{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:26U57TF244NFQOHNKZCPXUGU6N","short_pith_number":"pith:26U57TF2","canonical_record":{"source":{"id":"2501.14008","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-23T16:44:43Z","cross_cats_sorted":[],"title_canon_sha256":"113f9265a52621cb1359647785b97c515e81176eb865091193734f81070b40c5","abstract_canon_sha256":"a0b6b0a23f1f103b4978ab81080350ce34de07f35d3d51ed9f434e6f4c71db6b"},"schema_version":"1.0"},"canonical_sha256":"d7a9dfccbae71a5838ed5644fbd0d4f36cc34f84ec740f6122c787b576abf855","source":{"kind":"arxiv","id":"2501.14008","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.14008","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"arxiv_version","alias_value":"2501.14008v1","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.14008","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_12","alias_value":"26U57TF244NF","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_16","alias_value":"26U57TF244NFQOHN","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_8","alias_value":"26U57TF2","created_at":"2026-07-05T10:04:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:26U57TF244NFQOHNKZCPXUGU6N","target":"record","payload":{"canonical_record":{"source":{"id":"2501.14008","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-23T16:44:43Z","cross_cats_sorted":[],"title_canon_sha256":"113f9265a52621cb1359647785b97c515e81176eb865091193734f81070b40c5","abstract_canon_sha256":"a0b6b0a23f1f103b4978ab81080350ce34de07f35d3d51ed9f434e6f4c71db6b"},"schema_version":"1.0"},"canonical_sha256":"d7a9dfccbae71a5838ed5644fbd0d4f36cc34f84ec740f6122c787b576abf855","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:04:43.988308Z","signature_b64":"UOZAvvFyo4TI+HK9jR3YtHHnSQaGWktWKCLUaBBU5f57oAFXp3t4EoAGJaYxtGt/B5DYi/boT3ols4mR8KYFAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d7a9dfccbae71a5838ed5644fbd0d4f36cc34f84ec740f6122c787b576abf855","last_reissued_at":"2026-07-05T10:04:43.987890Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:04:43.987890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.14008","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:04:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f52yI4b46rc5IlJTUdQcYWwA6+vA+GcdAY6A4l2QZVeIJmNlOWKW6/0OSQ9s6dgPyG6I4BMEbM4DVphmc9suDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:13:15.520013Z"},"content_sha256":"fe960031bbac1e3740092b5313a8154133998ceb9040e378103c7306a623c88a","schema_version":"1.0","event_id":"sha256:fe960031bbac1e3740092b5313a8154133998ceb9040e378103c7306a623c88a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:26U57TF244NFQOHNKZCPXUGU6N","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"WAFBOOSTER: Automatic Boosting of WAF Security Against Mutated Malicious Payloads","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Cong Wu, Jing Chen, Ruiying Du, Simeng Zhu, Wenqi Feng, Yang Xiang","submitted_at":"2025-01-23T16:44:43Z","abstract_excerpt":"Web application firewall (WAF) examines malicious traffic to and from a web application via a set of security rules. It plays a significant role in securing Web applications against web attacks. However, as web attacks grow in sophistication, it is becoming increasingly difficult for WAFs to block the mutated malicious payloads designed to bypass their defenses. In response to this critical security issue, we have developed a novel learning-based framework called WAFBOOSTER, designed to unveil potential bypasses in WAF detections and suggest rules to fortify their security. Using a combination"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.14008","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.14008/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:04:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sLjAXy5n/z7w0GYFFNWciWQOM86lZ/xgN7zLAKQzw0P4s4jcpdefjTeVGj5Ht50h7TuoKh4k0eyrpUKQ7xHnCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T11:13:15.520649Z"},"content_sha256":"3d334ec987414b2a7884a39e1d0808b88d3a6d87dfcf9b6b747af6d391a991ba","schema_version":"1.0","event_id":"sha256:3d334ec987414b2a7884a39e1d0808b88d3a6d87dfcf9b6b747af6d391a991ba"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/26U57TF244NFQOHNKZCPXUGU6N/bundle.json","state_url":"https://pith.science