{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:U7PNOUJBGLNILZQA6SGNFGEVAU","short_pith_number":"pith:U7PNOUJB","canonical_record":{"source":{"id":"2212.13990","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-23T02:17:44Z","cross_cats_sorted":[],"title_canon_sha256":"3c0ff5bfc763936039f0145964502a1928bd4840b35a658e19fb613dda3b95f1","abstract_canon_sha256":"8fbb1db7750dfacb5ef3ee88999420e8efb08da14965ffad10e1a6edbbc6838b"},"schema_version":"1.0"},"canonical_sha256":"a7ded7512132da85e600f48cd2989505180ba398da388c96c3926f8782631334","source":{"kind":"arxiv","id":"2212.13990","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.13990","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"arxiv_version","alias_value":"2212.13990v1","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.13990","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_12","alias_value":"U7PNOUJBGLNI","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"U7PNOUJBGLNILZQA","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"U7PNOUJB","created_at":"2026-07-05T05:28:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:U7PNOUJBGLNILZQA6SGNFGEVAU","target":"record","payload":{"canonical_record":{"source":{"id":"2212.13990","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-23T02:17:44Z","cross_cats_sorted":[],"title_canon_sha256":"3c0ff5bfc763936039f0145964502a1928bd4840b35a658e19fb613dda3b95f1","abstract_canon_sha256":"8fbb1db7750dfacb5ef3ee88999420e8efb08da14965ffad10e1a6edbbc6838b"},"schema_version":"1.0"},"canonical_sha256":"a7ded7512132da85e600f48cd2989505180ba398da388c96c3926f8782631334","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:28:57.389455Z","signature_b64":"obRFiYJXPZBSbBCOFO2qa1qp7ZYxOgdL4SrUHT1mwZx8810Neg1nIWsIGBw8t/IxbDoiz8rpigClE7x9oo1xAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a7ded7512132da85e600f48cd2989505180ba398da388c96c3926f8782631334","last_reissued_at":"2026-07-05T05:28:57.389052Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:28:57.389052Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2212.13990","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:28:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SyHm4O8WRW6Tnc/cvSQE/EE+DgiGnZYMAsH5wDOoKHILzGL3ppQsrPWHvSLgW3fjv7+dgKtGUw1oEMpdgGxLBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T07:20:29.125944Z"},"content_sha256":"c5e3272d33009b5c3f8d0f64d3b14beb775e7df3ac33514b9f19cb4478e21bee","schema_version":"1.0","event_id":"sha256:c5e3272d33009b5c3f8d0f64d3b14beb775e7df3ac33514b9f19cb4478e21bee"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:U7PNOUJBGLNILZQA6SGNFGEVAU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detecting Exploit Primitives Automatically for Heap Vulnerabilities on Binary Programs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hang An, Hongliang Liang, Jie Liu, Jin Li","submitted_at":"2022-12-23T02:17:44Z","abstract_excerpt":"Automated Exploit Generation (AEG) is a well-known difficult task, especially for heap vulnerabilities. Previous works first detected heap vulnerabilities and then searched for exploitable states by using symbolic execution and fuzzing techniques on binary programs. However, it is not always easy to discovery bugs using fuzzing or symbolic technologies and solvable for internal overflow of heap objects. In this paper, we present a solution DEPA to detect exploit primitives based on primitive-crucial-behavior model for heap vulnerabilities. The core of DEPA contains two novel techniques, 1) pri"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.13990","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2212.13990/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:28:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dPAx8cLoY81ulmsW73/x30D906OYRWtHfzGrErttouCdDAi6Rx1C9swQfsOgmg1UrQr8CYh8Y+Co8GN21ufvDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-20T07:20:29.126342Z"},"content_sha256":"308205d55316b2e9e4a0977dcff1467daab6ce8e672fc6ffbe46bcc3b1364a19","schema_version":"1.0","event_id":"sha256:308205d55316b2e9e4a0977dcff1467daab6ce8e672fc6ffbe46bcc3b1364a19"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/bundle.json","state