{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2020:HUNKJIQIDL6NCKMQ3NEW2NHW5D","short_pith_number":"pith:HUNKJIQI","schema_version":"1.0","canonical_sha256":"3d1aa4a2081afcd12990db496d34f6e8e136d5664941118cad2bacb8c5169b97","source":{"kind":"arxiv","id":"2001.04107","version":2},"attestation_state":"computed","paper":{"title":"Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"HyungSeok Han, Sang Kil Cha, Sooel Son, Suyoung Lee","submitted_at":"2020-01-13T08:45:56Z","abstract_excerpt":"JavaScript (JS) engine vulnerabilities pose significant security threats affecting billions of web browsers. While fuzzing is a prevalent technique for finding such vulnerabilities, there have been few studies that leverage the recent advances in neural network language models (NNLMs). In this paper, we present Montage, the first NNLM-guided fuzzer for finding JS engine vulnerabilities. The key aspect of our technique is to transform a JS abstract syntax tree (AST) into a sequence of AST subtrees that can directly train prevailing NNLMs. We demonstrate that Montage is capable of generating val"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2001.04107","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-01-13T08:45:56Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"06c9fd648a1be80907474ce4fa9e460d5e2ec0e825de93e706f265477c4d699d","abstract_canon_sha256":"47cc13bef1edcd539dde0c5318ab5ae4a1f91002bd071d499b57f4fde3cb8614"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:33:26.464026Z","signature_b64":"5mCP/mvrGzJV8uY9ad7Iw52F/JOVQUWy1LbfbitZ7yknTg/AdbE6WvkJvWAANOd9M353X9Ksc4NDJsmL59hHBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3d1aa4a2081afcd12990db496d34f6e8e136d5664941118cad2bacb8c5169b97","last_reissued_at":"2026-07-05T00:33:26.463582Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:33:26.463582Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Montage: A Neural Network Language Model-Guided JavaScript Engine Fuzzer","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"HyungSeok Han, Sang Kil Cha, Sooel Son, Suyoung Lee","submitted_at":"2020-01-13T08:45:56Z","abstract_excerpt":"JavaScript (JS) engine vulnerabilities pose significant security threats affecting billions of web browsers. While fuzzing is a prevalent technique for finding such vulnerabilities, there have been few studies that leverage the recent advances in neural network language models (NNLMs). In this paper, we present Montage, the first NNLM-guided fuzzer for finding JS engine vulnerabilities. The key aspect of our technique is to transform a JS abstract syntax tree (AST) into a sequence of AST subtrees that can directly train prevailing NNLMs. We demonstrate that Montage is capable of generating val"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2001.04107","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2001.04107/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2001.04107","created_at":"2026-07-05T00:33:26.463654+00:00"},{"alias_kind":"arxiv_version","alias_value":"2001.04107v2","created_at":"2026-07-05T00:33:26.463654+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2001.04107","created_at":"2026-07-05T00:33:26.463654+00:00"},{"alias_kind":"pith_short_12","alias_value":"HUNKJIQIDL6N","created_at":"2026-07-05T00:33:26.463654+00:00"},{"alias_kind":"pith_short_16","alias_value":"HUNKJIQIDL6NCKMQ","created_at":"2026-07-05T00:33:26.463654+00:00"},{"alias_kind":"pith_short_8","alias_value":"HUNKJIQI","created_at":"2026-07-05T00:33:26.463654+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D","json":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D.json","graph_json":"https://pith.science/api/pith-number/HUNKJIQIDL6NCKMQ3NEW2NHW5D/graph.json","events_json":"https://pith.science/api/pith-number/HUNKJIQIDL6NCKMQ3NEW2NHW5D/events.json","paper":"https://pith.science/paper/HUNKJIQI"},"agent_actions":{"view_html":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D","download_json":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D.json","view_paper":"https://pith.science/paper/HUNKJIQI","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2001.04107&json=true","fetch_graph":"https://pith.science/api/pith-number/HUNKJIQIDL6NCKMQ3NEW2NHW5D/graph.json","fetch_events":"https://pith.science/api/pith-number/HUNKJIQIDL6NCKMQ3NEW2NHW5D/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D/action/timestamp_anchor","attest_storage":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D/action/storage_attestation","attest_author":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D/action/author_attestation","sign_citation":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D/action/citation_signature","submit_replication":"https://pith.science/pith/HUNKJIQIDL6NCKMQ3NEW2NHW5D/action/replication_record"}},"created_at":"2026-07-05T00:33:26.463654+00:00","updated_at":"2026-07-05T00:33:26.463654+00:00"}