{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:4L6K6DGMVFUTZQ2NZMYYLDBO5G","short_pith_number":"pith:4L6K6DGM","canonical_record":{"source":{"id":"1903.10560","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-25T19:28:04Z","cross_cats_sorted":[],"title_canon_sha256":"c1a52ed4070f36fbc6a54a2f1be221e3e43f8aa9150ebb2aafd4b6ee09a68fe6","abstract_canon_sha256":"946c99160504444e9efa23a00969d12ec62621a2b3d664940d36ca3c1afd6cc0"},"schema_version":"1.0"},"canonical_sha256":"e2fcaf0ccca9693cc34dcb31858c2ee9b6eb09dab3266baaa5ac759403c5757f","source":{"kind":"arxiv","id":"1903.10560","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.10560","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"arxiv_version","alias_value":"1903.10560v1","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.10560","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"pith_short_12","alias_value":"4L6K6DGMVFUT","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"4L6K6DGMVFUTZQ2N","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"4L6K6DGM","created_at":"2026-05-18T12:33:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:4L6K6DGMVFUTZQ2NZMYYLDBO5G","target":"record","payload":{"canonical_record":{"source":{"id":"1903.10560","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-25T19:28:04Z","cross_cats_sorted":[],"title_canon_sha256":"c1a52ed4070f36fbc6a54a2f1be221e3e43f8aa9150ebb2aafd4b6ee09a68fe6","abstract_canon_sha256":"946c99160504444e9efa23a00969d12ec62621a2b3d664940d36ca3c1afd6cc0"},"schema_version":"1.0"},"canonical_sha256":"e2fcaf0ccca9693cc34dcb31858c2ee9b6eb09dab3266baaa5ac759403c5757f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:50:18.474015Z","signature_b64":"DouMMaYK3Nu5NHOq6HaleGFKcCNAlnRZoJznmfyTHsL2Z11dEyFLMTmzXMG3z2SoNrxl34Rl6KBKQSdisc9yBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e2fcaf0ccca9693cc34dcb31858c2ee9b6eb09dab3266baaa5ac759403c5757f","last_reissued_at":"2026-05-17T23:50:18.473446Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:50:18.473446Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1903.10560","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:50:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kpJji6UmyzCNwOPmwjyk2PUukPI9vKMKO+JPTe3W9m5K/br42tMxm2g6zLh79X0dQOM9XrLQ19ymcBC4emfnAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-25T09:24:25.761434Z"},"content_sha256":"50104a4656ef82742c3f0c2ced38562459fe03aee1e75dacd33b8de823af4d6e","schema_version":"1.0","event_id":"sha256:50104a4656ef82742c3f0c2ced38562459fe03aee1e75dacd33b8de823af4d6e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:4L6K6DGMVFUTZQ2NZMYYLDBO5G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Don't Pick the Cherry: An Evaluation Methodology for Android Malware Detection Methods","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Aleieldin Salem, Alexander Pretschner, Sebastian Banescu","submitted_at":"2019-03-25T19:28:04Z","abstract_excerpt":"In evaluating detection methods, the malware research community relies on scan results obtained from online platforms such as VirusTotal. Nevertheless, given the lack of standards on how to interpret the obtained data to label apps, researchers hinge on their intuitions and adopt different labeling schemes. The dynamicity of VirusTotal's results along with adoption of different labeling schemes significantly affect the accuracies achieved by any given detection method even on the same dataset, which gives subjective views on the method's performance and hinders the comparison of different