{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:UKKEZQWKWI7SGYBRWC2B2COITN","short_pith_number":"pith:UKKEZQWK","schema_version":"1.0","canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","source":{"kind":"arxiv","id":"2608.09181","version":1},"attestation_state":"computed","paper":{"title":"Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Cuiyun Gao, Jia Feng, Keke Lian, Qiaodan Hou, Shenyuan Guan, Xincheng Wen, Yanjun Chen","submitted_at":"2026-08-10T06:47:39Z","abstract_excerpt":"Static Application Security Testing (SAST) tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive (FP) alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still face two primary challenges. First, the large differences among SAST tools and vulnerability categories make it difficult for these methods to learn recurring patterns in historical false positives. Moreover, the knowledge used by these methods are largely static and cannot be updated as newly vali"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2608.09181","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2026-08-10T06:47:39Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"c46eba411d7af65a1153388ff107ed6f65f04640989bad3d09bd99b14c7f99d6","abstract_canon_sha256":"89a818748e6f329d222999e9065baacfcf5103aea9c2c8e6212df474e8a835ed"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-08-11T02:22:00.731575Z","signature_b64":"S2chj8kq6DupmIowgcol2LcOOdccTnacGwI9/4dejs9XT130xalaPxfiYATvofXuJ60UtebsQCOgKdPinWf3Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a2944cc2cab23f236031b0b41d09c89b79ff2daa381e4741ae080075ecb0ff2b","last_reissued_at":"2026-08-11T02:22:00.729821Z","signature_status":"signed_v1","first_computed_at":"2026-08-11T02:22:00.729821Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Memoir: Learning, Verifying, and Evolving False-Positive Memories for Static Application Security Testing Tools","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.SE","authors_text":"Cuiyun Gao, Jia Feng, Keke Lian, Qiaodan Hou, Shenyuan Guan, Xincheng Wen, Yanjun Chen","submitted_at":"2026-08-10T06:47:39Z","abstract_excerpt":"Static Application Security Testing (SAST) tools have become indispensable in modern secure software devel- opment. However, these tools often generate false-positive (FP) alerts, imposing substantial manual inspection costs and reducing the trust from developers. Existing FP reduction methods still face two primary challenges. First, the large differences among SAST tools and vulnerability categories make it difficult for these methods to learn recurring patterns in historical false positives. Moreover, the knowledge used by these methods are largely static and cannot be updated as newly vali"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2608.09181","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2608.09181/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2608.09181","created_at":"2026-08-11T02:22:00.730651+00:00"},{"alias_kind":"arxiv_version","alias_value":"2608.09181v1","created_at":"2026-08-11T02:22:00.730651+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2608.09181","created_at":"2026-08-11T02:22:00.730651+00:00"},{"alias_kind":"pith_short_12","alias_value":"UKKEZQWKWI7S","created_at":"2026-08-11T02:22:00.730651+00:00"},{"alias_kind":"pith_short_16","alias_value":"UKKEZQWKWI7SGYBR","created_at":"2026-08-11T02:22:00.730651+00:00"},{"alias_kind":"pith_short_8","alias_value":"UKKEZQWK","created_at":"2026-08-11T02:22:00.730651+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN","json":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN.json","graph_json":"https://pith.science/api/pith-number/UKKEZQWKWI7SGYBRWC2B2COITN/graph.json","events_json":"https://pith.science/api/pith-number/UKKEZQWKWI7SGYBRWC2B2COITN/events.json","paper":"https://pith.science/paper/UKKEZQWK"},"agent_actions":{"view_html":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN","download_json":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN.json","view_paper":"https://pith.science/paper/UKKEZQWK","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2608.09181&json=true","fetch_graph":"https://pith.science/api/pith-number/UKKEZQWKWI7SGYBRWC2B2COITN/graph.json","fetch_events":"https://pith.science/api/pith-number/UKKEZQWKWI7SGYBRWC2B2COITN/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/action/timestamp_anchor","attest_storage":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/action/storage_attestation","attest_author":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/action/author_attestation","sign_citation":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/action/citation_signature","submit_replication":"https://pith.science/pith/UKKEZQWKWI7SGYBRWC2B2COITN/action/replication_record"}},"created_at":"2026-08-11T02:22:00.730651+00:00","updated_at":"2026-08-11T02:22:00.730651+00:00"}