{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:WPTMXO3JXFW3CJEYWZN26ZPEMO","short_pith_number":"pith:WPTMXO3J","canonical_record":{"source":{"id":"2201.07938","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T01:13:47Z","cross_cats_sorted":[],"title_canon_sha256":"2035ee8370da3d7dabf4cd5f878a3bf2cb7cb5df225c38a21aebb3eb67e61d38","abstract_canon_sha256":"a1c6f653779d4b8e82c4d930686a1e98698e29067be76e1e7b14f641ae2e300d"},"schema_version":"1.0"},"canonical_sha256":"b3e6cbbb69b96db12498b65baf65e463ba93235a7bc6a6f8174a56d293ce514c","source":{"kind":"arxiv","id":"2201.07938","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.07938","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"arxiv_version","alias_value":"2201.07938v1","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.07938","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_12","alias_value":"WPTMXO3JXFW3","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_16","alias_value":"WPTMXO3JXFW3CJEY","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_8","alias_value":"WPTMXO3J","created_at":"2026-07-05T03:50:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:WPTMXO3JXFW3CJEYWZN26ZPEMO","target":"record","payload":{"canonical_record":{"source":{"id":"2201.07938","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T01:13:47Z","cross_cats_sorted":[],"title_canon_sha256":"2035ee8370da3d7dabf4cd5f878a3bf2cb7cb5df225c38a21aebb3eb67e61d38","abstract_canon_sha256":"a1c6f653779d4b8e82c4d930686a1e98698e29067be76e1e7b14f641ae2e300d"},"schema_version":"1.0"},"canonical_sha256":"b3e6cbbb69b96db12498b65baf65e463ba93235a7bc6a6f8174a56d293ce514c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:50:06.864990Z","signature_b64":"sMTn5+MnFLxerToL/0sSuNVtBmekzKov5bz5GLrqCmF8XLoUYyEmPayreuW74NpyzHnErskkRWt4JVX6QItyAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b3e6cbbb69b96db12498b65baf65e463ba93235a7bc6a6f8174a56d293ce514c","last_reissued_at":"2026-07-05T03:50:06.864607Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:50:06.864607Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.07938","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vRvRSKecNuxpS0kURK0TWr/0JOn2t+sXCIj0PpvcFlHcK7yjtiIvSUt5xSKO3hjmL3jzMKe23rnxqnrWPrSACQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:51:42.246095Z"},"content_sha256":"43c0cde35d73911eb5f666473df09a6f3aa1a5ea3cf2d71c9b531c484b6a2a43","schema_version":"1.0","event_id":"sha256:43c0cde35d73911eb5f666473df09a6f3aa1a5ea3cf2d71c9b531c484b6a2a43"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:WPTMXO3JXFW3CJEYWZN26ZPEMO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"spotFuzzer: Static Instrument and Fuzzing Windows COTs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Hui Shu, Lei Zhu, Lin Yan, Rongkuan Ma, Yeming Gu","submitted_at":"2022-01-20T01:13:47Z","abstract_excerpt":"The security research on Windows has received little attention in the academic circle. Most of the new methods are usually designed for Linux system, and are difficult to transplant to Windows. Fuzzing for Windows programs always suffering from its closed source. Therefore, we need to find an appropriate way to achieve feedback from Windows programs. To our knowledge, there are no stable and scalable static instrumentation tools for Windows yet, and dynamic tools, such as DynamoRIO, have been criticized for their performance. To make matters worse, dynamic instrumentation tools have very limit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.07938","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.07938/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:50:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kCuI+QYlwDK9TnVdS1pD/7EiO2ccCROKRJY3ZcWFRaJvG0zJVsfHOg5yKODyAeJKlVXqDnKOZZ7AM2Y3vfYCCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:51:42.246633Z"},"content_sha256":"f25b98e30d1787a75aeb9cc4573f289f1f61749c8f5710c98ef932f695621cec","schema_version":"1.0","event_id":"sha256:f25b98e30d1787a75aeb9cc4573f289f1f61749c8f5710c98ef932f695621cec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/bundle.json","state_url":"https://pith