_url":"https://pith.science/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-20T07:20:29Z","links":{"resolver":"https://pith.science/pith/U7PNOUJBGLNILZQA6SGNFGEVAU","bundle":"https://pith.science/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/bundle.json","state":"https://pith.science/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U7PNOUJBGLNILZQA6SGNFGEVAU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:U7PNOUJBGLNILZQA6SGNFGEVAU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8fbb1db7750dfacb5ef3ee88999420e8efb08da14965ffad10e1a6edbbc6838b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-23T02:17:44Z","title_canon_sha256":"3c0ff5bfc763936039f0145964502a1928bd4840b35a658e19fb613dda3b95f1"},"schema_version":"1.0","source":{"id":"2212.13990","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2212.13990","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"arxiv_version","alias_value":"2212.13990v1","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2212.13990","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_12","alias_value":"U7PNOUJBGLNI","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_16","alias_value":"U7PNOUJBGLNILZQA","created_at":"2026-07-05T05:28:57Z"},{"alias_kind":"pith_short_8","alias_value":"U7PNOUJB","created_at":"2026-07-05T05:28:57Z"}],"graph_snapshots":[{"event_id":"sha256:308205d55316b2e9e4a0977dcff1467daab6ce8e672fc6ffbe46bcc3b1364a19","target":"graph","created_at":"2026-07-05T05:28:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2212.13990/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Automated Exploit Generation (AEG) is a well-known difficult task, especially for heap vulnerabilities. Previous works first detected heap vulnerabilities and then searched for exploitable states by using symbolic execution and fuzzing techniques on binary programs. However, it is not always easy to discovery bugs using fuzzing or symbolic technologies and solvable for internal overflow of heap objects. In this paper, we present a solution DEPA to detect exploit primitives based on primitive-crucial-behavior model for heap vulnerabilities. The core of DEPA contains two novel techniques, 1) pri","authors_text":"Hang An, Hongliang Liang, Jie Liu, Jin Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-23T02:17:44Z","title":"Detecting Exploit Primitives Automatically for Heap Vulnerabilities on Binary Programs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2212.13990","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c5e3272d33009b5c3f8d0f64d3b14beb775e7df3ac33514b9f19cb4478e21bee","target":"record","created_at":"2026-07-05T05:28:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8fbb1db7750dfacb5ef3ee88999420e8efb08da14965ffad10e1a6edbbc6838b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-12-23T02:17:44Z","title_canon_sha256":"3c0ff5bfc763936039f0145964502a1928bd4840b35a658e19fb613dda3b95f1"},"schema_version":"1.0","source":{"id":"2212.13990","kind":"arxiv","version":1}},"canonical_sha256":"a7ded7512132da85e600f48cd2989505180ba398da388c96c3926f8782631334","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a7ded7512132da85e600f48cd2989505180ba398da388c96c3926f8782631334","first_computed_at":"2026-07-05T05:28:57.389052Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:28:57.389052Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"obRFiYJXPZBSbBCOFO2qa1qp7ZYxOgdL4SrUHT1mwZx8810Neg1nIWsIGBw8t/IxbDoiz8rpigClE7x9oo1xAA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:28:57.389455Z","signed_message":"canonical_sha256_bytes"},"source_id":"2212.13990","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c5e3272d33009b5c3f8d0f64d3b14beb775e7df3ac33514b9f19cb4478e21bee","sha256:308205d55316b2e9e4a0977dcff1467daab6ce8e672fc6ffbe46bcc3b1364a19"],"state_sha256":"6d23c1b7995c1cbd3e8084cfba77830c32117c9784dde81bd923f584386313ce"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"oAb1MnK7rylDGrhsiywN6UCL5VW6vgIbeIsug0RhWI3k+n04VDoE84RcyVdjOP44l9wq5C83r0uiNU/YbIxtDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-20T07:20:29.128913Z","bundle_sha256":"3d8bbf1bbc7644c8499ca16be815e15a25352cef12ac4913ddf13b0435bbbeec"}}