{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UK5BPZJSQ3YX4MDNYUWXWCJ4N2","short_pith_number":"pith:UK5BPZJS","canonical_record":{"source":{"id":"2401.17459","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-30T21:42:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"351741cb809386777815e77483e9acb19b2be9190cafa032f5130e571a125574","abstract_canon_sha256":"0535864f5cdf0d5ea2d7fd5ed4cb66289cf076faa1f426ea17f611ec84b7d8cb"},"schema_version":"1.0"},"canonical_sha256":"a2ba17e53286f17e306dc52d7b093c6ea41b2c53e48e239dc6a4526c67f2c719","source":{"kind":"arxiv","id":"2401.17459","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.17459","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"arxiv_version","alias_value":"2401.17459v1","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.17459","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_12","alias_value":"UK5BPZJSQ3YX","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_16","alias_value":"UK5BPZJSQ3YX4MDN","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_8","alias_value":"UK5BPZJS","created_at":"2026-07-05T07:39:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UK5BPZJSQ3YX4MDNYUWXWCJ4N2","target":"record","payload":{"canonical_record":{"source":{"id":"2401.17459","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-30T21:42:59Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"351741cb809386777815e77483e9acb19b2be9190cafa032f5130e571a125574","abstract_canon_sha256":"0535864f5cdf0d5ea2d7fd5ed4cb66289cf076faa1f426ea17f611ec84b7d8cb"},"schema_version":"1.0"},"canonical_sha256":"a2ba17e53286f17e306dc52d7b093c6ea41b2c53e48e239dc6a4526c67f2c719","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:39:37.124603Z","signature_b64":"z9Q5L/TtcGjxb/7OzcihSobToaYdof3C+IWBbZRFQo5ByQH4LxS7hkpJKoYrFKYTdyes//hIqqyQZvoBqNxECA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a2ba17e53286f17e306dc52d7b093c6ea41b2c53e48e239dc6a4526c67f2c719","last_reissued_at":"2026-07-05T07:39:37.124121Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:39:37.124121Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.17459","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:39:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uSms9hubvKgjf+v2hrM6gxZuYcmHNoOY/EvnZQ1biP0tpYtWTOQ0D7IdlBI0Q0ROjDKRakNc+mwAq9MKApTWAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:45:02.668187Z"},"content_sha256":"aa7adc0a773191b35a93ba8786588554a8cd266085c0af3d51d278317a33b762","schema_version":"1.0","event_id":"sha256:aa7adc0a773191b35a93ba8786588554a8cd266085c0af3d51d278317a33b762"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UK5BPZJSQ3YX4MDNYUWXWCJ4N2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Preliminary Study on Using Large Language Models in Software Pentesting","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Armin Ziaie Tabari, Dmitry Goldgof, Francis Hahn, Jay Ligatti, Kumar Shashwat, Lawrence Hall, S. Raj Rajgopalan, Xinming Ou","submitted_at":"2024-01-30T21:42:59Z","abstract_excerpt":"Large language models (LLM) are perceived to offer promising potentials for automating security tasks, such as those found in security operation centers (SOCs). As a first step towards evaluating this perceived potential, we investigate the use of LLMs in software pentesting, where the main task is to automatically identify software security vulnerabilities in source code. We hypothesize that an LLM-based AI agent can be improved over time for a specific security task as human operators interact with it. Such improvement can be made, as a first step, by engineering prompts fed to the LLM