{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:U46MHP4B6LOUUDIDFGREB4CNBP","short_pith_number":"pith:U46MHP4B","canonical_record":{"source":{"id":"2103.11882","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-18T10:47:15Z","cross_cats_sorted":["cs.PL","cs.SE"],"title_canon_sha256":"13fd0ffb33c8812447015e64fdb4b848c80acaaf0d644830303038b381600e51","abstract_canon_sha256":"8fd9cdae6b9c6bcaf04f6daf3cad5fa8bcf6763b4cc02b66094145d48a0fb917"},"schema_version":"1.0"},"canonical_sha256":"a73cc3bf81f2dd4a0d0329a240f04d0bc78338288415b6ed870f37895550a771","source":{"kind":"arxiv","id":"2103.11882","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.11882","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"arxiv_version","alias_value":"2103.11882v1","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.11882","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_12","alias_value":"U46MHP4B6LOU","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_16","alias_value":"U46MHP4B6LOUUDID","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_8","alias_value":"U46MHP4B","created_at":"2026-07-05T02:25:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:U46MHP4B6LOUUDIDFGREB4CNBP","target":"record","payload":{"canonical_record":{"source":{"id":"2103.11882","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-18T10:47:15Z","cross_cats_sorted":["cs.PL","cs.SE"],"title_canon_sha256":"13fd0ffb33c8812447015e64fdb4b848c80acaaf0d644830303038b381600e51","abstract_canon_sha256":"8fd9cdae6b9c6bcaf04f6daf3cad5fa8bcf6763b4cc02b66094145d48a0fb917"},"schema_version":"1.0"},"canonical_sha256":"a73cc3bf81f2dd4a0d0329a240f04d0bc78338288415b6ed870f37895550a771","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:25:13.112626Z","signature_b64":"DAqoKhSmtdvw69wNV4U4nfEdHenXJgOm+oTfAG9BwV2qZFlLFlBUEVmklH4zumcse9P0EFd0dyQsV42cOMeAAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a73cc3bf81f2dd4a0d0329a240f04d0bc78338288415b6ed870f37895550a771","last_reissued_at":"2026-07-05T02:25:13.112209Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:25:13.112209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2103.11882","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:25:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U/8Q/PLdqNBFWvFUaYMDbQEZ7eoGWh7/BsNV46YQ4LjK/ojqh22ll3gy9vbz0an6xJQL3IgTg/Ne/JO9lsblBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:51:39.254071Z"},"content_sha256":"2dd0fcc906ba0cbebed6d58a042174e9a305fc2be1a5d02a2265da4e8ec08fd1","schema_version":"1.0","event_id":"sha256:2dd0fcc906ba0cbebed6d58a042174e9a305fc2be1a5d02a2265da4e8ec08fd1"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:U46MHP4B6LOUUDIDFGREB4CNBP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generating Adversarial Computer Programs using Optimized Obfuscations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.PL","cs.SE"],"primary_cat":"cs.LG","authors_text":"Gaoyuan Zhang, Quanfu Fan, Shashank Srikant, Shiyu Chang, Sijia Liu, Tamara Mitrovska, Una-May O'Reilly","submitted_at":"2021-03-18T10:47:15Z","abstract_excerpt":"Machine learning (ML) models that learn and predict properties of computer programs are increasingly being adopted and deployed. These models have demonstrated success in applications such as auto-completing code, summarizing large programs, and detecting bugs and malware in programs. In this work, we investigate principled ways to adversarially perturb a computer program to fool such learned models, and thus determine their adversarial robustness. We use program obfuscations, which have conventionally been used to avoid attempts at reverse engineering programs, as adversarial perturbations. T"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.11882","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2103.11882/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:25:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Bi63FlO75C1MKlLH3LeKTAyuowoeooZ7q8Ec6DFhUQ1krtffN4KKIKkt/HwDXNbPlZvCTFgDWDM6VnVlTbYuAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T03:51:39.254455Z"},"content_sha256":"bd82a1f64f5a8d748939ab3f2999a3be3f5ff6032e0df99b2039e54ae82f136f","schema_version":"1.0","event_id":"sha256:bd82a1f64f5a8d748939ab3f2999a3be3f5ff6032e0df99b2039e54ae82f136f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U46MHP4B6LOUUDIDFGREB4CNBP/bundle.json","state_url":"https://