{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:SWBV7RG26T75I245WUYOXDXDHX","short_pith_number":"pith:SWBV7RG2","schema_version":"1.0","canonical_sha256":"95835fc4daf4ffd46b9db530eb8ee33dcba4455d11118b06737980341a96d128","source":{"kind":"arxiv","id":"1909.01752","version":2},"attestation_state":"computed","paper":{"title":"SATURN -- Software Deobfuscation Framework Based on LLVM","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SC"],"primary_cat":"cs.CR","authors_text":"Matteo Favaro, Peter Garba","submitted_at":"2019-09-04T12:50:21Z","abstract_excerpt":"The strength of obfuscated software has increased over the recent years. Compiler based obfuscation has become the de facto standard in the industry and recent papers also show that injection of obfuscation techniques is done at the compiler level. In this paper we discuss a generic approach for deobfuscation and recompilation of obfuscated code based on the compiler framework LLVM. We show how binary code can be lifted back into the compiler intermediate language LLVM-IR and explain how we recover the control flow graph of an obfuscated binary function with an iterative control flow graph con"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1909.01752","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-09-04T12:50:21Z","cross_cats_sorted":["cs.SC"],"title_canon_sha256":"418a18fa42518f23ca0d4372efa3fc9c95f05d229b719f7b75b0dceed7b77069","abstract_canon_sha256":"e239aa189c860b94694617aafacf4ccf33b6497d31e9e309a06cc85ff3034647"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:04:44.699047Z","signature_b64":"22AUuwgYfklacu7bbiVn8TNhJjndkECSTymIR7AnxsmWSpWb5C2f4N1WF0wMenfziECc9cqc/XP5K08THYw6Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"95835fc4daf4ffd46b9db530eb8ee33dcba4455d11118b06737980341a96d128","last_reissued_at":"2026-07-05T00:04:44.698627Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:04:44.698627Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"SATURN -- Software Deobfuscation Framework Based on LLVM","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SC"],"primary_cat":"cs.CR","authors_text":"Matteo Favaro, Peter Garba","submitted_at":"2019-09-04T12:50:21Z","abstract_excerpt":"The strength of obfuscated software has increased over the recent years. Compiler based obfuscation has become the de facto standard in the industry and recent papers also show that injection of obfuscation techniques is done at the compiler level. In this paper we discuss a generic approach for deobfuscation and recompilation of obfuscated code based on the compiler framework LLVM. We show how binary code can be lifted back into the compiler intermediate language LLVM-IR and explain how we recover the control flow graph of an obfuscated binary function with an iterative control flow graph con"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.01752","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.01752/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1909.01752","created_at":"2026-07-05T00:04:44.698684+00:00"},{"alias_kind":"arxiv_version","alias_value":"1909.01752v2","created_at":"2026-07-05T00:04:44.698684+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.01752","created_at":"2026-07-05T00:04:44.698684+00:00"},{"alias_kind":"pith_short_12","alias_value":"SWBV7RG26T75","created_at":"2026-07-05T00:04:44.698684+00:00"},{"alias_kind":"pith_short_16","alias_value":"SWBV7RG26T75I245","created_at":"2026-07-05T00:04:44.698684+00:00"},{"alias_kind":"pith_short_8","alias_value":"SWBV7RG2","created_at":"2026-07-05T00:04:44.698684+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX","json":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX.json","graph_json":"https://pith.science/api/pith-number/SWBV7RG26T75I245WUYOXDXDHX/graph.json","events_json":"https://pith.science/api/pith-number/SWBV7RG26T75I245WUYOXDXDHX/events.json","paper":"https://pith.science/paper/SWBV7RG2"},"agent_actions":{"view_html":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX","download_json":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX.json","view_paper":"https://pith.science/paper/SWBV7RG2","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1909.01752&json=true","fetch_graph":"https://pith.science/api/pith-number/SWBV7RG26T75I245WUYOXDXDHX/graph.json","fetch_events":"https://pith.science/api/pith-number/SWBV7RG26T75I245WUYOXDXDHX/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX/action/timestamp_anchor","attest_storage":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX/action/storage_attestation","attest_author":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX/action/author_attestation","sign_citation":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX/action/citation_signature","submit_replication":"https://pith.science/pith/SWBV7RG26T75I245WUYOXDXDHX/action/replication_record"}},"created_at":"2026-07-05T00:04:44.698684+00:00","updated_at":"2026-07-05T00:04:44.698684+00:00"}