.science/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T05:51:42Z","links":{"resolver":"https://pith.science/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO","bundle":"https://pith.science/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/bundle.json","state":"https://pith.science/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WPTMXO3JXFW3CJEYWZN26ZPEMO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:WPTMXO3JXFW3CJEYWZN26ZPEMO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a1c6f653779d4b8e82c4d930686a1e98698e29067be76e1e7b14f641ae2e300d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T01:13:47Z","title_canon_sha256":"2035ee8370da3d7dabf4cd5f878a3bf2cb7cb5df225c38a21aebb3eb67e61d38"},"schema_version":"1.0","source":{"id":"2201.07938","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.07938","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"arxiv_version","alias_value":"2201.07938v1","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.07938","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_12","alias_value":"WPTMXO3JXFW3","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_16","alias_value":"WPTMXO3JXFW3CJEY","created_at":"2026-07-05T03:50:06Z"},{"alias_kind":"pith_short_8","alias_value":"WPTMXO3J","created_at":"2026-07-05T03:50:06Z"}],"graph_snapshots":[{"event_id":"sha256:f25b98e30d1787a75aeb9cc4573f289f1f61749c8f5710c98ef932f695621cec","target":"graph","created_at":"2026-07-05T03:50:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.07938/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The security research on Windows has received little attention in the academic circle. Most of the new methods are usually designed for Linux system, and are difficult to transplant to Windows. Fuzzing for Windows programs always suffering from its closed source. Therefore, we need to find an appropriate way to achieve feedback from Windows programs. To our knowledge, there are no stable and scalable static instrumentation tools for Windows yet, and dynamic tools, such as DynamoRIO, have been criticized for their performance. To make matters worse, dynamic instrumentation tools have very limit","authors_text":"Hui Shu, Lei Zhu, Lin Yan, Rongkuan Ma, Yeming Gu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T01:13:47Z","title":"spotFuzzer: Static Instrument and Fuzzing Windows COTs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.07938","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:43c0cde35d73911eb5f666473df09a6f3aa1a5ea3cf2d71c9b531c484b6a2a43","target":"record","created_at":"2026-07-05T03:50:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a1c6f653779d4b8e82c4d930686a1e98698e29067be76e1e7b14f641ae2e300d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2022-01-20T01:13:47Z","title_canon_sha256":"2035ee8370da3d7dabf4cd5f878a3bf2cb7cb5df225c38a21aebb3eb67e61d38"},"schema_version":"1.0","source":{"id":"2201.07938","kind":"arxiv","version":1}},"canonical_sha256":"b3e6cbbb69b96db12498b65baf65e463ba93235a7bc6a6f8174a56d293ce514c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b3e6cbbb69b96db12498b65baf65e463ba93235a7bc6a6f8174a56d293ce514c","first_computed_at":"2026-07-05T03:50:06.864607Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:50:06.864607Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sMTn5+MnFLxerToL/0sSuNVtBmekzKov5bz5GLrqCmF8XLoUYyEmPayreuW74NpyzHnErskkRWt4JVX6QItyAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T03:50:06.864990Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.07938","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:43c0cde35d73911eb5f666473df09a6f3aa1a5ea3cf2d71c9b531c484b6a2a43","sha256:f25b98e30d1787a75aeb9cc4573f289f1f61749c8f5710c98ef932f695621cec"],"state_sha256":"e80dda332aba87dd1b791d6491817e45acbd2207a89135edf1c4c96349f01589"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sIQA/ANT6z4SBQf/IuRR2O3MzW/z4SW7Ke8T6V9Ve5MvZB5fAxRuUJBuMavGqURK0rm1FuC05vpgoznp8BmXDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T05:51:42.249503Z","bundle_sha256":"36123032b22296745661a0d909bb26422b503aae54222e365f643bc001909ae6"}}