{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:V27ZDUR66KFNLDIPBD24JT6VIW","short_pith_number":"pith:V27ZDUR6","canonical_record":{"source":{"id":"2312.17726","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-29T18:26:05Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"35812b483e4152b9ffd2ff0640e5cba8411bdb9fd73ae1c59e933bdddec90b8e","abstract_canon_sha256":"e906fa1c8171824405c9e26f51cf53288119bf23c374dcbef56161b029c71f2e"},"schema_version":"1.0"},"canonical_sha256":"aebf91d23ef28ad58d0f08f5c4cfd545817b38bafbe9da0307d6ee7a3912d4d7","source":{"kind":"arxiv","id":"2312.17726","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.17726","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"arxiv_version","alias_value":"2312.17726v1","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.17726","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_12","alias_value":"V27ZDUR66KFN","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_16","alias_value":"V27ZDUR66KFNLDIP","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_8","alias_value":"V27ZDUR6","created_at":"2026-07-05T07:28:55Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:V27ZDUR66KFNLDIPBD24JT6VIW","target":"record","payload":{"canonical_record":{"source":{"id":"2312.17726","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-29T18:26:05Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"35812b483e4152b9ffd2ff0640e5cba8411bdb9fd73ae1c59e933bdddec90b8e","abstract_canon_sha256":"e906fa1c8171824405c9e26f51cf53288119bf23c374dcbef56161b029c71f2e"},"schema_version":"1.0"},"canonical_sha256":"aebf91d23ef28ad58d0f08f5c4cfd545817b38bafbe9da0307d6ee7a3912d4d7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:28:55.870504Z","signature_b64":"QUk5mtVDKkIjzJ0blhO4LcLJk9BYqD4TE2txOiU4E0bp8LfG1P3hKZ3VvL+Z3n6aSLOnUzARmfdyZYmMByk5Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aebf91d23ef28ad58d0f08f5c4cfd545817b38bafbe9da0307d6ee7a3912d4d7","last_reissued_at":"2026-07-05T07:28:55.870024Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:28:55.870024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.17726","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:28:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"571pYzw2xqolSOLO/uFqR+Cy+tWZIOm3wih2Tqt6vO9AImx7ZI1+J65mX+vMB4WxCIgtOTwZQXE4cSlQCCBPDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T04:24:16.318959Z"},"content_sha256":"1178d92cd7b0b2ea51580b12731f5ab6c95d7fba1ed48f96705396f5a26c2324","schema_version":"1.0","event_id":"sha256:1178d92cd7b0b2ea51580b12731f5ab6c95d7fba1ed48f96705396f5a26c2324"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:V27ZDUR66KFNLDIPBD24JT6VIW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Aishwarya Seth, Laurie Williams, Nusrat Zahan, Saikath Bhattacharya, Sarah Elder","submitted_at":"2023-12-29T18:26:05Z","abstract_excerpt":"Security resources are scarce, and practitioners need guidance in the effective and efficient usage of techniques and tools available in the cybersecurity industry. Two emerging tool types, Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP), have not been thoroughly evaluated against well-established counterparts such as Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST). The goal of this research is to aid practitioners in making informed choices about the use of Interactive Application Security Testing (IAST)"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.17726","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.17726/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:28:55Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D01mWwH3SkDnUgJrZ4x8w+1hbJZ9NMvi3MSBJQ9MzLNM3G0l8dnZdzXWOmMEuSwVe4+C7fviM2XOabiSZ5xdBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T04:24:16.319497Z"},"content_sha256":"ec999c7d10469795b0419a1ac9ed1873b39641f07e928b2b4fc5a4f40a56fe5c","schema_version":"1.0","event_id":"sha256:ec999c7d10469795b0419a1ac9ed1873b39641f07e928b2b4fc5a4f40a56fe5c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/V27ZDUR66KFNLDIPBD24JT6VIW/bundle.json","state_url":"https://pith.science/pith/V27ZDUR66KFNLDIPBD24JT6VIW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/V27ZDUR66KFNLDIPBD24JT6VIW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T04:24:16Z","links":{"resolver":"https://pith.science/pith/V27ZDUR66KFNLDIPBD24JT6VIW","bundle":"https://pith.science/pith/V27ZDUR66KFNLDIPBD24JT6VIW/bundle.json","state":"https://pith.science/pith/V27ZDUR66KFNLDIPBD24JT6VIW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/V27ZDUR66KFNLDIPBD24JT6VIW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:V27ZDUR66KFNLDIPBD24JT6VIW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e906fa1c8171824405c9e26f51cf53288119bf23c374dcbef56161b029c71f2e","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-29T18:26:05Z","title_canon_sha256":"35812b483e4152b9ffd2ff0640e5cba8411bdb9fd73ae1c59e933bdddec90b8e"},"schema_version":"1.0","source":{"id":"2312.17726","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.17726","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"arxiv_version","alias_value":"2312.17726v1","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.17726","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_12","alias_value":"V27ZDUR66KFN","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_16","alias_value":"V27ZDUR66KFNLDIP","created_at":"2026-07-05T07:28:55Z"},{"alias_kind":"pith_short_8","alias_value":"V27ZDUR6","created_at":"2026-07-05T07:28:55Z"}],"graph_snapshots":[{"event_id":"sha256:ec999c7d10469795b0419a1ac9ed1873b39641f07e928b2b4fc5a4f40a56fe5c","target":"graph","created_at":"2026-07-05T07:28:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.17726/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security resources are scarce, and practitioners need guidance in the effective and efficient usage of techniques and tools available in the cybersecurity industry. Two emerging tool types, Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP), have not been thoroughly evaluated against well-established counterparts such as Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST). The goal of this research is to aid practitioners in making informed choices about the use of Interactive Application Security Testing (IAST)","authors_text":"Aishwarya Seth, Laurie Williams, Nusrat Zahan, Saikath Bhattacharya, Sarah Elder","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-29T18:26:05Z","title":"Comparing Effectiveness and Efficiency of Interactive Application Security Testing (IAST) and Runtime Application Self-Protection (RASP) Tools in a Large Java-based System"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.17726","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1178d92cd7b0b2ea51580b12731f5ab6c95d7fba1ed48f96705396f5a26c2324","target":"record","created_at":"2026-07-05T07:28:55Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e906fa1c8171824405c9e26f51cf53288119bf23c374dcbef56161b029c71f2e","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-29T18:26:05Z","title_canon_sha256":"35812b483e4152b9ffd2ff0640e5cba8411bdb9fd73ae1c59e933bdddec90b8e"},"schema_version":"1.0","source":{"id":"2312.17726","kind":"arxiv","version":1}},"canonical_sha256":"aebf91d23ef28ad58d0f08f5c4cfd545817b38bafbe9da0307d6ee7a3912d4d7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aebf91d23ef28ad58d0f08f5c4cfd545817b38bafbe9da0307d6ee7a3912d4d7","first_computed_at":"2026-07-05T07:28:55.870024Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:28:55.870024Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QUk5mtVDKkIjzJ0blhO4LcLJk9BYqD4TE2txOiU4E0bp8LfG1P3hKZ3VvL+Z3n6aSLOnUzARmfdyZYmMByk5Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:28:55.870504Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.17726","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1178d92cd7b0b2ea51580b12731f5ab6c95d7fba1ed48f96705396f5a26c2324","sha256:ec999c7d10469795b0419a1ac9ed1873b39641f07e928b2b4fc5a4f40a56fe5c"],"state_sha256":"5fa70c5a453f6d5df42214890009ba30348cec8f4dd8538fc604882078cadfc3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"B8EAIkB6M03cyGPt9lM4d+5Y6z+Vov8KqYknJHeqOfE4zzzGEvzXDRO5+VsaBwWUxVrsofu/8pmNWFNVRpzpCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T04:24:16.324482Z","bundle_sha256":"bc9e6bdae02a1cbc04f2e8776cb908922a7e800e0f86d1d93a551a3fff354013"}}