{"as_of":"2026-08-05T20:41:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:edcb9feba5c8d4685e4cdb0c65a5831c9448e579b0bd0c1e38706e2d3ccd9ca2","coverage":[{"denominator":15,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":15,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-01T20:07:17.070147Z","state":"measured"},{"denominator":15,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":15,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-05T06:32:48.257954+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2607.16754/citation-record","integrity":"/paper/2607.16754/integrity","json":"/paper/2607.16754/citation-record.json","paper":"/paper/2607.16754"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.095882Z","title":"API1:2023 broken object level authorization[EB/OL]","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.095882Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:3fefd283dd0efd2d4b97de0646999270eca935ac7d1cf01e55796f06b8082384","observation_id":"050d8810-bf3a-44b7-b8bb-222d1741537f","resolution":{"observed_at":"2026-08-01T20:07:16.095882Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.179858Z","title":"Testing for insecure direct object references (WSTG-ATHZ-04) [EB/OL]","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.179858Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:7e3dc4343ff474391fe1fb9a83fd5e07ec47cddf01754ddf61878c03bba9dadd","observation_id":"f5315136-6c4a-4c6a-b9f7-7188688c690e","resolution":{"observed_at":"2026-08-01T20:07:16.179858Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.248480Z","title":"A01:2025 broken access control[EB/OL]","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.248480Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:81ab6c12db2d5bcc6521da36cc91c05fe790e851a62194c39b32d1041f781b49","observation_id":"d2523687-f9a6-4eb9-9212-daf7dfc414fc","resolution":{"observed_at":"2026-08-01T20:07:16.248480Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1109/sp.2010.27","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"State of the art: automated black-box web application vulnerability testing[C/OL]//2010 IEEE Symposium on Security and Privacy","venue":null,"work_id":"becdf118-a49c-454c-838f-0c5ea4332adc","year":2010},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.336564Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:043ed11d6268c0cc26a78faa9a2f1b3092219837cd6e38b606da7fbcd165f515","observation_id":"bdffbe42-28cd-48c2-9764-366cfa9238e8","resolution":{"observed_at":"2026-08-01T20:08:44.018220Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-642-14215-4_7","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Why Johnny can’t pentest: an analysis of black-box web vulnerability scanners[C/OL]//Lecture Notes in Computer Science: Vol","venue":"Lecture notes in computer science","work_id":"0342693c-f939-4131-8ca0-ff842bafe7cd","year":2010},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.407440Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:1103825df37661f98ea95957d004debfb5ece82d0967940666d2124d38f10157","observation_id":"8827a702-d02f-434d-9dc3-75db79347bc8","resolution":{"observed_at":"2026-08-01T20:08:43.755686Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.489818Z","title":"RESTler: stateful REST API fuzzing[C/OL]//2019 IEEE/ACM 41st International Conference on Software Engineer- ing (ICSE)","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.489818Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:6cc89c7e7a14432732e0b0d4da3e518a8e1145d4ce99a383e4d31b853e5056bc","observation_id":"3ce65d7f-9992-4875-897b-b08144c50d61","resolution":{"observed_at":"2026-08-01T20:07:16.489818Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.566913Z","title":"Role-based access control models [J/OL]","venue":null,"work_id":null,"year":1996},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.566913Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:2c29efb0588230838e238e2f08223cc54bee1d7e6d49d4b48faa1b375ca90f3f","observation_id":"3a2f11c7-799b-4d3a-bd96-d182857e3a42","resolution":{"observed_at":"2026-08-01T20:07:16.566913Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.645400Z","title":"Guide to attribute based access control (ABAC) definition and considerations: 800-162[R/OL]","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.645400Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:7dc319174df365c18ccc33de0b4ac123a10114716b45df829efa1fa152ae21a1","observation_id":"da6d46b7-72a2-4c6a-980f-c672e7024ffa","resolution":{"observed_at":"2026-08-01T20:07:16.645400Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.724885Z","title":"Static