/pith/26U57TF244NFQOHNKZCPXUGU6N/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/26U57TF244NFQOHNKZCPXUGU6N/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T11:13:15Z","links":{"resolver":"https://pith.science/pith/26U57TF244NFQOHNKZCPXUGU6N","bundle":"https://pith.science/pith/26U57TF244NFQOHNKZCPXUGU6N/bundle.json","state":"https://pith.science/pith/26U57TF244NFQOHNKZCPXUGU6N/state.json","well_known_bundle":"https://pith.science/.well-known/pith/26U57TF244NFQOHNKZCPXUGU6N/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:26U57TF244NFQOHNKZCPXUGU6N","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a0b6b0a23f1f103b4978ab81080350ce34de07f35d3d51ed9f434e6f4c71db6b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-23T16:44:43Z","title_canon_sha256":"113f9265a52621cb1359647785b97c515e81176eb865091193734f81070b40c5"},"schema_version":"1.0","source":{"id":"2501.14008","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.14008","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"arxiv_version","alias_value":"2501.14008v1","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.14008","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_12","alias_value":"26U57TF244NF","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_16","alias_value":"26U57TF244NFQOHN","created_at":"2026-07-05T10:04:43Z"},{"alias_kind":"pith_short_8","alias_value":"26U57TF2","created_at":"2026-07-05T10:04:43Z"}],"graph_snapshots":[{"event_id":"sha256:3d334ec987414b2a7884a39e1d0808b88d3a6d87dfcf9b6b747af6d391a991ba","target":"graph","created_at":"2026-07-05T10:04:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.14008/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Web application firewall (WAF) examines malicious traffic to and from a web application via a set of security rules. It plays a significant role in securing Web applications against web attacks. However, as web attacks grow in sophistication, it is becoming increasingly difficult for WAFs to block the mutated malicious payloads designed to bypass their defenses. In response to this critical security issue, we have developed a novel learning-based framework called WAFBOOSTER, designed to unveil potential bypasses in WAF detections and suggest rules to fortify their security. Using a combination","authors_text":"Cong Wu, Jing Chen, Ruiying Du, Simeng Zhu, Wenqi Feng, Yang Xiang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-23T16:44:43Z","title":"WAFBOOSTER: Automatic Boosting of WAF Security Against Mutated Malicious Payloads"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.14008","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fe960031bbac1e3740092b5313a8154133998ceb9040e378103c7306a623c88a","target":"record","created_at":"2026-07-05T10:04:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a0b6b0a23f1f103b4978ab81080350ce34de07f35d3d51ed9f434e6f4c71db6b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-01-23T16:44:43Z","title_canon_sha256":"113f9265a52621cb1359647785b97c515e81176eb865091193734f81070b40c5"},"schema_version":"1.0","source":{"id":"2501.14008","kind":"arxiv","version":1}},"canonical_sha256":"d7a9dfccbae71a5838ed5644fbd0d4f36cc34f84ec740f6122c787b576abf855","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d7a9dfccbae71a5838ed5644fbd0d4f36cc34f84ec740f6122c787b576abf855","first_computed_at":"2026-07-05T10:04:43.987890Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:04:43.987890Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UOZAvvFyo4TI+HK9jR3YtHHnSQaGWktWKCLUaBBU5f57oAFXp3t4EoAGJaYxtGt/B5DYi/boT3ols4mR8KYFAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:04:43.988308Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.14008","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fe960031bbac1e3740092b5313a8154133998ceb9040e378103c7306a623c88a","sha256:3d334ec987414b2a7884a39e1d0808b88d3a6d87dfcf9b6b747af6d391a991ba"],"state_sha256":"ea9fccb805100b34d2281ba3cbde7a5a9410f6f538b58a5a24717fc143b6a5fc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hpZw/+WtMXrJckOhwD+X/ZF9qQNJVxa7Te5AcsH5UHt9XMLOSOFT+08IxDt0oe17Zq5xZnR1L6lNaBpl0xosCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T11:13:15.530100Z","bundle_sha256":"9b00cdb797c3db02e0c11c37d8034e0ff0bf70b44ecb647932ac68704b22b63a"}}