{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:6S3MWY62BDVS4T2XBE64DAOKNZ","short_pith_number":"pith:6S3MWY62","canonical_record":{"source":{"id":"1901.04434","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-14T18:06:10Z","cross_cats_sorted":[],"title_canon_sha256":"3945b4629d5fe63a19d5c1c19359133059f775f4c415e8a0f4d6174351f9387c","abstract_canon_sha256":"332ca34b42167ec456ba2b755fcdbceec9d6e5386a1298565699e76916be48d4"},"schema_version":"1.0"},"canonical_sha256":"f4b6cb63da08eb2e4f57093dc181ca6e6a103bc4d0752535f64c7a098877b47a","source":{"kind":"arxiv","id":"1901.04434","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.04434","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"arxiv_version","alias_value":"1901.04434v1","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.04434","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"pith_short_12","alias_value":"6S3MWY62BDVS","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"6S3MWY62BDVS4T2X","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"6S3MWY62","created_at":"2026-05-18T12:33:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:6S3MWY62BDVS4T2XBE64DAOKNZ","target":"record","payload":{"canonical_record":{"source":{"id":"1901.04434","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-14T18:06:10Z","cross_cats_sorted":[],"title_canon_sha256":"3945b4629d5fe63a19d5c1c19359133059f775f4c415e8a0f4d6174351f9387c","abstract_canon_sha256":"332ca34b42167ec456ba2b755fcdbceec9d6e5386a1298565699e76916be48d4"},"schema_version":"1.0"},"canonical_sha256":"f4b6cb63da08eb2e4f57093dc181ca6e6a103bc4d0752535f64c7a098877b47a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:56:25.585384Z","signature_b64":"djMlWizes5XuxNaNieqcdC8CB/B0QrvzKjjO35gpPlmwJPBfWyS7gGGS+tnrVmwAfa60GfB8R7JKT11dL2N8DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f4b6cb63da08eb2e4f57093dc181ca6e6a103bc4d0752535f64c7a098877b47a","last_reissued_at":"2026-05-17T23:56:25.584921Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:56:25.584921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1901.04434","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:56:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ydVjxxFlRnzCxOfd3PrQSNztma723kVEKe4+Vp14erm9J7lik3HGnw435/rzrLfpTvNWnC0jYp6XX5PMHQHrBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T05:12:13.169086Z"},"content_sha256":"3c4c5da15a96bf411c1d5eb19ce1e8d99ad44010430fbe0a8d2d29fc892d2ab9","schema_version":"1.0","event_id":"sha256:3c4c5da15a96bf411c1d5eb19ce1e8d99ad44010430fbe0a8d2d29fc892d2ab9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:6S3MWY62BDVS4T2XBE64DAOKNZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Peel the onion: Recognition of Android apps behind the Tor Network","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Claudio Ciccotelli, Emanuele Petagna, Giuseppe Laurenza, Leonardo Querzoni","submitted_at":"2019-01-14T18:06:10Z","abstract_excerpt":"In this work we show that Tor is vulnerable to app deanonymization attacks on Android devices through network traffic analysis. For this purpose, we describe a general methodology for performing an attack that allows to deanonymize the apps running on a target smartphone using Tor, which is the victim of the attack. Then, we discuss a Proof-of-Concept, implementing the methodology, that shows how the attack can be performed in practice and allows to assess the deanonymization accuracy that it is possible to achieve. While attacks against Tor anonymity have been already gained considerable