{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:WB7URRWKINXJKGSJKCAZICE7BB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b"},"schema_version":"1.0","source":{"id":"2409.09606","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"arxiv_version","alias_value":"2409.09606v1","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.09606","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_12","alias_value":"WB7URRWKINXJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_16","alias_value":"WB7URRWKINXJKGSJ","created_at":"2026-07-05T09:07:11Z"},{"alias_kind":"pith_short_8","alias_value":"WB7URRWK","created_at":"2026-07-05T09:07:11Z"}],"graph_snapshots":[{"event_id":"sha256:582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734","target":"graph","created_at":"2026-07-05T09:07:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.09606/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The endless stream of vulnerabilities urgently calls for principled mitigation to confine the effect of exploitation. However, the monolithic architecture of commodity OS kernels, like the Linux kernel, allows an attacker to compromise the entire system by exploiting a vulnerability in any kernel component. Kernel compartmentalization is a promising approach that follows the least-privilege principle. However, existing mechanisms struggle with the trade-off on security, scalability, and performance, given the challenges stemming from mutual untrustworthiness among numerous and complex componen","authors_text":"Kangjie Lu, Qingkai Zeng, Weiheng Bai, Yinggang Guo, Zicheng Wang","cross_cats":["cs.OS"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title":"BULKHEAD: Secure, Scalable, and Efficient Kernel Compartmentalization with PKS"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.09606","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d","target":"record","created_at":"2026-07-05T09:07:11Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1620ac0a1ec9fa225ba4c0b6db6574231161673ed981c58ca2e0d028235118e8","cross_cats_sorted":["cs.OS"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-15T04:11:26Z","title_canon_sha256":"9dc460f556b92348b384b32913f655458b122bd46d0f1bb4d7ef641f14711e0b"},"schema_version":"1.0","source":{"id":"2409.09606","kind":"arxiv","version":1}},"canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b07f48c6ca436e951a49508194089f084437acb9b4dc3d08f5c333ac38a09ecf","first_computed_at":"2026-07-05T09:07:11.963355Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:07:11.963355Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"X3qh97X0l2bohcBfzMeI2Kn3bJzQ4LBhGSHoj5XU9Xi2RLEmSUIZ1Rd+Wsuidiah50ICEID0qPpyPEaT0kddCg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:07:11.963745Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.09606","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:799423572c3e2ec41caa116fa9f4aae83e4e8bb888f671bc25369623e4f6de5d","sha256:582fe547f62fae400d2c9b01576cf63ae63c7f2cb3df5edd204874e485cf4734"],"state_sha256":"22a9d2c47ec31f29876a9283173341af3430996ccb530d5de99dae99cffa8bfb"}