四种伪造方式：证据包验证器的拒绝点变异测试
原标题：Four Ways to Forge a Bundle My Own Verifier Calls Clean: Refusal-Site Mutation Testing of an Evidence-Bundle Verifier
AI 摘要
作者构建了一个离线证据包验证器，外部审计发现其存在空验证通过漏洞，最便宜的伪造仅需四个字节。作者修复后，通过变异测试发现验证器中大量拒绝点从未被测试覆盖，系统性活性测试将覆盖率从0.330提升至1.000，而回归测试仅从37/112提升至39/119。研究揭示了验证器中的空验证通过缺陷类别，并提出了拒绝点活性测试方法。
正文节选
Four Ways to Forge a Bundle My Own Verifier Calls Clean Refusal-Site Mutation Testing of an Evidence-Bundle Verifier Abstract I built a protocol whose premise is that a stranger can re-run my claims offline and get the same answer. An outside engineer audited it and broke it: a bundle whose headline numbers were false verified clean, the cheapest forgery four bytes. I merged his fix, then pointed my own instruments at the fixed verifier and found the same defect four more times, in places his au