{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:J5YFCXOVANRTDE7C2B3WYF73O6","short_pith_number":"pith:J5YFCXOV","canonical_record":{"source":{"id":"2305.13483","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-22T20:58:06Z","cross_cats_sorted":["cs.PL","cs.SE"],"title_canon_sha256":"c3a803468646c2a63aa066d9e432780859f2b3ca61243826c1eb0a492edf351d","abstract_canon_sha256":"dd4c93df0e7d0670a023054f6668e195fee6dee9931185833999a1e8014fc7f3"},"schema_version":"1.0"},"canonical_sha256":"4f70515dd503633193e2d0776c17fb77a7e0810bc8162afac8bcd8464996f249","source":{"kind":"arxiv","id":"2305.13483","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.13483","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"arxiv_version","alias_value":"2305.13483v4","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.13483","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_12","alias_value":"J5YFCXOVANRT","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_16","alias_value":"J5YFCXOVANRTDE7C","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_8","alias_value":"J5YFCXOV","created_at":"2026-07-05T08:38:32Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:J5YFCXOVANRTDE7C2B3WYF73O6","target":"record","payload":{"canonical_record":{"source":{"id":"2305.13483","kind":"arxiv","version":4},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-22T20:58:06Z","cross_cats_sorted":["cs.PL","cs.SE"],"title_canon_sha256":"c3a803468646c2a63aa066d9e432780859f2b3ca61243826c1eb0a492edf351d","abstract_canon_sha256":"dd4c93df0e7d0670a023054f6668e195fee6dee9931185833999a1e8014fc7f3"},"schema_version":"1.0"},"canonical_sha256":"4f70515dd503633193e2d0776c17fb77a7e0810bc8162afac8bcd8464996f249","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:38:32.994080Z","signature_b64":"/3FlbAHREdoyhDsT0KIR6uDTZq0mACVV1gHwCtSfgY1j/zq0tvibaDEcID/cLb47fHHS7xRdROUc6INl8UxzCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4f70515dd503633193e2d0776c17fb77a7e0810bc8162afac8bcd8464996f249","last_reissued_at":"2026-07-05T08:38:32.993622Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:38:32.993622Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.13483","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+YeHMa1o1ijvdXLc2Ovd5nU79VNXQ1f/cYwJonB9PqB+HOh1M+tR1TAAvYF/2HwOFEONWh9i5ZZz8BfQ4uQqBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:53:37.711455Z"},"content_sha256":"ff047265d7da3adbc78b2277dbef764eabe3cb42038c41eb87fb803e371b4adc","schema_version":"1.0","event_id":"sha256:ff047265d7da3adbc78b2277dbef764eabe3cb42038c41eb87fb803e371b4adc"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:J5YFCXOVANRTDE7C2B3WYF73O6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extracting Protocol Format as State Machine via Controlled Static Loop Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.PL","cs.SE"],"primary_cat":"cs.CR","authors_text":"Qingkai Shi, Xiangyu Zhang, Xiangzhe Xu","submitted_at":"2023-05-22T20:58:06Z","abstract_excerpt":"Reverse engineering of protocol message formats is critical for many security applications. Mainstream techniques use dynamic analysis and inherit its low-coverage problem -- the inferred message formats only reflect the features of their inputs. To achieve high coverage, we choose to use static analysis to infer message formats from the implementation of protocol parsers. In this work, we focus on a class of extremely challenging protocols whose formats are described via constraint-enhanced regular expressions and parsed using finite-state machines. Such state machines are often implemented a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.13483","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.13483/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:38:32Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mEtYVrogXqUZarpGE2+GeMSPr+YKqL745A3tQz5NDinalSTg62mwwALGa5S/HuX8/GV4eI/d/VQDOAiKQYqHCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T14:53:37.711841Z"},"content_sha256":"be668dd7ee808c355444757eaff1a1652ef86ad0d5af3784e1ee048237cf0727","schema_version":"1.0","event_id":"sha256:be668dd7ee808c355444757eaff1a1652ef86ad0d5af3784e1ee048237cf0727"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/J5YFCXOVANRTDE7C2B3WYF73O6/bundle.json","state_url":"https://pith.science/pith/J