{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:WADBN5L4RPXGHAG4WFZ4T7OKTH","short_pith_number":"pith:WADBN5L4","canonical_record":{"source":{"id":"2505.19887","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-26T12:16:44Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"e5947f2a8234cd86fb124bf553d7d40c8b1abae0d494e5b0923b821c554424dd","abstract_canon_sha256":"89b454e45d83eb61a82ad525e2bfbae3c10e0406e01f95b0d764ab1d16b6ce53"},"schema_version":"1.0"},"canonical_sha256":"b00616f57c8bee6380dcb173c9fdca99f18efb9bb5ae8810967a7faa84333fd3","source":{"kind":"arxiv","id":"2505.19887","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19887","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19887v2","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19887","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_12","alias_value":"WADBN5L4RPXG","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_16","alias_value":"WADBN5L4RPXGHAG4","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_8","alias_value":"WADBN5L4","created_at":"2026-07-05T11:16:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:WADBN5L4RPXGHAG4WFZ4T7OKTH","target":"record","payload":{"canonical_record":{"source":{"id":"2505.19887","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-26T12:16:44Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"e5947f2a8234cd86fb124bf553d7d40c8b1abae0d494e5b0923b821c554424dd","abstract_canon_sha256":"89b454e45d83eb61a82ad525e2bfbae3c10e0406e01f95b0d764ab1d16b6ce53"},"schema_version":"1.0"},"canonical_sha256":"b00616f57c8bee6380dcb173c9fdca99f18efb9bb5ae8810967a7faa84333fd3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:16:35.389204Z","signature_b64":"rFos4T/KTGfrGPmw6p0vz94nxlAVRkjLAZkEYMYY82om9uORukEO7HCm+C5/HOkJkON361E4fe113d93okY7Dw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b00616f57c8bee6380dcb173c9fdca99f18efb9bb5ae8810967a7faa84333fd3","last_reissued_at":"2026-07-05T11:16:35.388688Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:16:35.388688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.19887","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CUsSn5mx7updkTzgl1uUZ0Dz/GUh5BnpUQSmk6H6r2NCmQhtqc4ldOeDb6SQScx61RRHK4b5SI6iUKcJpJM+Bw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T10:03:20.997948Z"},"content_sha256":"3ca706c0741c8a72b7403b0c143368325379b5b82b0b4a067e0a4397434ace1b","schema_version":"1.0","event_id":"sha256:3ca706c0741c8a72b7403b0c143368325379b5b82b0b4a067e0a4397434ace1b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:WADBN5L4RPXGHAG4WFZ4T7OKTH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Deconstructing Obfuscation: A four-dimensional framework for evaluating Large Language Models assembly code deobfuscation capabilities","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.SE","authors_text":"Anton Tkachenko, Benjamin Adolphi, Dmitrij Suskevic","submitted_at":"2025-05-26T12:16:44Z","abstract_excerpt":"Large language models (LLMs) have shown promise in software engineering, yet their effectiveness for binary analysis remains unexplored. We present the first comprehensive evaluation of commercial LLMs for assembly code deobfuscation. Testing seven state-of-the-art models against four obfuscation scenarios (bogus control flow, instruction substitution, control flow flattening, and their combination), we found striking performance variations--from autonomous deobfuscation to complete failure. We propose a theoretical framework based on four dimensions: Reasoning Depth, Pattern Recognition, Nois"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19887","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.19887/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:16:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JoOmnWlW/zXaTEHmInQCuBT9mAtHTegc8UYKFZRu+r9LmEXT6Q+rNLwcvEgxZItj8l2YqTyE0mArmy4PpJ19AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T10:03:20.998456Z"},"content_sha256":"18cae303a3b6a202aa18176f2c38e700ea9608c73df9d0c84fbc273abaf8675c","schema_version":"1.0","event_id":"sha256:18cae303a3b6a202aa18176f2c38e700ea9608c73df9d0c84fbc273abaf8675c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/bundle