{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2013:MZHNK3WIXBNL7TUVHWMMLFYDXM","short_pith_number":"pith:MZHNK3WI","schema_version":"1.0","canonical_sha256":"664ed56ec8b85abfce953d98c59703bb0e01ff351b3eb637b88fb3b5597cf10c","source":{"kind":"arxiv","id":"1301.0849","version":1},"attestation_state":"computed","paper":{"title":"Static Analysis for Regular Expression Denial-of-Service Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.PL","authors_text":"Asiri Rathnayake, Hayo Thielecke, James Kirrage","submitted_at":"2013-01-04T23:54:49Z","abstract_excerpt":"Regular expressions are a concise yet expressive language for expressing patterns. For instance, in networked software, they are used for input validation and intrusion detection. Yet some widely deployed regular expression matchers based on backtracking are themselves vulnerable to denial-of-service attacks, since their runtime can be exponential for certain input strings. This paper presents a static analysis for detecting such vulnerable regular expressions. The running time of the analysis compares favourably with tools based on fuzzing, that is, randomly generating inputs and measuring ho"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1301.0849","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.PL","submitted_at":"2013-01-04T23:54:49Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"65349fba5f6a8db7f0f7d9f9d2337843088d82b881146a7068a0fbf1ff097f71","abstract_canon_sha256":"6406c3d7141eb90c9a96d174bee2cb93c17c10ba3a0d7dc24acc2d9f03f5d31c"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:37:07.555051Z","signature_b64":"VrotS3MUQ9g68SJWRJOkOB25nRrdNDPo7jF5PLmaN3PbHFetIk02rKy5Cxb9p8fZ4ZNS4NLGq0nbQZ8RrCqwAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"664ed56ec8b85abfce953d98c59703bb0e01ff351b3eb637b88fb3b5597cf10c","last_reissued_at":"2026-05-18T03:37:07.554251Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:37:07.554251Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Static Analysis for Regular Expression Denial-of-Service Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.PL","authors_text":"Asiri Rathnayake, Hayo Thielecke, James Kirrage","submitted_at":"2013-01-04T23:54:49Z","abstract_excerpt":"Regular expressions are a concise yet expressive language for expressing patterns. For instance, in networked software, they are used for input validation and intrusion detection. Yet some widely deployed regular expression matchers based on backtracking are themselves vulnerable to denial-of-service attacks, since their runtime can be exponential for certain input strings. This paper presents a static analysis for detecting such vulnerable regular expressions. The running time of the analysis compares favourably with tools based on fuzzing, that is, randomly generating inputs and measuring ho"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1301.0849","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1301.0849","created_at":"2026-05-18T03:37:07.554398+00:00"},{"alias_kind":"arxiv_version","alias_value":"1301.0849v1","created_at":"2026-05-18T03:37:07.554398+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1301.0849","created_at":"2026-05-18T03:37:07.554398+00:00"},{"alias_kind":"pith_short_12","alias_value":"MZHNK3WIXBNL","created_at":"2026-05-18T12:27:52.871228+00:00"},{"alias_kind":"pith_short_16","alias_value":"MZHNK3WIXBNL7TUV","created_at":"2026-05-18T12:27:52.871228+00:00"},{"alias_kind":"pith_short_8","alias_value":"MZHNK3WI","created_at":"2026-05-18T12:27:52.871228+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM","json":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM.json","graph_json":"https://pith.science/api/pith-number/MZHNK3WIXBNL7TUVHWMMLFYDXM/graph.json","events_json":"https://pith.science/api/pith-number/MZHNK3WIXBNL7TUVHWMMLFYDXM/events.json","paper":"https://pith.science/paper/MZHNK3WI"},"agent_actions":{"view_html":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM","download_json":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM.json","view_paper":"https://pith.science/paper/MZHNK3WI","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1301.0849&json=true","fetch_graph":"https://pith.science/api/pith-number/MZHNK3WIXBNL7TUVHWMMLFYDXM/graph.json","fetch_events":"https://pith.science/api/pith-number/MZHNK3WIXBNL7TUVHWMMLFYDXM/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM/action/timestamp_anchor","attest_storage":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM/action/storage_attestation","attest_author":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM/action/author_attestation","sign_citation":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM/action/citation_signature","submit_replication":"https://pith.science/pith/MZHNK3WIXBNL7TUVHWMMLFYDXM/action/replication_record"}},"created_at":"2026-05-18T03:37:07.554398+00:00","updated_at":"2026-05-18T03:37:07.554398+00:00"}