{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:MCZ756HAXFIZOI7DFVY7ZBMSH3","short_pith_number":"pith:MCZ756HA","canonical_record":{"source":{"id":"2607.16487","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T20:25:03Z","cross_cats_sorted":[],"title_canon_sha256":"36cb5f8b5a9248c5973431fe084b666bd3cebc8021b953005daf655d0eaaf73f","abstract_canon_sha256":"409c3f17d9b78e337fad6e55dae33cee81a70bbb44efb9cb6e228b1c90d39be6"},"schema_version":"1.0"},"canonical_sha256":"60b3fef8e0b9519723e32d71fc85923eecb366bf0878b41811ebc1936b31a7e4","source":{"kind":"arxiv","id":"2607.16487","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16487","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16487v1","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16487","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_12","alias_value":"MCZ756HAXFIZ","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_16","alias_value":"MCZ756HAXFIZOI7D","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_8","alias_value":"MCZ756HA","created_at":"2026-07-21T00:20:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:MCZ756HAXFIZOI7DFVY7ZBMSH3","target":"record","payload":{"canonical_record":{"source":{"id":"2607.16487","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T20:25:03Z","cross_cats_sorted":[],"title_canon_sha256":"36cb5f8b5a9248c5973431fe084b666bd3cebc8021b953005daf655d0eaaf73f","abstract_canon_sha256":"409c3f17d9b78e337fad6e55dae33cee81a70bbb44efb9cb6e228b1c90d39be6"},"schema_version":"1.0"},"canonical_sha256":"60b3fef8e0b9519723e32d71fc85923eecb366bf0878b41811ebc1936b31a7e4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-21T00:20:21.176493Z","signature_b64":"ifsF8FSe6t9xNtPoTreJUUNQQ8R6JhIkRbNcYG6RGJ3jXK1dJEaYEftNazX1WSF/19s7TzTCjFTXU/CTPrCtDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"60b3fef8e0b9519723e32d71fc85923eecb366bf0878b41811ebc1936b31a7e4","last_reissued_at":"2026-07-21T00:20:21.175521Z","signature_status":"signed_v1","first_computed_at":"2026-07-21T00:20:21.175521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.16487","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"h07SRo/osdfbHwYdxG5Eri4EG3rk1tD7nBzzW6q7XU/HyBA9OuLpIy8Os71CotAcHDv78+MUH1diXIuDGHP7DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:46:29.504041Z"},"content_sha256":"4554d4aabaaf9a38a8e5c354d169682a8da5fe891fd599111933d2f6c4feec4c","schema_version":"1.0","event_id":"sha256:4554d4aabaaf9a38a8e5c354d169682a8da5fe891fd599111933d2f6c4feec4c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:MCZ756HAXFIZOI7DFVY7ZBMSH3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fuzz'EMup: Leveraging EM Side-Channel Emanation to Guide Black-Box Embedded Firmware Fuzzing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Fatemeh Moradihaghighi, Mashrur Chowdhury, Yanan Guo, Zhenkai Zhang, Zihao Zhan, Ziming Zhao","submitted_at":"2026-07-17T20:25:03Z","abstract_excerpt":"As IoT and embedded devices proliferate across various domains, securing their firmware has become critical. Fuzzing offers a systematic approach to uncovering vulnerabilities in firmware, and coverage feedback can improve its effectiveness by guiding exploration. However, many devices make coverage information impossible to obtain by preventing firmware extraction, instrumentation, or accurate emulation; in such cases, testers are left with only inefficient black-box fuzzing. In this paper, we present an approach that leverages electromagnetic (EM) side-channel emanations to guide firmware fu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16487","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.16487/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-21T00:20:21Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7CLB0/aDh0nVgJ/vVwZqE/cLBho4qT8gqj33y1SFAqbvFrzCZEwdHyj+ArWySKxTtPqfsIoVY16lpLdSfFeWAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T03:46:29.504600Z"},"content_sha256":"b42bbbbae71cc1eefc397c958d7334d85c4a399acade7d57cedb5ec4aa8fd4b0","schema_version":"1.0","event_id":"sha256:b42bbbbae71cc1eefc397c958d7334d85c4a399acade7d57cedb5ec4aa8fd4b0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/bundle.json","state_url":"https://pith.science/