{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:Q6SMEMCCK4ISLGRH5LMRQAMXQ7","short_pith_number":"pith:Q6SMEMCC","canonical_record":{"source":{"id":"2103.08908","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-03-16T08:30:33Z","cross_cats_sorted":[],"title_canon_sha256":"88670cfb3cc85594913daee63fb97e177d98ea057947622d6b03b4cd69da614d","abstract_canon_sha256":"675e7120d55e4ffe7b216bd7f791fa1ca9544fc8ea725221a2a7550f463556d8"},"schema_version":"1.0"},"canonical_sha256":"87a4c230425711259a27ead918019787d2c03b80199e63c3d59e2468cdc32868","source":{"kind":"arxiv","id":"2103.08908","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.08908","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"arxiv_version","alias_value":"2103.08908v3","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.08908","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_12","alias_value":"Q6SMEMCCK4IS","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_16","alias_value":"Q6SMEMCCK4ISLGRH","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_8","alias_value":"Q6SMEMCC","created_at":"2026-07-05T04:21:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:Q6SMEMCCK4ISLGRH5LMRQAMXQ7","target":"record","payload":{"canonical_record":{"source":{"id":"2103.08908","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-03-16T08:30:33Z","cross_cats_sorted":[],"title_canon_sha256":"88670cfb3cc85594913daee63fb97e177d98ea057947622d6b03b4cd69da614d","abstract_canon_sha256":"675e7120d55e4ffe7b216bd7f791fa1ca9544fc8ea725221a2a7550f463556d8"},"schema_version":"1.0"},"canonical_sha256":"87a4c230425711259a27ead918019787d2c03b80199e63c3d59e2468cdc32868","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:21:25.830787Z","signature_b64":"4WOPyHDOytF/Bp46LeJSBJrDTMvi2qnZuuBUNLfPMfi6X1d38IwstTQjVkdcwnYZxVZWt6SJX3ga+oXI21xFDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"87a4c230425711259a27ead918019787d2c03b80199e63c3d59e2468cdc32868","last_reissued_at":"2026-07-05T04:21:25.830373Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:21:25.830373Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.08908","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j2t10InzDGn6OiPmwoB/ChG2fnjbH005IcfgWAjnaZglGDM4IgsHjKQ9envtAFzQ8KaLfE5U82Sq1Srktu/nCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:23:13.717000Z"},"content_sha256":"d1b87385ec55787f80ea088977485257ded9030e1d6ca1da71356344856f8329","schema_version":"1.0","event_id":"sha256:d1b87385ec55787f80ea088977485257ded9030e1d6ca1da71356344856f8329"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:Q6SMEMCCK4ISLGRH5LMRQAMXQ7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Blockchain-assisted Undisclosed IIoT Vulnerabilities Trusted Sharing Protection with Dynamic Token","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jingyu Feng, Jing Zhang, Wenbo Zhang, Yifei Shi","submitted_at":"2021-03-16T08:30:33Z","abstract_excerpt":"With the large-scale deployment of industrial internet of things (IIoT) devices, the number of vulnerabilities that threaten IIoT security is also growing dramatically, including a mass of undisclosed IIoT vulnerabilities that lack mitigation measures. Coordination Vulnerabilities Disclosure (CVD) is one of the most popular vulnerabilities sharing solutions, in which some security workers (SWs) can develop undisclosed vulnerabilities patches together. However, CVD assumes that sharing participants (SWs) are all honest, and thus offering chances for dishonest SWs to leak undisclosed IIoT vulner"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.08908","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.08908/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:21:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"36ZqCfwrYbLzUm9i3ltG7gWXA3Qu2fSZid0XTC3N2zElIDs2dFvlJq5p4qE0dmDjPom9rXZ+1EY46ZZwFbg3Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:23:13.717572Z"},"content_sha256":"dc580beeace7b40f96c7197319d3f39a90ceabf0bbcbca2d5a5b20a095f32578","schema_version":"1.0","event_id":"sha256:dc580beeace7b40f96c7197319d3f39a90ceabf0bbcbca2d5a5b20a095f32578"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/bundle.json","state_url":"https