{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2015:RR4MPSN7GDCN6EQZ5RRCAYRG5X","short_pith_number":"pith:RR4MPSN7","canonical_record":{"source":{"id":"1510.07308","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-10-25T21:14:06Z","cross_cats_sorted":[],"title_canon_sha256":"e48c8a728b054cc9a5fdfb5ea6f4e88c740fcb2b4abb477a6f5f9a1ef8e3d71a","abstract_canon_sha256":"84a0b5f33991cdfc2adf1b505bcce9470f95e2b84c0fb27b6712842d8ff8fe76"},"schema_version":"1.0"},"canonical_sha256":"8c78c7c9bf30c4df1219ec62206226edda7cf88d1012b2569ed0c7dd450eeadd","source":{"kind":"arxiv","id":"1510.07308","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1510.07308","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"arxiv_version","alias_value":"1510.07308v1","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1510.07308","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"pith_short_12","alias_value":"RR4MPSN7GDCN","created_at":"2026-05-18T12:29:39Z"},{"alias_kind":"pith_short_16","alias_value":"RR4MPSN7GDCN6EQZ","created_at":"2026-05-18T12:29:39Z"},{"alias_kind":"pith_short_8","alias_value":"RR4MPSN7","created_at":"2026-05-18T12:29:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2015:RR4MPSN7GDCN6EQZ5RRCAYRG5X","target":"record","payload":{"canonical_record":{"source":{"id":"1510.07308","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-10-25T21:14:06Z","cross_cats_sorted":[],"title_canon_sha256":"e48c8a728b054cc9a5fdfb5ea6f4e88c740fcb2b4abb477a6f5f9a1ef8e3d71a","abstract_canon_sha256":"84a0b5f33991cdfc2adf1b505bcce9470f95e2b84c0fb27b6712842d8ff8fe76"},"schema_version":"1.0"},"canonical_sha256":"8c78c7c9bf30c4df1219ec62206226edda7cf88d1012b2569ed0c7dd450eeadd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:29:14.415909Z","signature_b64":"y4J4eZo14LyL0DdoodCaWO9nW3IanoTGqj+ui4ukds2lDPnkRuKFr/GFi6UFW5qoD1Ck57y2ZmGRS68EiZebBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8c78c7c9bf30c4df1219ec62206226edda7cf88d1012b2569ed0c7dd450eeadd","last_reissued_at":"2026-05-18T01:29:14.415386Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:29:14.415386Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1510.07308","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:29:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gotJxTsFL4BtdbJ3RhfXjRvfaqt70cj8VR1ocgZ6WqnAZQCvvBrRSua2scuriDN5GOnJk5lMPQB9Ty3T7EAtBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T05:26:43.614756Z"},"content_sha256":"d1b29e04e0fc5cb48e0cdb40665976e17117e21b538d2cb3e060f4f306530e3e","schema_version":"1.0","event_id":"sha256:d1b29e04e0fc5cb48e0cdb40665976e17117e21b538d2cb3e060f4f306530e3e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2015:RR4MPSN7GDCN6EQZ5RRCAYRG5X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Apples and Oranges: Detecting Least-Privilege Violators with Peer Group Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Iulia Ion, Suman Jana, \\'Ulfar Erlingsson","submitted_at":"2015-10-25T21:14:06Z","abstract_excerpt":"Clustering software into peer groups based on its apparent functionality allows for simple, intuitive categorization of software that can, in particular, help identify which software uses comparatively more privilege than is necessary to implement its functionality. Such relative comparison can improve the security of a software ecosystem in a number of ways. For example, it can allow market operators to incentivize software developers to adhere to the principle of least privilege, e.g., by encouraging users to use alternative, less-privileged applications for any desired functionality. This