.json","state_url":"https://pith.science/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T10:03:21Z","links":{"resolver":"https://pith.science/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH","bundle":"https://pith.science/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/bundle.json","state":"https://pith.science/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WADBN5L4RPXGHAG4WFZ4T7OKTH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:WADBN5L4RPXGHAG4WFZ4T7OKTH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"89b454e45d83eb61a82ad525e2bfbae3c10e0406e01f95b0d764ab1d16b6ce53","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-26T12:16:44Z","title_canon_sha256":"e5947f2a8234cd86fb124bf553d7d40c8b1abae0d494e5b0923b821c554424dd"},"schema_version":"1.0","source":{"id":"2505.19887","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.19887","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.19887v2","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.19887","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_12","alias_value":"WADBN5L4RPXG","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_16","alias_value":"WADBN5L4RPXGHAG4","created_at":"2026-07-05T11:16:35Z"},{"alias_kind":"pith_short_8","alias_value":"WADBN5L4","created_at":"2026-07-05T11:16:35Z"}],"graph_snapshots":[{"event_id":"sha256:18cae303a3b6a202aa18176f2c38e700ea9608c73df9d0c84fbc273abaf8675c","target":"graph","created_at":"2026-07-05T11:16:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.19887/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have shown promise in software engineering, yet their effectiveness for binary analysis remains unexplored. We present the first comprehensive evaluation of commercial LLMs for assembly code deobfuscation. Testing seven state-of-the-art models against four obfuscation scenarios (bogus control flow, instruction substitution, control flow flattening, and their combination), we found striking performance variations--from autonomous deobfuscation to complete failure. We propose a theoretical framework based on four dimensions: Reasoning Depth, Pattern Recognition, Nois","authors_text":"Anton Tkachenko, Benjamin Adolphi, Dmitrij Suskevic","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-26T12:16:44Z","title":"Deconstructing Obfuscation: A four-dimensional framework for evaluating Large Language Models assembly code deobfuscation capabilities"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.19887","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3ca706c0741c8a72b7403b0c143368325379b5b82b0b4a067e0a4397434ace1b","target":"record","created_at":"2026-07-05T11:16:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"89b454e45d83eb61a82ad525e2bfbae3c10e0406e01f95b0d764ab1d16b6ce53","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2025-05-26T12:16:44Z","title_canon_sha256":"e5947f2a8234cd86fb124bf553d7d40c8b1abae0d494e5b0923b821c554424dd"},"schema_version":"1.0","source":{"id":"2505.19887","kind":"arxiv","version":2}},"canonical_sha256":"b00616f57c8bee6380dcb173c9fdca99f18efb9bb5ae8810967a7faa84333fd3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b00616f57c8bee6380dcb173c9fdca99f18efb9bb5ae8810967a7faa84333fd3","first_computed_at":"2026-07-05T11:16:35.388688Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:16:35.388688Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rFos4T/KTGfrGPmw6p0vz94nxlAVRkjLAZkEYMYY82om9uORukEO7HCm+C5/HOkJkON361E4fe113d93okY7Dw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:16:35.389204Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.19887","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3ca706c0741c8a72b7403b0c143368325379b5b82b0b4a067e0a4397434ace1b","sha256:18cae303a3b6a202aa18176f2c38e700ea9608c73df9d0c84fbc273abaf8675c"],"state_sha256":"235f94b7e95ee293ff9d5a8213c9b595652e3f61a2045587fbeec920d2fe3f6b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GsvWbVPlfLbKcqrvwFuRtpLIcrtesV+0M6/U1QS48zp4P7n1JNHkjwMB0SJFLEtrpLK0R2tThs3ss7JgU8FCBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T10:03:21.004161Z","bundle_sha256":"c40a156cb290ed02ea5cab38203de7bb67198d10aa44a57b735f28b3dae2a333"}}