{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:5CEELKQ3DMXHNZOQ2XCPGPTTMN","short_pith_number":"pith:5CEELKQ3","canonical_record":{"source":{"id":"1805.06187","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-16T08:22:57Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"0f730bacfe870fc5e27b7b992f448d9b3ec8eff6c3854ad4e80080a0741040a2","abstract_canon_sha256":"c666ca592819a101e5005e2058d5ad57c0858ed652a952dc68019c486e477b13"},"schema_version":"1.0"},"canonical_sha256":"e88845aa1b1b2e76e5d0d5c4f33e736374b27e8d8371316d360b71fe54cd4c24","source":{"kind":"arxiv","id":"1805.06187","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.06187","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"arxiv_version","alias_value":"1805.06187v1","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.06187","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"pith_short_12","alias_value":"5CEELKQ3DMXH","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_16","alias_value":"5CEELKQ3DMXHNZOQ","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_8","alias_value":"5CEELKQ3","created_at":"2026-05-18T12:32:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:5CEELKQ3DMXHNZOQ2XCPGPTTMN","target":"record","payload":{"canonical_record":{"source":{"id":"1805.06187","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-16T08:22:57Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"0f730bacfe870fc5e27b7b992f448d9b3ec8eff6c3854ad4e80080a0741040a2","abstract_canon_sha256":"c666ca592819a101e5005e2058d5ad57c0858ed652a952dc68019c486e477b13"},"schema_version":"1.0"},"canonical_sha256":"e88845aa1b1b2e76e5d0d5c4f33e736374b27e8d8371316d360b71fe54cd4c24","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:15:48.505381Z","signature_b64":"QDXkIOF1AkeS+Fwf8oh8vOAd9fxSmmRhK8f7wZcV5UYoNYEh6DmX928lB5oqrvUttvxqfjnQgytuNLnk3l1WBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e88845aa1b1b2e76e5d0d5c4f33e736374b27e8d8371316d360b71fe54cd4c24","last_reissued_at":"2026-05-18T00:15:48.504693Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:15:48.504693Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1805.06187","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:15:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CJBQVsM8OKOg8FtbughO4dFFSViidAZnxXfZbDnH2DCQrKuRQKXEfz9XTlnrWHAmeX/QnjnIae8IQM7MIBrLBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T23:19:14.314691Z"},"content_sha256":"c8cd925196306fcd1a0547fe4adb97462e464ec825553bc8303d4db86bc1e2ff","schema_version":"1.0","event_id":"sha256:c8cd925196306fcd1a0547fe4adb97462e464ec825553bc8303d4db86bc1e2ff"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:5CEELKQ3DMXHNZOQ2XCPGPTTMN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Using AI to Hack IA: A New Stealthy Spyware Against Voice Assistance Functions in Smart Phones","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CR","authors_text":"Jianchao Lu, Rongjunchen Zhang, Sheng Wen, Surya Nepal, Xiao Chen, Yang Xiang","submitted_at":"2018-05-16T08:22:57Z","abstract_excerpt":"Intelligent Personal Assistant (IA), also known as Voice Assistant (VA), has become increasingly popular as a human-computer interaction mechanism. Most smartphones have built-in voice assistants that are granted high privilege, which is able to access system resources and private information. Thus, once the voice assistants are exploited by attackers, they become the stepping stones for the attackers to hack into the smartphones. Prior work shows that the voice assistant can be activated by inter-component communication mechanism, through an official Android API. However, this attack method