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T03:46:29Z","links":{"resolver":"https://pith.science/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3","bundle":"https://pith.science/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/bundle.json","state":"https://pith.science/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/MCZ756HAXFIZOI7DFVY7ZBMSH3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:MCZ756HAXFIZOI7DFVY7ZBMSH3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"409c3f17d9b78e337fad6e55dae33cee81a70bbb44efb9cb6e228b1c90d39be6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T20:25:03Z","title_canon_sha256":"36cb5f8b5a9248c5973431fe084b666bd3cebc8021b953005daf655d0eaaf73f"},"schema_version":"1.0","source":{"id":"2607.16487","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.16487","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"arxiv_version","alias_value":"2607.16487v1","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.16487","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_12","alias_value":"MCZ756HAXFIZ","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_16","alias_value":"MCZ756HAXFIZOI7D","created_at":"2026-07-21T00:20:21Z"},{"alias_kind":"pith_short_8","alias_value":"MCZ756HA","created_at":"2026-07-21T00:20:21Z"}],"graph_snapshots":[{"event_id":"sha256:b42bbbbae71cc1eefc397c958d7334d85c4a399acade7d57cedb5ec4aa8fd4b0","target":"graph","created_at":"2026-07-21T00:20:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.16487/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As IoT and embedded devices proliferate across various domains, securing their firmware has become critical. Fuzzing offers a systematic approach to uncovering vulnerabilities in firmware, and coverage feedback can improve its effectiveness by guiding exploration. However, many devices make coverage information impossible to obtain by preventing firmware extraction, instrumentation, or accurate emulation; in such cases, testers are left with only inefficient black-box fuzzing. In this paper, we present an approach that leverages electromagnetic (EM) side-channel emanations to guide firmware fu","authors_text":"Fatemeh Moradihaghighi, Mashrur Chowdhury, Yanan Guo, Zhenkai Zhang, Zihao Zhan, Ziming Zhao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T20:25:03Z","title":"Fuzz'EMup: Leveraging EM Side-Channel Emanation to Guide Black-Box Embedded Firmware Fuzzing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.16487","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4554d4aabaaf9a38a8e5c354d169682a8da5fe891fd599111933d2f6c4feec4c","target":"record","created_at":"2026-07-21T00:20:21Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"409c3f17d9b78e337fad6e55dae33cee81a70bbb44efb9cb6e228b1c90d39be6","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-07-17T20:25:03Z","title_canon_sha256":"36cb5f8b5a9248c5973431fe084b666bd3cebc8021b953005daf655d0eaaf73f"},"schema_version":"1.0","source":{"id":"2607.16487","kind":"arxiv","version":1}},"canonical_sha256":"60b3fef8e0b9519723e32d71fc85923eecb366bf0878b41811ebc1936b31a7e4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"60b3fef8e0b9519723e32d71fc85923eecb366bf0878b41811ebc1936b31a7e4","first_computed_at":"2026-07-21T00:20:21.175521Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-21T00:20:21.175521Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ifsF8FSe6t9xNtPoTreJUUNQQ8R6JhIkRbNcYG6RGJ3jXK1dJEaYEftNazX1WSF/19s7TzTCjFTXU/CTPrCtDA==","signature_status":"signed_v1","signed_at":"2026-07-21T00:20:21.176493Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.16487","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4554d4aabaaf9a38a8e5c354d169682a8da5fe891fd599111933d2f6c4feec4c","sha256:b42bbbbae71cc1eefc397c958d7334d85c4a399acade7d57cedb5ec4aa8fd4b0"],"state_sha256":"af8b040c1c992630c4b0ace6cc60ccef987be3094ea4c316cf74281aace0ec79"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nxCBc+buBlZBVFcuZ4cBJF2pT2ZrxAKKKiFyxJJvmXrjKYArJ8V+4k7DNZjF2Jq42uq8k/4D45fWVZl7qU8GBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T03:46:29.509880Z","bundle_sha256":"b5e5f7d75d82145630d4fe38cc457d7b86777a507c723c323779ee13881b3a35"}}