atte"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.04434","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:56:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hh1e/SRZndqu6Tw1FP2dSDrkio/58nv5kRCIur0xLQ+HLWeyL9+L76tJixQF35UpigCUTP4RlXAMHlZ459GDCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-10T05:12:13.169739Z"},"content_sha256":"98c8cd51d7ae5946dee974e050f329cf455b0cddb1d0a06c08735080761e4435","schema_version":"1.0","event_id":"sha256:98c8cd51d7ae5946dee974e050f329cf455b0cddb1d0a06c08735080761e4435"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/bundle.json","state_url":"https://pith.science/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-10T05:12:13Z","links":{"resolver":"https://pith.science/pith/6S3MWY62BDVS4T2XBE64DAOKNZ","bundle":"https://pith.science/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/bundle.json","state":"https://pith.science/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6S3MWY62BDVS4T2XBE64DAOKNZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:6S3MWY62BDVS4T2XBE64DAOKNZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"332ca34b42167ec456ba2b755fcdbceec9d6e5386a1298565699e76916be48d4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-14T18:06:10Z","title_canon_sha256":"3945b4629d5fe63a19d5c1c19359133059f775f4c415e8a0f4d6174351f9387c"},"schema_version":"1.0","source":{"id":"1901.04434","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1901.04434","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"arxiv_version","alias_value":"1901.04434v1","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.04434","created_at":"2026-05-17T23:56:25Z"},{"alias_kind":"pith_short_12","alias_value":"6S3MWY62BDVS","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_16","alias_value":"6S3MWY62BDVS4T2X","created_at":"2026-05-18T12:33:10Z"},{"alias_kind":"pith_short_8","alias_value":"6S3MWY62","created_at":"2026-05-18T12:33:10Z"}],"graph_snapshots":[{"event_id":"sha256:98c8cd51d7ae5946dee974e050f329cf455b0cddb1d0a06c08735080761e4435","target":"graph","created_at":"2026-05-17T23:56:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this work we show that Tor is vulnerable to app deanonymization attacks on Android devices through network traffic analysis. For this purpose, we describe a general methodology for performing an attack that allows to deanonymize the apps running on a target smartphone using Tor, which is the victim of the attack. Then, we discuss a Proof-of-Concept, implementing the methodology, that shows how the attack can be performed in practice and allows to assess the deanonymization accuracy that it is possible to achieve. While attacks against Tor anonymity have been already gained considerable atte","authors_text":"Claudio Ciccotelli, Emanuele Petagna, Giuseppe Laurenza, Leonardo Querzoni","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-14T18:06:10Z","title":"Peel the onion: Recognition of Android apps behind the Tor Network"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.04434","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3c4c5da15a96bf411c1d5eb19ce1e8d99ad44010430fbe0a8d2d29fc892d2ab9","target":"record","created_at":"2026-05-17T23:56:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"332ca34b42167ec456ba2b755fcdbceec9d6e5386a1298565699e76916be48d4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-01-14T18:06:10Z","title_canon_sha256":"3945b4629d5fe63a19d5c1c19359133059f775f4c415e8a0f4d6174351f9387c"},"schema_version":"1.0","source":{"id":"1901.04434","kind":"arxiv","version":1}},"canonical_sha256":"f4b6cb63da08eb2e4f57093dc181ca6e6a103bc4d0752535f64c7a098877b47a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f4b6cb63da08eb2e4f57093dc181ca6e6a103bc4d0752535f64c7a098877b47a","first_computed_at":"2026-05-17T23:56:25.584921Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:56:25.584921Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"djMlWizes5XuxNaNieqcdC8CB/B0QrvzKjjO35gpPlmwJPBfWyS7gGGS+tnrVmwAfa60GfB8R7JKT11dL2N8DQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:56:25.585384Z","signed_message":"canonical_sha256_bytes"},"source_id":"1901.04434","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3c4c5da15a96bf411c1d5eb19ce1e8d99ad44010430fbe0a8d2d29fc892d2ab9","sha256:98c8cd51d7ae5946dee974e050f329cf455b0cddb1d0a06c08735080761e4435"],"state_sha256":"515e06c2d8df6d47af222d9345f13a4591621bf931873ac41589b1bb2aa6999c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"35HgQ6buloQaY5BMeyeOoTr614VnB39vIlrszYfXqZ2ORUzG7Zd6xPqboq5rTcpRMwkg/5uvUcODZSH7wzEBBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-10T05:12:13.173644Z","bundle_sha256":"8a12c9e1a60585415ea99e81b20b77d06f21da1bfd2d54d3896f82bcc781deef"}}