{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:SIN7APFRYA755CRN37GDJCTFF3","short_pith_number":"pith:SIN7APFR","schema_version":"1.0","canonical_sha256":"921bf03cb1c03fde8a2ddfcc348a652eda88a79dff0f1cfc296e8420d59ba648","source":{"kind":"arxiv","id":"2606.28870","version":1},"attestation_state":"computed","paper":{"title":"Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Chaopeng Dong, Hong Li, Hongsong Zhu, Jie Liu, Jingdong Guo, Siyuan Li, Yimo Ren","submitted_at":"2026-06-27T11:26:28Z","abstract_excerpt":"Firmware lies at the heart of IoT devices. Its development depends heavily on third-party libraries (TPLs), which greatly accelerate the process but simultaneously introduce associated vulnerabilities. Binary Code Similarity Detection (BCSD) is an effective technique for identifying vulnerabilities in firmware by comparing pairs of code segments. However, existing studies either evaluate their performance only on small-scale datasets or lack diversity in terms of vulnerabilities, TPLs, and firmware. Consequently, a comprehensive understanding of BCSD for real-world vulnerability detection rema"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.28870","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-27T11:26:28Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"5bd383501ae11d2f148911f78785e8b7514a2e10056ede4d32fbea551e9a4af2","abstract_canon_sha256":"6d757c3ae99fa275ef8b1acb59a81853649a1dfe8006b8c869db6dffa129a651"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-30T01:16:55.326900Z","signature_b64":"D1MwZZ3tVJ+aYCQh5hO+rykhNyt+xAr6m98qoVO6fv+b8PFTf9dICJOA903o7XfOaizbNCB1hStPuW6gg3PlAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"921bf03cb1c03fde8a2ddfcc348a652eda88a79dff0f1cfc296e8420d59ba648","last_reissued_at":"2026-06-30T01:16:55.326272Z","signature_status":"signed_v1","first_computed_at":"2026-06-30T01:16:55.326272Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Understanding Binary Code Similarity for Real-World Vulnerability Detection: A Large-Scale Empirical Study","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Chaopeng Dong, Hong Li, Hongsong Zhu, Jie Liu, Jingdong Guo, Siyuan Li, Yimo Ren","submitted_at":"2026-06-27T11:26:28Z","abstract_excerpt":"Firmware lies at the heart of IoT devices. Its development depends heavily on third-party libraries (TPLs), which greatly accelerate the process but simultaneously introduce associated vulnerabilities. Binary Code Similarity Detection (BCSD) is an effective technique for identifying vulnerabilities in firmware by comparing pairs of code segments. However, existing studies either evaluate their performance only on small-scale datasets or lack diversity in terms of vulnerabilities, TPLs, and firmware. Consequently, a comprehensive understanding of BCSD for real-world vulnerability detection rema"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.28870","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.28870/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.28870","created_at":"2026-06-30T01:16:55.326386+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.28870v1","created_at":"2026-06-30T01:16:55.326386+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.28870","created_at":"2026-06-30T01:16:55.326386+00:00"},{"alias_kind":"pith_short_12","alias_value":"SIN7APFRYA75","created_at":"2026-06-30T01:16:55.326386+00:00"},{"alias_kind":"pith_short_16","alias_value":"SIN7APFRYA755CRN","created_at":"2026-06-30T01:16:55.326386+00:00"},{"alias_kind":"pith_short_8","alias_value":"SIN7APFR","created_at":"2026-06-30T01:16:55.326386+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3","json":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3.json","graph_json":"https://pith.science/api/pith-number/SIN7APFRYA755CRN37GDJCTFF3/graph.json","events_json":"https://pith.science/api/pith-number/SIN7APFRYA755CRN37GDJCTFF3/events.json","paper":"https://pith.science/paper/SIN7APFR"},"agent_actions":{"view_html":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3","download_json":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3.json","view_paper":"https://pith.science/paper/SIN7APFR","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.28870&json=true","fetch_graph":"https://pith.science/api/pith-number/SIN7APFRYA755CRN37GDJCTFF3/graph.json","fetch_events":"https://pith.science/api/pith-number/SIN7APFRYA755CRN37GDJCTFF3/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3/action/timestamp_anchor","attest_storage":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3/action/storage_attestation","attest_author":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3/action/author_attestation","sign_citation":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3/action/citation_signature","submit_replication":"https://pith.science/pith/SIN7APFRYA755CRN37GDJCTFF3/action/replication_record"}},"created_at":"2026-06-30T01:16:55.326386+00:00","updated_at":"2026-06-30T01:16:55.326386+00:00"}