{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:ZSHTGW4M2SZWAYRR2JDWX2E2WK","short_pith_number":"pith:ZSHTGW4M","schema_version":"1.0","canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","source":{"kind":"arxiv","id":"2509.01612","version":1},"attestation_state":"computed","paper":{"title":"WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Andrea Arcuri, Man Zhang, Omur Sahin","submitted_at":"2025-09-01T16:44:59Z","abstract_excerpt":"Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the last few years. However, there are three major issues that hinder further progress: how to deal with API authentication; how to catalog and compare different fault types found by different fuzzers; and what to use as case study to facilitate fair comparisons among fuzzers. To address these important challenges, we present Web Fuzzing Commons (WFC) and Web Fuzzing Dataset (WFD). WFC is a set of open-source libraries and"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2509.01612","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2025-09-01T16:44:59Z","cross_cats_sorted":[],"title_canon_sha256":"b44a31e796f2736c706134272342a31d61a0067781ad60a78046b2a758cb8bef","abstract_canon_sha256":"131d4663d9eec5508da245eab05b9988d6938481831fd7ad7ca78af5f6784b3b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:03:04.513894Z","signature_b64":"2+VgZsasx3hFgsOVkG8/wUFkyw5vKr2YhV2QIl4Q2LayCSBzpMTetZRpS4jh5eW8fmRM+3ALOqzLv5A7W8twAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"cc8f335b8cd4b3606231d2476be89ab2af19bd5f55f7f80bf60fa9b6b1f65686","last_reissued_at":"2026-07-05T12:03:04.513328Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:03:04.513328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"WFC/WFD: Web Fuzzing Commons, Dataset and Guidelines to Support Experimentation in REST API Fuzzing","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Andrea Arcuri, Man Zhang, Omur Sahin","submitted_at":"2025-09-01T16:44:59Z","abstract_excerpt":"Fuzzing REST APIs is an important research problem, with practical applications and impact in industry. As such, a lot of research work has been carried out on this topic in the last few years. However, there are three major issues that hinder further progress: how to deal with API authentication; how to catalog and compare different fault types found by different fuzzers; and what to use as case study to facilitate fair comparisons among fuzzers. To address these important challenges, we present Web Fuzzing Commons (WFC) and Web Fuzzing Dataset (WFD). WFC is a set of open-source libraries and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.01612","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.01612/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2509.01612","created_at":"2026-07-05T12:03:04.513399+00:00"},{"alias_kind":"arxiv_version","alias_value":"2509.01612v1","created_at":"2026-07-05T12:03:04.513399+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.01612","created_at":"2026-07-05T12:03:04.513399+00:00"},{"alias_kind":"pith_short_12","alias_value":"ZSHTGW4M2SZW","created_at":"2026-07-05T12:03:04.513399+00:00"},{"alias_kind":"pith_short_16","alias_value":"ZSHTGW4M2SZWAYRR","created_at":"2026-07-05T12:03:04.513399+00:00"},{"alias_kind":"pith_short_8","alias_value":"ZSHTGW4M","created_at":"2026-07-05T12:03:04.513399+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2606.10465","citing_title":"MASTOR: A Multi-Agent Approach to Semantic Test Oracle Generation for RESTful APIs","ref_index":41,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK","json":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK.json","graph_json":"https://pith.science/api/pith-number/ZSHTGW4M2SZWAYRR2JDWX2E2WK/graph.json","events_json":"https://pith.science/api/pith-number/ZSHTGW4M2SZWAYRR2JDWX2E2WK/events.json","paper":"https://pith.science/paper/ZSHTGW4M"},"agent_actions":{"view_html":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK","download_json":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK.json","view_paper":"https://pith.science/paper/ZSHTGW4M","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2509.01612&json=true","fetch_graph":"https://pith.science/api/pith-number/ZSHTGW4M2SZWAYRR2JDWX2E2WK/graph.json","fetch_events":"https://pith.science/api/pith-number/ZSHTGW4M2SZWAYRR2JDWX2E2WK/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/action/timestamp_anchor","attest_storage":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/action/storage_attestation","attest_author":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/action/author_attestation","sign_citation":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/action/citation_signature","submit_replication":"https://pith.science/pith/ZSHTGW4M2SZWAYRR2JDWX2E2WK/action/replication_record"}},"created_at":"2026-07-05T12:03:04.513399+00:00","updated_at":"2026-07-05T12:03:04.513399+00:00"}