{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:OCHMC3ENPADPACS45HXCPPBFDG","short_pith_number":"pith:OCHMC3EN","canonical_record":{"source":{"id":"2203.02906","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-03-06T08:48:00Z","cross_cats_sorted":[],"title_canon_sha256":"9302ef5212df03b891a1650ff99cfa6af8ef17ecfc0a0f59aa91aa63156704d3","abstract_canon_sha256":"c39e4df0978785511a744938ae3df1cae54b792e9a93570103d084630dc17c57"},"schema_version":"1.0"},"canonical_sha256":"708ec16c8d7806f00a5ce9ee27bc2519a0be0ceb98cde1c3d2eda41db28fb35c","source":{"kind":"arxiv","id":"2203.02906","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.02906","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"arxiv_version","alias_value":"2203.02906v1","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.02906","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_12","alias_value":"OCHMC3ENPADP","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_16","alias_value":"OCHMC3ENPADPACS4","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_8","alias_value":"OCHMC3EN","created_at":"2026-07-05T04:02:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:OCHMC3ENPADPACS45HXCPPBFDG","target":"record","payload":{"canonical_record":{"source":{"id":"2203.02906","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-03-06T08:48:00Z","cross_cats_sorted":[],"title_canon_sha256":"9302ef5212df03b891a1650ff99cfa6af8ef17ecfc0a0f59aa91aa63156704d3","abstract_canon_sha256":"c39e4df0978785511a744938ae3df1cae54b792e9a93570103d084630dc17c57"},"schema_version":"1.0"},"canonical_sha256":"708ec16c8d7806f00a5ce9ee27bc2519a0be0ceb98cde1c3d2eda41db28fb35c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:02:28.944742Z","signature_b64":"nd6XWwhjuTZPn0frNLmbDg5KnUbsdkmbaVSEGkJQSUxRypxWPJtT1/Fk8Y5N52AEeeAs9FMK/A9stgCz1O5jCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"708ec16c8d7806f00a5ce9ee27bc2519a0be0ceb98cde1c3d2eda41db28fb35c","last_reissued_at":"2026-07-05T04:02:28.944261Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:02:28.944261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2203.02906","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:02:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6pI4h4MdaiWPWXqMgKk9UIRoHL/ujm7XxYDeKkUCvka+xT8q3T4kgJvie1ZYDZUVTFspRGY3O76LjRFrDQ4ICg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:17:54.965660Z"},"content_sha256":"94b634f63f5bd905efc65715748524de293e4ee02251641d9bde6394832b1461","schema_version":"1.0","event_id":"sha256:94b634f63f5bd905efc65715748524de293e4ee02251641d9bde6394832b1461"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:OCHMC3ENPADPACS45HXCPPBFDG","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"foREST: A Tree-based Approach for Fuzzing RESTful APIs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Guangsheng Wei, Hui Xu, Jiadong Lin, Jiaxian Lin, Sen Zhang, Tianyu Li, Yang Chen","submitted_at":"2022-03-06T08:48:00Z","abstract_excerpt":"Representational state transfer (REST) is a widely employed architecture by web applications and cloud. Users can invoke such services according to the specification of their application interfaces, namely RESTful APIs. Existing approaches for fuzzing RESTful APIs are generally based on classic API-dependency graphs. However, such dependencies are inefficient for REST services due to the explosion of dependencies among APIs. In this paper, we propose a novel tree-based approach that can better capture the essential dependencies and largely improve the efficiency of RESTful API fuzzing. In part"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.02906","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2203.02906/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:02:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NhxEbnDr6/Yr6dZdLPvg0prvpB/y9Tvp3bARvnicwMoRFD09g6lvK5LtJmtJVw6322kca933hhLJQLkaKmCaCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T23:17:54.966146Z"},"content_sha256":"6c4ba271503e03b0f6a76d840592a09fed5b1b2bee88916a6615a3ddb172760a","schema_version":"1.0","event_id":"sha256:6c4ba271503e03b0f6a76d840592a09fed5b1b2bee88916a6615a3ddb172760a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OCHMC3ENPADPACS45HXCPPBFDG/bundle.json","state_url":"https://pith.science/pith/OCHMC3ENPADPACS45HXCPPBFDG/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OCHMC3ENPADPACS45HXCPPBFDG/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T23:17:54Z","links":{"resolver":"https://pith.science/pith/OCHMC3ENPADPACS45HXCPPBFDG","bundle":"https://pith.science/pith/OCHMC3ENPADPACS45HXCPPBFDG/bundle.json","state":"https://pith.science/pith/OCHMC3ENPADPACS45HXCPPBFDG/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OCHMC3ENPADPACS45HXCPPBFDG/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:OCHMC3ENPADPACS45HXCPPBFDG","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c39e4df0978785511a744938ae3df1cae54b792e9a93570103d084630dc17c57","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-03-06T08:48:00Z","title_canon_sha256":"9302ef5212df03b891a1650ff99cfa6af8ef17ecfc0a0f59aa91aa63156704d3"},"schema_version":"1.0","source":{"id":"2203.02906","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2203.02906","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"arxiv_version","alias_value":"2203.02906v1","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2203.02906","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_12","alias_value":"OCHMC3ENPADP","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_16","alias_value":"OCHMC3ENPADPACS4","created_at":"2026-07-05T04:02:28Z"},{"alias_kind":"pith_short_8","alias_value":"OCHMC3EN","created_at":"2026-07-05T04:02:28Z"}],"graph_snapshots":[{"event_id":"sha256:6c4ba271503e03b0f6a76d840592a09fed5b1b2bee88916a6615a3ddb172760a","target":"graph","created_at":"2026-07-05T04:02:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2203.02906/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Representational state transfer (REST) is a widely employed architecture by web applications and cloud. Users can invoke such services according to the specification of their application interfaces, namely RESTful APIs. Existing approaches for fuzzing RESTful APIs are generally based on classic API-dependency graphs. However, such dependencies are inefficient for REST services due to the explosion of dependencies among APIs. In this paper, we propose a novel tree-based approach that can better capture the essential dependencies and largely improve the efficiency of RESTful API fuzzing. In part","authors_text":"Guangsheng Wei, Hui Xu, Jiadong Lin, Jiaxian Lin, Sen Zhang, Tianyu Li, Yang Chen","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-03-06T08:48:00Z","title":"foREST: A Tree-based Approach for Fuzzing RESTful APIs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2203.02906","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:94b634f63f5bd905efc65715748524de293e4ee02251641d9bde6394832b1461","target":"record","created_at":"2026-07-05T04:02:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c39e4df0978785511a744938ae3df1cae54b792e9a93570103d084630dc17c57","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.SE","submitted_at":"2022-03-06T08:48:00Z","title_canon_sha256":"9302ef5212df03b891a1650ff99cfa6af8ef17ecfc0a0f59aa91aa63156704d3"},"schema_version":"1.0","source":{"id":"2203.02906","kind":"arxiv","version":1}},"canonical_sha256":"708ec16c8d7806f00a5ce9ee27bc2519a0be0ceb98cde1c3d2eda41db28fb35c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"708ec16c8d7806f00a5ce9ee27bc2519a0be0ceb98cde1c3d2eda41db28fb35c","first_computed_at":"2026-07-05T04:02:28.944261Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:02:28.944261Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"nd6XWwhjuTZPn0frNLmbDg5KnUbsdkmbaVSEGkJQSUxRypxWPJtT1/Fk8Y5N52AEeeAs9FMK/A9stgCz1O5jCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:02:28.944742Z","signed_message":"canonical_sha256_bytes"},"source_id":"2203.02906","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:94b634f63f5bd905efc65715748524de293e4ee02251641d9bde6394832b1461","sha256:6c4ba271503e03b0f6a76d840592a09fed5b1b2bee88916a6615a3ddb172760a"],"state_sha256":"246ddb26ceee2fd983f819af3fe2c9f4387130743531429b4092f892ef00f033"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9Rofc6Bgk7iu10KXnK2G0ZQqwU9YJFzhuxkjeuPk7wZt+lc3aOoXqw6CF7TK3yLNBHxuLXqjpxLJ698rkE8KAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T23:17:54.970625Z","bundle_sha256":"925b0b0a78ae425c0966be825336c2816e0f996a451bfd087ac045e654b8437c"}}