5YFCXOVANRTDE7C2B3WYF73O6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/J5YFCXOVANRTDE7C2B3WYF73O6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T14:53:37Z","links":{"resolver":"https://pith.science/pith/J5YFCXOVANRTDE7C2B3WYF73O6","bundle":"https://pith.science/pith/J5YFCXOVANRTDE7C2B3WYF73O6/bundle.json","state":"https://pith.science/pith/J5YFCXOVANRTDE7C2B3WYF73O6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/J5YFCXOVANRTDE7C2B3WYF73O6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:J5YFCXOVANRTDE7C2B3WYF73O6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dd4c93df0e7d0670a023054f6668e195fee6dee9931185833999a1e8014fc7f3","cross_cats_sorted":["cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-22T20:58:06Z","title_canon_sha256":"c3a803468646c2a63aa066d9e432780859f2b3ca61243826c1eb0a492edf351d"},"schema_version":"1.0","source":{"id":"2305.13483","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.13483","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"arxiv_version","alias_value":"2305.13483v4","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.13483","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_12","alias_value":"J5YFCXOVANRT","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_16","alias_value":"J5YFCXOVANRTDE7C","created_at":"2026-07-05T08:38:32Z"},{"alias_kind":"pith_short_8","alias_value":"J5YFCXOV","created_at":"2026-07-05T08:38:32Z"}],"graph_snapshots":[{"event_id":"sha256:be668dd7ee808c355444757eaff1a1652ef86ad0d5af3784e1ee048237cf0727","target":"graph","created_at":"2026-07-05T08:38:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.13483/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Reverse engineering of protocol message formats is critical for many security applications. Mainstream techniques use dynamic analysis and inherit its low-coverage problem -- the inferred message formats only reflect the features of their inputs. To achieve high coverage, we choose to use static analysis to infer message formats from the implementation of protocol parsers. In this work, we focus on a class of extremely challenging protocols whose formats are described via constraint-enhanced regular expressions and parsed using finite-state machines. Such state machines are often implemented a","authors_text":"Qingkai Shi, Xiangyu Zhang, Xiangzhe Xu","cross_cats":["cs.PL","cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-22T20:58:06Z","title":"Extracting Protocol Format as State Machine via Controlled Static Loop Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.13483","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ff047265d7da3adbc78b2277dbef764eabe3cb42038c41eb87fb803e371b4adc","target":"record","created_at":"2026-07-05T08:38:32Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dd4c93df0e7d0670a023054f6668e195fee6dee9931185833999a1e8014fc7f3","cross_cats_sorted":["cs.PL","cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-05-22T20:58:06Z","title_canon_sha256":"c3a803468646c2a63aa066d9e432780859f2b3ca61243826c1eb0a492edf351d"},"schema_version":"1.0","source":{"id":"2305.13483","kind":"arxiv","version":4}},"canonical_sha256":"4f70515dd503633193e2d0776c17fb77a7e0810bc8162afac8bcd8464996f249","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4f70515dd503633193e2d0776c17fb77a7e0810bc8162afac8bcd8464996f249","first_computed_at":"2026-07-05T08:38:32.993622Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:38:32.993622Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/3FlbAHREdoyhDsT0KIR6uDTZq0mACVV1gHwCtSfgY1j/zq0tvibaDEcID/cLb47fHHS7xRdROUc6INl8UxzCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:38:32.994080Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.13483","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ff047265d7da3adbc78b2277dbef764eabe3cb42038c41eb87fb803e371b4adc","sha256:be668dd7ee808c355444757eaff1a1652ef86ad0d5af3784e1ee048237cf0727"],"state_sha256":"8d5540ab25d759191a88a6da776ec97a25dffa8cfb1bb020d6aa0e631ef84689"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"krc26zW1qPGM/2xf6YKwV+/DnpVv27XSaqgoPdMnlX3MhvnsuYPBAZi1wQoGC3FpmVZq5rb19A4L5jc9AqNPDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T14:53:37.713758Z","bundle_sha256":"f2e873073fd698e500b07fd1a1bf7e3c89ebba78fb0e83c83553fde2c3cc1dd0"}}