://pith.science/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:23:13Z","links":{"resolver":"https://pith.science/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7","bundle":"https://pith.science/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/bundle.json","state":"https://pith.science/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Q6SMEMCCK4ISLGRH5LMRQAMXQ7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:Q6SMEMCCK4ISLGRH5LMRQAMXQ7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"675e7120d55e4ffe7b216bd7f791fa1ca9544fc8ea725221a2a7550f463556d8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-03-16T08:30:33Z","title_canon_sha256":"88670cfb3cc85594913daee63fb97e177d98ea057947622d6b03b4cd69da614d"},"schema_version":"1.0","source":{"id":"2103.08908","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.08908","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"arxiv_version","alias_value":"2103.08908v3","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.08908","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_12","alias_value":"Q6SMEMCCK4IS","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_16","alias_value":"Q6SMEMCCK4ISLGRH","created_at":"2026-07-05T04:21:25Z"},{"alias_kind":"pith_short_8","alias_value":"Q6SMEMCC","created_at":"2026-07-05T04:21:25Z"}],"graph_snapshots":[{"event_id":"sha256:dc580beeace7b40f96c7197319d3f39a90ceabf0bbcbca2d5a5b20a095f32578","target":"graph","created_at":"2026-07-05T04:21:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.08908/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the large-scale deployment of industrial internet of things (IIoT) devices, the number of vulnerabilities that threaten IIoT security is also growing dramatically, including a mass of undisclosed IIoT vulnerabilities that lack mitigation measures. Coordination Vulnerabilities Disclosure (CVD) is one of the most popular vulnerabilities sharing solutions, in which some security workers (SWs) can develop undisclosed vulnerabilities patches together. However, CVD assumes that sharing participants (SWs) are all honest, and thus offering chances for dishonest SWs to leak undisclosed IIoT vulner","authors_text":"Jingyu Feng, Jing Zhang, Wenbo Zhang, Yifei Shi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-03-16T08:30:33Z","title":"Blockchain-assisted Undisclosed IIoT Vulnerabilities Trusted Sharing Protection with Dynamic Token"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.08908","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1b87385ec55787f80ea088977485257ded9030e1d6ca1da71356344856f8329","target":"record","created_at":"2026-07-05T04:21:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"675e7120d55e4ffe7b216bd7f791fa1ca9544fc8ea725221a2a7550f463556d8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2021-03-16T08:30:33Z","title_canon_sha256":"88670cfb3cc85594913daee63fb97e177d98ea057947622d6b03b4cd69da614d"},"schema_version":"1.0","source":{"id":"2103.08908","kind":"arxiv","version":3}},"canonical_sha256":"87a4c230425711259a27ead918019787d2c03b80199e63c3d59e2468cdc32868","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"87a4c230425711259a27ead918019787d2c03b80199e63c3d59e2468cdc32868","first_computed_at":"2026-07-05T04:21:25.830373Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:21:25.830373Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4WOPyHDOytF/Bp46LeJSBJrDTMvi2qnZuuBUNLfPMfi6X1d38IwstTQjVkdcwnYZxVZWt6SJX3ga+oXI21xFDg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:21:25.830787Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.08908","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1b87385ec55787f80ea088977485257ded9030e1d6ca1da71356344856f8329","sha256:dc580beeace7b40f96c7197319d3f39a90ceabf0bbcbca2d5a5b20a095f32578"],"state_sha256":"087b0e02b3a5ddd9d4dcba61ce012f804c4c9f9e91fb19ed56f5df18a458777c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZNSpZPxK7hX7StUGMB75fc9gFMJ+unbxEky7A6rTEoHGP3ORFWmPKFuzr7BEEhKn2f3QSzcobyYPwW1irORjBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:23:13.724441Z","bundle_sha256":"b552aed8e726b5680491c87cf36f9bbf1fb04c78fa3cf598bb2e89fa174b236c"}}