p"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1510.07308","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:29:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"S44CFoNBV90PrJo9EcDDsBq4JZvaCV7tzZfUFRm9oIASDAdLxicji1gDJNW2Hjw2I/+dYzsniYBPYGkHzjSWAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T05:26:43.615623Z"},"content_sha256":"0854a82895617097bacaea7065f108f74b3601dc3462faaff6b9e4682b1fe46f","schema_version":"1.0","event_id":"sha256:0854a82895617097bacaea7065f108f74b3601dc3462faaff6b9e4682b1fe46f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/bundle.json","state_url":"https://pith.science/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T05:26:43Z","links":{"resolver":"https://pith.science/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X","bundle":"https://pith.science/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/bundle.json","state":"https://pith.science/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RR4MPSN7GDCN6EQZ5RRCAYRG5X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2015:RR4MPSN7GDCN6EQZ5RRCAYRG5X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"84a0b5f33991cdfc2adf1b505bcce9470f95e2b84c0fb27b6712842d8ff8fe76","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-10-25T21:14:06Z","title_canon_sha256":"e48c8a728b054cc9a5fdfb5ea6f4e88c740fcb2b4abb477a6f5f9a1ef8e3d71a"},"schema_version":"1.0","source":{"id":"1510.07308","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1510.07308","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"arxiv_version","alias_value":"1510.07308v1","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1510.07308","created_at":"2026-05-18T01:29:14Z"},{"alias_kind":"pith_short_12","alias_value":"RR4MPSN7GDCN","created_at":"2026-05-18T12:29:39Z"},{"alias_kind":"pith_short_16","alias_value":"RR4MPSN7GDCN6EQZ","created_at":"2026-05-18T12:29:39Z"},{"alias_kind":"pith_short_8","alias_value":"RR4MPSN7","created_at":"2026-05-18T12:29:39Z"}],"graph_snapshots":[{"event_id":"sha256:0854a82895617097bacaea7065f108f74b3601dc3462faaff6b9e4682b1fe46f","target":"graph","created_at":"2026-05-18T01:29:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Clustering software into peer groups based on its apparent functionality allows for simple, intuitive categorization of software that can, in particular, help identify which software uses comparatively more privilege than is necessary to implement its functionality. Such relative comparison can improve the security of a software ecosystem in a number of ways. For example, it can allow market operators to incentivize software developers to adhere to the principle of least privilege, e.g., by encouraging users to use alternative, less-privileged applications for any desired functionality. This p","authors_text":"Iulia Ion, Suman Jana, \\'Ulfar Erlingsson","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-10-25T21:14:06Z","title":"Apples and Oranges: Detecting Least-Privilege Violators with Peer Group Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1510.07308","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d1b29e04e0fc5cb48e0cdb40665976e17117e21b538d2cb3e060f4f306530e3e","target":"record","created_at":"2026-05-18T01:29:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"84a0b5f33991cdfc2adf1b505bcce9470f95e2b84c0fb27b6712842d8ff8fe76","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2015-10-25T21:14:06Z","title_canon_sha256":"e48c8a728b054cc9a5fdfb5ea6f4e88c740fcb2b4abb477a6f5f9a1ef8e3d71a"},"schema_version":"1.0","source":{"id":"1510.07308","kind":"arxiv","version":1}},"canonical_sha256":"8c78c7c9bf30c4df1219ec62206226edda7cf88d1012b2569ed0c7dd450eeadd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c78c7c9bf30c4df1219ec62206226edda7cf88d1012b2569ed0c7dd450eeadd","first_computed_at":"2026-05-18T01:29:14.415386Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:29:14.415386Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"y4J4eZo14LyL0DdoodCaWO9nW3IanoTGqj+ui4ukds2lDPnkRuKFr/GFi6UFW5qoD1Ck57y2ZmGRS68EiZebBA==","signature_status":"signed_v1","signed_at":"2026-05-18T01:29:14.415909Z","signed_message":"canonical_sha256_bytes"},"source_id":"1510.07308","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d1b29e04e0fc5cb48e0cdb40665976e17117e21b538d2cb3e060f4f306530e3e","sha256:0854a82895617097bacaea7065f108f74b3601dc3462faaff6b9e4682b1fe46f"],"state_sha256":"8cdf0c33527d3e9366c5d787b1a2527ecb24c41529687a476465b4d94ee48949"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OZJYjnCMRVOHO38rVewNjg1BPSo3a27TI8MF0oZpg7p1VT8BU6Tvps+1WK5EMAx21GamuRiFmVLrWG6pAYwqAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T05:26:43.620616Z","bundle_sha256":"2475648ee64bf324db85c5cb48772af722c20ba69d8094d582da88ab05810b0a"}}