Polymorphism and inheritance make C++ suitable for writing complex software, but significantly increase the attack surface because the implementation relies on virtual function tables (vtables). These vtables contain function pointers that attackers can potentially hijack and in practice, vtable hijacking is one of the most important attack vector for C++ binaries.\n  In this paper, we present VTable Pointer Separation (VPS), a practical binary-level defense against vtable hijacking in C++ applications. Unlike previous binary-level defenses, which rely on unsound static analyses to match classe","authors_text":"Andre Pawlowski, Cristiano Giuffrida, Dennis Andriesse, Erik van der Kouwe, Herbert Bos, Thorsten Holz, Victor van der Veen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-07T09:32:06Z","title":"VPS: Excavating High-Level C++ Constructs from Low-Level Binaries to Protect Dynamic Dispatching"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2007.03302","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6e220044a025385e6ca126f5b06a1c4777dd9ecb5b089c842eac439dc52f46f","target":"record","created_at":"2026-07-05T01:17:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fb16af8b3af6292f580f160e2fed96697eb61dcfe8940000cd850082636cb756","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-07-07T09:32:06Z","title_canon_sha256":"c9a68d0f606ed55f314fb6e140bf2b2d69eb6be54432cced1b932b11c0bddcbb"},"schema_version":"1.0","source":{"id":"2007.03302","kind":"arxiv","version":1}},"canonical_sha256":"7fa0ef199ad5b081c73759849897c5a2e8d36debda76466abb83967b6e2094a5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7fa0ef199ad5b081c73759849897c5a2e8d36debda76466abb83967b6e2094a5","first_computed_at":"2026-07-05T01:17:01.510892Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:17:01.510892Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Du4WpADJHC0SAoAW9rRjPnF/JKN+v4jBnPo9y/ewFoZ8wxEItxNjudR0626NygYZ8YZXveyvK3rc+sXsgvOOBg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:17:01.511333Z","signed_message":"canonical_sha256_bytes"},"source_id":"2007.03302","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6e220044a025385e6ca126f5b06a1c4777dd9ecb5b089c842eac439dc52f46f","sha256:e7288f9dcd16fad51691b5b9bd83e1254546ed01b93dcc139702e1a4a893862c"],"state_sha256":"c00b014bad0dcb5fee9e97b34d395330a88587dfbe6629703e2499e2afac111e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IZZS8gu3RV/PwEG2qM4oIME4TRBDDKfN05neKCsMnqVgJL6savtGIzhFY9Zie9m3K4QPndygliSlfY5xCTaNCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T15:40:16.106466Z","bundle_sha256":"df7a9850bd4777b414103a30c96965c6e392133dda77b4edf402a1681dc360b7"}}