i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.06187","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:15:48Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WQsDj+SwQ1NyAhZhWJYOj0hfnpA7BEusjDbl+6DfjJZHVicHLCrZVucjlr0s1G63x44/xc1M9kiBmjAxsiRXCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T23:19:14.315384Z"},"content_sha256":"3e5d9a331c5653e6e0a17509828cc83cb20a2f011d50385070d833c808596e60","schema_version":"1.0","event_id":"sha256:3e5d9a331c5653e6e0a17509828cc83cb20a2f011d50385070d833c808596e60"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/bundle.json","state_url":"https://pith.science/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-28T23:19:14Z","links":{"resolver":"https://pith.science/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN","bundle":"https://pith.science/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/bundle.json","state":"https://pith.science/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5CEELKQ3DMXHNZOQ2XCPGPTTMN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:5CEELKQ3DMXHNZOQ2XCPGPTTMN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c666ca592819a101e5005e2058d5ad57c0858ed652a952dc68019c486e477b13","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-16T08:22:57Z","title_canon_sha256":"0f730bacfe870fc5e27b7b992f448d9b3ec8eff6c3854ad4e80080a0741040a2"},"schema_version":"1.0","source":{"id":"1805.06187","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1805.06187","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"arxiv_version","alias_value":"1805.06187v1","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1805.06187","created_at":"2026-05-18T00:15:48Z"},{"alias_kind":"pith_short_12","alias_value":"5CEELKQ3DMXH","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_16","alias_value":"5CEELKQ3DMXHNZOQ","created_at":"2026-05-18T12:32:08Z"},{"alias_kind":"pith_short_8","alias_value":"5CEELKQ3","created_at":"2026-05-18T12:32:08Z"}],"graph_snapshots":[{"event_id":"sha256:3e5d9a331c5653e6e0a17509828cc83cb20a2f011d50385070d833c808596e60","target":"graph","created_at":"2026-05-18T00:15:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Intelligent Personal Assistant (IA), also known as Voice Assistant (VA), has become increasingly popular as a human-computer interaction mechanism. Most smartphones have built-in voice assistants that are granted high privilege, which is able to access system resources and private information. Thus, once the voice assistants are exploited by attackers, they become the stepping stones for the attackers to hack into the smartphones. Prior work shows that the voice assistant can be activated by inter-component communication mechanism, through an official Android API. However, this attack method i","authors_text":"Jianchao Lu, Rongjunchen Zhang, Sheng Wen, Surya Nepal, Xiao Chen, Yang Xiang","cross_cats":["cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-16T08:22:57Z","title":"Using AI to Hack IA: A New Stealthy Spyware Against Voice Assistance Functions in Smart Phones"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1805.06187","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c8cd925196306fcd1a0547fe4adb97462e464ec825553bc8303d4db86bc1e2ff","target":"record","created_at":"2026-05-18T00:15:48Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c666ca592819a101e5005e2058d5ad57c0858ed652a952dc68019c486e477b13","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-05-16T08:22:57Z","title_canon_sha256":"0f730bacfe870fc5e27b7b992f448d9b3ec8eff6c3854ad4e80080a0741040a2"},"schema_version":"1.0","source":{"id":"1805.06187","kind":"arxiv","version":1}},"canonical_sha256":"e88845aa1b1b2e76e5d0d5c4f33e736374b27e8d8371316d360b71fe54cd4c24","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e88845aa1b1b2e76e5d0d5c4f33e736374b27e8d8371316d360b71fe54cd4c24","first_computed_at":"2026-05-18T00:15:48.504693Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:15:48.504693Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QDXkIOF1AkeS+Fwf8oh8vOAd9fxSmmRhK8f7wZcV5UYoNYEh6DmX928lB5oqrvUttvxqfjnQgytuNLnk3l1WBg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:15:48.505381Z","signed_message":"canonical_sha256_bytes"},"source_id":"1805.06187","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c8cd925196306fcd1a0547fe4adb97462e464ec825553bc8303d4db86bc1e2ff","sha256:3e5d9a331c5653e6e0a17509828cc83cb20a2f011d50385070d833c808596e60"],"state_sha256":"6f384ab8036c74193ba5ac373ba64e447c763e8ecdd94365779683a76110a3b4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WGC2IXuLxZKPIxZYq2dPvbvMmFwKikeC7BHZzRqt3Ish4WkWws2qgJEO8FiugVpncDiMHOwtqKthmuzPa52/Dw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-28T23:19:14.319076Z","bundle_sha256":"ff015429f75e10c57e0d272629363f56f132c0377b209c846ccb9dce784da54f"}}