pith.science/pith/U46MHP4B6LOUUDIDFGREB4CNBP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U46MHP4B6LOUUDIDFGREB4CNBP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T03:51:39Z","links":{"resolver":"https://pith.science/pith/U46MHP4B6LOUUDIDFGREB4CNBP","bundle":"https://pith.science/pith/U46MHP4B6LOUUDIDFGREB4CNBP/bundle.json","state":"https://pith.science/pith/U46MHP4B6LOUUDIDFGREB4CNBP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U46MHP4B6LOUUDIDFGREB4CNBP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:U46MHP4B6LOUUDIDFGREB4CNBP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fd9cdae6b9c6bcaf04f6daf3cad5fa8bcf6763b4cc02b66094145d48a0fb917","cross_cats_sorted":["cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-18T10:47:15Z","title_canon_sha256":"13fd0ffb33c8812447015e64fdb4b848c80acaaf0d644830303038b381600e51"},"schema_version":"1.0","source":{"id":"2103.11882","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2103.11882","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"arxiv_version","alias_value":"2103.11882v1","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2103.11882","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_12","alias_value":"U46MHP4B6LOU","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_16","alias_value":"U46MHP4B6LOUUDID","created_at":"2026-07-05T02:25:13Z"},{"alias_kind":"pith_short_8","alias_value":"U46MHP4B","created_at":"2026-07-05T02:25:13Z"}],"graph_snapshots":[{"event_id":"sha256:bd82a1f64f5a8d748939ab3f2999a3be3f5ff6032e0df99b2039e54ae82f136f","target":"graph","created_at":"2026-07-05T02:25:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2103.11882/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) models that learn and predict properties of computer programs are increasingly being adopted and deployed. These models have demonstrated success in applications such as auto-completing code, summarizing large programs, and detecting bugs and malware in programs. In this work, we investigate principled ways to adversarially perturb a computer program to fool such learned models, and thus determine their adversarial robustness. We use program obfuscations, which have conventionally been used to avoid attempts at reverse engineering programs, as adversarial perturbations. T","authors_text":"Gaoyuan Zhang, Quanfu Fan, Shashank Srikant, Shiyu Chang, Sijia Liu, Tamara Mitrovska, Una-May O'Reilly","cross_cats":["cs.PL","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-18T10:47:15Z","title":"Generating Adversarial Computer Programs using Optimized Obfuscations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2103.11882","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2dd0fcc906ba0cbebed6d58a042174e9a305fc2be1a5d02a2265da4e8ec08fd1","target":"record","created_at":"2026-07-05T02:25:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fd9cdae6b9c6bcaf04f6daf3cad5fa8bcf6763b4cc02b66094145d48a0fb917","cross_cats_sorted":["cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-03-18T10:47:15Z","title_canon_sha256":"13fd0ffb33c8812447015e64fdb4b848c80acaaf0d644830303038b381600e51"},"schema_version":"1.0","source":{"id":"2103.11882","kind":"arxiv","version":1}},"canonical_sha256":"a73cc3bf81f2dd4a0d0329a240f04d0bc78338288415b6ed870f37895550a771","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a73cc3bf81f2dd4a0d0329a240f04d0bc78338288415b6ed870f37895550a771","first_computed_at":"2026-07-05T02:25:13.112209Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:25:13.112209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DAqoKhSmtdvw69wNV4U4nfEdHenXJgOm+oTfAG9BwV2qZFlLFlBUEVmklH4zumcse9P0EFd0dyQsV42cOMeAAA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:25:13.112626Z","signed_message":"canonical_sha256_bytes"},"source_id":"2103.11882","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2dd0fcc906ba0cbebed6d58a042174e9a305fc2be1a5d02a2265da4e8ec08fd1","sha256:bd82a1f64f5a8d748939ab3f2999a3be3f5ff6032e0df99b2039e54ae82f136f"],"state_sha256":"48101d5976cc5c9da6f4870e4de8e3aaab6831f4944194e50c1af9b6175008e9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JQ/PLBuLHui6xZmuL6NBrIJMU4Rq3Xie4dyL2JMP8tLYiEHJWKT5E5wbRbYRIVH5JRpgqgroFGzYkSMUz7IvCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T03:51:39.256428Z","bundle_sha256":"c8ba527d289741fcea5f9f4e90894e7e2441ec7497e13791cbc1904f76cd2a36"}}