detection of access control vulnerabilities in web applications [C/OL]//20th USENIX Security Symposium (USENIX Security 11)","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.724885Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:55a74caece3f1441da9687ec3fd147a09fd4a472e70a19e3bdf1082bba35455f","observation_id":"af40fe01-7361-4f3a-a60c-00f014119222","resolution":{"observed_at":"2026-08-01T20:07:16.724885Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.779221Z","title":null,"venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.779221Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:fb0b9db46e6aefc40cdd196805db8a1625973856d84e9da9ba3c2d6d2a65a225","observation_id":"f999fc50-3543-4bd1-8128-9a4716848a87","resolution":{"observed_at":"2026-08-01T20:07:16.779221Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":"10.1007/978-3-540-74320-0_4","metadata_source":"openalex","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-05T02:28:24.338817Z","title":"Swaddler: an approach for the anomaly-based detection of state violations in web applications[C/OL]//Lecture Notes in Computer Science: Vol","venue":"Lecture notes in computer science","work_id":"515a8ac3-e8f8-4fc7-ad62-6214de4df833","year":2007},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.836512Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:a36196c08cce276d966a09f76e8b52c3c1ec1273edd4f8ee8ef77fc62698f19b","observation_id":"d753876e-cc83-4c26-8917-4c674abdb521","resolution":{"observed_at":"2026-08-01T20:08:43.506466Z","resolver_source":"doi","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-05T06:32:48.257954+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.882556Z","title":"Toward automated detection of logic vulnerabilities in web applications[C/OL]//Proceedings of the 19th USENIX Security Symposium","venue":null,"work_id":null,"year":2010},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.882556Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:dd2755c4bbe0330b0618ef0aa6aaf5767f704f13dbc459c25c4308fb405f50f5","observation_id":"e687169b-63be-4cd9-b71c-80d66554ae59","resolution":{"observed_at":"2026-08-01T20:07:16.882556Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.935445Z","title":"HTTP semantics: RFC 9110[S/OL]","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.935445Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:f92f10774197879f81bee8028c983584d223ae7ca8af88234b96ccb1d0ff19e7","observation_id":"52689f78-a7fb-41fe-8973-e78ca19447ba","resolution":{"observed_at":"2026-08-01T20:07:16.935445Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:16.994050Z","title":"JSON web token (JWT): RFC 7519[S/OL]","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:16.994050Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:bac89ca0ea2a024f778d159244ae79dfa1cdf6d99833c2faeef0f9f977c305fa","observation_id":"45f8aa5e-9399-4ab9-9468-1f695ead9c94","resolution":{"observed_at":"2026-08-01T20:07:16.994050Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-01T20:07:17.070147Z","title":"Zero trust architecture: 800-207[R/OL]","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-01T20:07:17.070147Z"},"links":{"citing_paper":"/paper/2607.16754"},"observation_digest":"sha256:a15e7ce1dd517c2484f2b7cf5992564dac695fdd243b110f9fafaec646dd82bf","observation_id":"ed58a90b-431c-4c6b-8d19-36f414487dbb","resolution":{"observed_at":"2026-08-01T20:07:17.070147Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2607.16754","last_updated":"2026-07-18T10:34:13Z","latest_version":1,"primary_category":"cs.SE","snapshot_observed_at":"2026-08-01T20:07:15.417839Z","submitted_at":"2026-07-18T10:34:13Z","title":"A Non-Intrusive Traffic Analysis Framework for Authorization Risk Detection and Coordinated Response in Web Applications"},"reference_resolution":{"displayed":15,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":12,"verified_exact":3,"verified_fuzzy":0},"total_outbound_references":15},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-05T06:32:48.257954+00:00","source":"crossref"},{"observed_at":"2026-08-05T06:32:44.755628+00:00","source":"retraction_watch"}],"thesis":"As of 5 August 2026, this Paper Citation Record lists 15 of 15 outbound references and 0 inbound Pith citation observations for arXiv:2607.16754."}