{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:VL45NBIKBMG7JRMFWIWSI6EPP2","short_pith_number":"pith:VL45NBIK","canonical_record":{"source":{"id":"1808.09700","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-29T09:22:54Z","cross_cats_sorted":[],"title_canon_sha256":"814c911056b21cc28c39a689e411948ee2e8d99b0b243f2c4205396e2ae77753","abstract_canon_sha256":"ca31e4960ebb639ae03de5430a5422d90f786c62aa06ec57d88b3006f5aa362f"},"schema_version":"1.0"},"canonical_sha256":"aaf9d6850a0b0df4c585b22d24788f7eaefe48942e32991b1495256df22c8194","source":{"kind":"arxiv","id":"1808.09700","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.09700","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"arxiv_version","alias_value":"1808.09700v2","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.09700","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"pith_short_12","alias_value":"VL45NBIKBMG7","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"VL45NBIKBMG7JRMF","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"VL45NBIK","created_at":"2026-05-18T12:32:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:VL45NBIKBMG7JRMFWIWSI6EPP2","target":"record","payload":{"canonical_record":{"source":{"id":"1808.09700","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-29T09:22:54Z","cross_cats_sorted":[],"title_canon_sha256":"814c911056b21cc28c39a689e411948ee2e8d99b0b243f2c4205396e2ae77753","abstract_canon_sha256":"ca31e4960ebb639ae03de5430a5422d90f786c62aa06ec57d88b3006f5aa362f"},"schema_version":"1.0"},"canonical_sha256":"aaf9d6850a0b0df4c585b22d24788f7eaefe48942e32991b1495256df22c8194","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:02:49.121252Z","signature_b64":"HPDyUMqtQwN5G/xKYpRDmt8osfyOzYMpl8P7qWW96YmXkCbgEJW8B0T3iR662Jj8242uLLTQwwCNtFHpnxKwBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"aaf9d6850a0b0df4c585b22d24788f7eaefe48942e32991b1495256df22c8194","last_reissued_at":"2026-05-18T00:02:49.120670Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:02:49.120670Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1808.09700","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jtpblX4GD2NzC4FhNUBryVVfkN6Jf02BwvCRyYKvQKKdVkJ5m6JvdBWAJoU5KUAdj7Oh1ueXRyh4UA/p61lsAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T09:03:51.097409Z"},"content_sha256":"eb9b24ef4946566800a4fc788cd0b10f324846ecbe1b51c79bbb65180d0e5853","schema_version":"1.0","event_id":"sha256:eb9b24ef4946566800a4fc788cd0b10f324846ecbe1b51c79bbb65180d0e5853"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:VL45NBIKBMG7JRMFWIWSI6EPP2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating Fuzz Testing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Andrew Ruef, Benji Cooper, George Klees, Michael Hicks, Shiyi Wei","submitted_at":"2018-08-29T09:22:54Z","abstract_excerpt":"Fuzz testing has enjoyed great success at discovering security critical bugs in real software. Recently, researchers have devoted significant effort to devising new fuzzing techniques, strategies, and algorithms. Such new ideas are primarily evaluated experimentally so an important question is: What experimental setup is needed to produce trustworthy results? We surveyed the recent research literature and assessed the experimental evaluations carried out by 32 fuzzing papers. We found problems in every evaluation we considered. We then performed our own extensive experimental evaluation using "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.09700","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DziEtzk306IeliIwJ3eFNs8FBJWCxGxuuaCMKXnFFJbS41lrE7HKK0s+lMH1qDMCKI4wvLfESNgXxDg9X1+bCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T09:03:51.097776Z"},"content_sha256":"7b095e99e6d79b658dc2a8bdbf451db8377a93dcc60c4e09c50f45b8ac0093ec","schema_version":"1.0","event_id":"sha256:7b095e99e6d79b658dc2a8bdbf451db8377a93dcc60c4e09c50f45b8ac0093ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/bundle.json","state_url":"https://pith.science/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T09:03:51Z","links":{"resolver":"https://pith.science/pith/VL45NBIKBMG7JRMFWIWSI6EPP2","bundle":"https://pith.science/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/bundle.json","state":"https://pith.science/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VL45NBIKBMG7JRMFWIWSI6EPP2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:VL45NBIKBMG7JRMFWIWSI6EPP2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca31e4960ebb639ae03de5430a5422d90f786c62aa06ec57d88b3006f5aa362f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-29T09:22:54Z","title_canon_sha256":"814c911056b21cc28c39a689e411948ee2e8d99b0b243f2c4205396e2ae77753"},"schema_version":"1.0","source":{"id":"1808.09700","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1808.09700","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"arxiv_version","alias_value":"1808.09700v2","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1808.09700","created_at":"2026-05-18T00:02:49Z"},{"alias_kind":"pith_short_12","alias_value":"VL45NBIKBMG7","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_16","alias_value":"VL45NBIKBMG7JRMF","created_at":"2026-05-18T12:32:59Z"},{"alias_kind":"pith_short_8","alias_value":"VL45NBIK","created_at":"2026-05-18T12:32:59Z"}],"graph_snapshots":[{"event_id":"sha256:7b095e99e6d79b658dc2a8bdbf451db8377a93dcc60c4e09c50f45b8ac0093ec","target":"graph","created_at":"2026-05-18T00:02:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Fuzz testing has enjoyed great success at discovering security critical bugs in real software. Recently, researchers have devoted significant effort to devising new fuzzing techniques, strategies, and algorithms. Such new ideas are primarily evaluated experimentally so an important question is: What experimental setup is needed to produce trustworthy results? We surveyed the recent research literature and assessed the experimental evaluations carried out by 32 fuzzing papers. We found problems in every evaluation we considered. We then performed our own extensive experimental evaluation using ","authors_text":"Andrew Ruef, Benji Cooper, George Klees, Michael Hicks, Shiyi Wei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-29T09:22:54Z","title":"Evaluating Fuzz Testing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1808.09700","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eb9b24ef4946566800a4fc788cd0b10f324846ecbe1b51c79bbb65180d0e5853","target":"record","created_at":"2026-05-18T00:02:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca31e4960ebb639ae03de5430a5422d90f786c62aa06ec57d88b3006f5aa362f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-08-29T09:22:54Z","title_canon_sha256":"814c911056b21cc28c39a689e411948ee2e8d99b0b243f2c4205396e2ae77753"},"schema_version":"1.0","source":{"id":"1808.09700","kind":"arxiv","version":2}},"canonical_sha256":"aaf9d6850a0b0df4c585b22d24788f7eaefe48942e32991b1495256df22c8194","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"aaf9d6850a0b0df4c585b22d24788f7eaefe48942e32991b1495256df22c8194","first_computed_at":"2026-05-18T00:02:49.120670Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:02:49.120670Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HPDyUMqtQwN5G/xKYpRDmt8osfyOzYMpl8P7qWW96YmXkCbgEJW8B0T3iR662Jj8242uLLTQwwCNtFHpnxKwBg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:02:49.121252Z","signed_message":"canonical_sha256_bytes"},"source_id":"1808.09700","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eb9b24ef4946566800a4fc788cd0b10f324846ecbe1b51c79bbb65180d0e5853","sha256:7b095e99e6d79b658dc2a8bdbf451db8377a93dcc60c4e09c50f45b8ac0093ec"],"state_sha256":"4aef7456a5f7ecfb65248d0f731bc673294c782bbcbeb63278955208662825c0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SwF+FGsDQjoSVVTAGst5Cw3aQZ08DprwDMeNWM4wjjwLidQJ5vhWJgrWJkRfbHv63BFu+r7d9gXhZZOR9ZLfDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T09:03:51.100083Z","bundle_sha256":"bfd793240dca5fb3db459eee0db05540776f4d51673118d10ce367a953c48c33"}}