{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:Y5LD2PZQNNGLQR2POZNXBX6DDL","short_pith_number":"pith:Y5LD2PZQ","canonical_record":{"source":{"id":"2203.05181","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-03-10T06:24:15Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"59d9ad830732bf008e6d667db7ea0fb0010b581f98dce4f9a25f20017a756f70","abstract_canon_sha256":"37a5cda93458ccadbbb42868842176fb802bca4553abaeeaed41156384a6f351"},"schema_version":"1.0"},"canonical_sha256":"c7563d3f306b4cb8474f765b70dfc31acba72bb286b155efb6a2f3922161dd34","source":{"kind":"arxiv","id":"2203.05181","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.05181","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"arxiv_version","alias_value":"2203.05181v2","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.05181","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_12","alias_value":"Y5LD2PZQNNGL","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_16","alias_value":"Y5LD2PZQNNGLQR2P","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_8","alias_value":"Y5LD2PZQ","created_at":"2026-07-05T04:08:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:Y5LD2PZQNNGLQR2POZNXBX6DDL","target":"record","payload":{"canonical_record":{"source":{"id":"2203.05181","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-03-10T06:24:15Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"59d9ad830732bf008e6d667db7ea0fb0010b581f98dce4f9a25f20017a756f70","abstract_canon_sha256":"37a5cda93458ccadbbb42868842176fb802bca4553abaeeaed41156384a6f351"},"schema_version":"1.0"},"canonical_sha256":"c7563d3f306b4cb8474f765b70dfc31acba72bb286b155efb6a2f3922161dd34","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:08:29.212225Z","signature_b64":"lOEFNH5Q2D9Pyjp3jPPOdX5I9vzcsx1fD+wVKkIlHAyxbUGMIPRxQQ4EYvwQw6FnqU+oFMOxVfMCuNtVNNLVCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c7563d3f306b4cb8474f765b70dfc31acba72bb286b155efb6a2f3922161dd34","last_reissued_at":"2026-07-05T04:08:29.211888Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:08:29.211888Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.05181","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EN2Mw0zFXaZwHHa4Nrj5p5xrU9AacrZPLykFvER8LqfGxVgkPadWqjcerCn8YpvZNJWEIjDMEHmWb9R9Bk29Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:49:43.006162Z"},"content_sha256":"6abca6f2a5fd8f96bd96456254c1d4cf8d75832d6379c4be14f2a5b57a880640","schema_version":"1.0","event_id":"sha256:6abca6f2a5fd8f96bd96456254c1d4cf8d75832d6379c4be14f2a5b57a880640"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:Y5LD2PZQNNGLQR2POZNXBX6DDL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"LineVD: Statement-level Vulnerability Detection using Graph Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Andrey Kan, David Hin, Huaming Chen, M. Ali Babar","submitted_at":"2022-03-10T06:24:15Z","abstract_excerpt":"Current machine-learning based software vulnerability detection methods are primarily conducted at the function-level. However, a key limitation of these methods is that they do not indicate the specific lines of code contributing to vulnerabilities. This limits the ability of developers to efficiently inspect and interpret the predictions from a learnt model, which is crucial for integrating machine-learning based tools into the software development workflow. Graph-based models have shown promising performance in function-level vulnerability detection, but their capability for statement-level"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.05181","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.05181/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:08:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YKeWWp1W79cBOzg5dzs508Hy8LZCB4YGz0Ps7VQ0bPjZLa+DmqvUUjDCMr7xlQN77W8UmLdcujs99zF3pMfzDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:49:43.006796Z"},"content_sha256":"1f3bcf57e376cd5cfe0672d4d7ee0c8a2c0683814582990bc153da99e6126b89","schema_version":"1.0","event_id":"sha256:1f3bcf57e376cd5cfe0672d4d7ee0c8a2c0683814582990bc153da99e6126b89"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/bundle.json","state_url":"https://pith.science/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:49:43Z","links":{"resolver":"https://pith.science/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL","bundle":"https://pith.science/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/bundle.json","state":"https://pith.science/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/Y5LD2PZQNNGLQR2POZNXBX6DDL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:Y5LD2PZQNNGLQR2POZNXBX6DDL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"37a5cda93458ccadbbb42868842176fb802bca4553abaeeaed41156384a6f351","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-03-10T06:24:15Z","title_canon_sha256":"59d9ad830732bf008e6d667db7ea0fb0010b581f98dce4f9a25f20017a756f70"},"schema_version":"1.0","source":{"id":"2203.05181","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.05181","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"arxiv_version","alias_value":"2203.05181v2","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.05181","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_12","alias_value":"Y5LD2PZQNNGL","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_16","alias_value":"Y5LD2PZQNNGLQR2P","created_at":"2026-07-05T04:08:29Z"},{"alias_kind":"pith_short_8","alias_value":"Y5LD2PZQ","created_at":"2026-07-05T04:08:29Z"}],"graph_snapshots":[{"event_id":"sha256:1f3bcf57e376cd5cfe0672d4d7ee0c8a2c0683814582990bc153da99e6126b89","target":"graph","created_at":"2026-07-05T04:08:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.05181/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Current machine-learning based software vulnerability detection methods are primarily conducted at the function-level. However, a key limitation of these methods is that they do not indicate the specific lines of code contributing to vulnerabilities. This limits the ability of developers to efficiently inspect and interpret the predictions from a learnt model, which is crucial for integrating machine-learning based tools into the software development workflow. Graph-based models have shown promising performance in function-level vulnerability detection, but their capability for statement-level","authors_text":"Andrey Kan, David Hin, Huaming Chen, M. Ali Babar","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-03-10T06:24:15Z","title":"LineVD: Statement-level Vulnerability Detection using Graph Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.05181","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6abca6f2a5fd8f96bd96456254c1d4cf8d75832d6379c4be14f2a5b57a880640","target":"record","created_at":"2026-07-05T04:08:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"37a5cda93458ccadbbb42868842176fb802bca4553abaeeaed41156384a6f351","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-03-10T06:24:15Z","title_canon_sha256":"59d9ad830732bf008e6d667db7ea0fb0010b581f98dce4f9a25f20017a756f70"},"schema_version":"1.0","source":{"id":"2203.05181","kind":"arxiv","version":2}},"canonical_sha256":"c7563d3f306b4cb8474f765b70dfc31acba72bb286b155efb6a2f3922161dd34","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"c7563d3f306b4cb8474f765b70dfc31acba72bb286b155efb6a2f3922161dd34","first_computed_at":"2026-07-05T04:08:29.211888Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:08:29.211888Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lOEFNH5Q2D9Pyjp3jPPOdX5I9vzcsx1fD+wVKkIlHAyxbUGMIPRxQQ4EYvwQw6FnqU+oFMOxVfMCuNtVNNLVCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:08:29.212225Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.05181","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6abca6f2a5fd8f96bd96456254c1d4cf8d75832d6379c4be14f2a5b57a880640","sha256:1f3bcf57e376cd5cfe0672d4d7ee0c8a2c0683814582990bc153da99e6126b89"],"state_sha256":"ecb56a25a3b29da48268cd6e7bdc7ef5960bad6bcabcef91539b29d1f74e7649"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/rXwtYc48Z6Z8fuwtQYYwuw2qswUByTiJqwCwGt1ta03x0deVNExbmrf1I33EDsIH+orJoM3lr/puEprpuZ+DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:49:43.010845Z","bundle_sha256":"2b3eacb85f250a15bb197f8f57dbde16466635dcac3e68b303a97d1a386f847d"}}