based"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.17459","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.17459/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:39:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aoxqw4JyB6pNWjyuqp51AtJd1bUDwvKsiX9HBqUG11d5PBccxyWy664zOOWmnXbQYSkBLrIHETYphAc7nxC8DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T19:45:02.668680Z"},"content_sha256":"74a340c235830224432e86f154fbc879cdcd7f1377d9c12862a7741b46508204","schema_version":"1.0","event_id":"sha256:74a340c235830224432e86f154fbc879cdcd7f1377d9c12862a7741b46508204"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/bundle.json","state_url":"https://pith.science/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T19:45:02Z","links":{"resolver":"https://pith.science/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2","bundle":"https://pith.science/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/bundle.json","state":"https://pith.science/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UK5BPZJSQ3YX4MDNYUWXWCJ4N2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UK5BPZJSQ3YX4MDNYUWXWCJ4N2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0535864f5cdf0d5ea2d7fd5ed4cb66289cf076faa1f426ea17f611ec84b7d8cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-30T21:42:59Z","title_canon_sha256":"351741cb809386777815e77483e9acb19b2be9190cafa032f5130e571a125574"},"schema_version":"1.0","source":{"id":"2401.17459","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.17459","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"arxiv_version","alias_value":"2401.17459v1","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.17459","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_12","alias_value":"UK5BPZJSQ3YX","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_16","alias_value":"UK5BPZJSQ3YX4MDN","created_at":"2026-07-05T07:39:37Z"},{"alias_kind":"pith_short_8","alias_value":"UK5BPZJS","created_at":"2026-07-05T07:39:37Z"}],"graph_snapshots":[{"event_id":"sha256:74a340c235830224432e86f154fbc879cdcd7f1377d9c12862a7741b46508204","target":"graph","created_at":"2026-07-05T07:39:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.17459/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLM) are perceived to offer promising potentials for automating security tasks, such as those found in security operation centers (SOCs). As a first step towards evaluating this perceived potential, we investigate the use of LLMs in software pentesting, where the main task is to automatically identify software security vulnerabilities in source code. We hypothesize that an LLM-based AI agent can be improved over time for a specific security task as human operators interact with it. Such improvement can be made, as a first step, by engineering prompts fed to the LLM based","authors_text":"Armin Ziaie Tabari, Dmitry Goldgof, Francis Hahn, Jay Ligatti, Kumar Shashwat, Lawrence Hall, S. Raj Rajgopalan, Xinming Ou","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-30T21:42:59Z","title":"A Preliminary Study on Using Large Language Models in Software Pentesting"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.17459","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aa7adc0a773191b35a93ba8786588554a8cd266085c0af3d51d278317a33b762","target":"record","created_at":"2026-07-05T07:39:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0535864f5cdf0d5ea2d7fd5ed4cb66289cf076faa1f426ea17f611ec84b7d8cb","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-01-30T21:42:59Z","title_canon_sha256":"351741cb809386777815e77483e9acb19b2be9190cafa032f5130e571a125574"},"schema_version":"1.0","source":{"id":"2401.17459","kind":"arxiv","version":1}},"canonical_sha256":"a2ba17e53286f17e306dc52d7b093c6ea41b2c53e48e239dc6a4526c67f2c719","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a2ba17e53286f17e306dc52d7b093c6ea41b2c53e48e239dc6a4526c67f2c719","first_computed_at":"2026-07-05T07:39:37.124121Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:39:37.124121Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"z9Q5L/TtcGjxb/7OzcihSobToaYdof3C+IWBbZRFQo5ByQH4LxS7hkpJKoYrFKYTdyes//hIqqyQZvoBqNxECA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:39:37.124603Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.17459","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aa7adc0a773191b35a93ba8786588554a8cd266085c0af3d51d278317a33b762","sha256:74a340c235830224432e86f154fbc879cdcd7f1377d9c12862a7741b46508204"],"state_sha256":"9a485ad6e9abdbbf41669afe9b16c222723e913552259147464418f60f200d37"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"86Nwe29Bdk4hrpjO433KMB29HqHLRQKaps2Rb0/cTbPi8hbGZvW7d82XPAteyP4kZYZ2E55HCpQW7ovWBI+gBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T19:45:02.673243Z","bundle_sha256":"e8fa28fd90be4874a72754d696f70bd200983b760c5b5de64639ff80514df7ba"}}