malw"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.10560","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:50:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WOOv9I3rLN3e1gndPd47x+tkMdHLZex1mDGYm6gP5ibu9KZeWFvjoYz5diH1ncdnIAnqtG/wU5dLxgpSvdOcBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-25T09:24:25.761778Z"},"content_sha256":"b071ba478c2c19009f221d92b8ffe1a2c754070a01ea254ffd050f7859d6c36d","schema_version":"1.0","event_id":"sha256:b071ba478c2c19009f221d92b8ffe1a2c754070a01ea254ffd050f7859d6c36d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/bundle.json","state_url":"https://pith.science/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-25T09:24:25Z","links":{"resolver":"https://pith.science/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G","bundle":"https://pith.science/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/bundle.json","state":"https://pith.science/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4L6K6DGMVFUTZQ2NZMYYLDBO5G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:4L6K6DGMVFUTZQ2NZMYYLDBO5G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"946c99160504444e9efa23a00969d12ec62621a2b3d664940d36ca3c1afd6cc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-25T19:28:04Z","title_canon_sha256":"c1a52ed4070f36fbc6a54a2f1be221e3e43f8aa9150ebb2aafd4b6ee09a68fe6"},"schema_version":"1.0","source":{"id":"1903.10560","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.10560","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"arxiv_version","alias_value":"1903.10560v1","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.10560","created_at":"2026-05-17T23:50:18Z"},{"alias_kind":"pith_short_12","alias_value":"4L6K6DGMVFUT","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"4L6K6DGMVFUTZQ2N","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"4L6K6DGM","created_at":"2026-05-18T12:33:10Z"}],"graph_snapshots":[{"event_id":"sha256:b071ba478c2c19009f221d92b8ffe1a2c754070a01ea254ffd050f7859d6c36d","target":"graph","created_at":"2026-05-17T23:50:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In evaluating detection methods, the malware research community relies on scan results obtained from online platforms such as VirusTotal. Nevertheless, given the lack of standards on how to interpret the obtained data to label apps, researchers hinge on their intuitions and adopt different labeling schemes. The dynamicity of VirusTotal's results along with adoption of different labeling schemes significantly affect the accuracies achieved by any given detection method even on the same dataset, which gives subjective views on the method's performance and hinders the comparison of different malw","authors_text":"Aleieldin Salem, Alexander Pretschner, Sebastian Banescu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-25T19:28:04Z","title":"Don't Pick the Cherry: An Evaluation Methodology for Android Malware Detection Methods"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.10560","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:50104a4656ef82742c3f0c2ced38562459fe03aee1e75dacd33b8de823af4d6e","target":"record","created_at":"2026-05-17T23:50:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"946c99160504444e9efa23a00969d12ec62621a2b3d664940d36ca3c1afd6cc0","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-25T19:28:04Z","title_canon_sha256":"c1a52ed4070f36fbc6a54a2f1be221e3e43f8aa9150ebb2aafd4b6ee09a68fe6"},"schema_version":"1.0","source":{"id":"1903.10560","kind":"arxiv","version":1}},"canonical_sha256":"e2fcaf0ccca9693cc34dcb31858c2ee9b6eb09dab3266baaa5ac759403c5757f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e2fcaf0ccca9693cc34dcb31858c2ee9b6eb09dab3266baaa5ac759403c5757f","first_computed_at":"2026-05-17T23:50:18.473446Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:50:18.473446Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DouMMaYK3Nu5NHOq6HaleGFKcCNAlnRZoJznmfyTHsL2Z11dEyFLMTmzXMG3z2SoNrxl34Rl6KBKQSdisc9yBQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:50:18.474015Z","signed_message":"canonical_sha256_bytes"},"source_id":"1903.10560","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:50104a4656ef82742c3f0c2ced38562459fe03aee1e75dacd33b8de823af4d6e","sha256:b071ba478c2c19009f221d92b8ffe1a2c754070a01ea254ffd050f7859d6c36d"],"state_sha256":"0a384763007f23602e38b3bc38ee5ea6b9e85146c5f5b1bf43a39aba34034517"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"51EiXB23nPjUWL+YjhTTWM3Qb5pcO66aYLzwITXLrhAh7YujnI7mwfRSEoyOQcfrpH+TJfEtZENvTj1WJD5jAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-25T09:24:25.763779Z","bundle_sha256":"4873e6515b5f59a268e84d58f40afe2c8e653798244cbca22fec9c3b57276d35"}}