{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:B6UVZSQXRA4CFMKIJCKGASPZND","short_pith_number":"pith:B6UVZSQX","canonical_record":{"source":{"id":"2401.02659","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-05T06:35:24Z","cross_cats_sorted":[],"title_canon_sha256":"2538ca9556b162ddb7fd6510c6b99f7b3bea935704e31ba069bc970d572d8c56","abstract_canon_sha256":"7d20464d8a5fdfd98ac23094bacafe28483ab7b462a560a4a627ad382c271b51"},"schema_version":"1.0"},"canonical_sha256":"0fa95cca17883822b14848946049f968eca0cdeed007d8e0de09bf1a4f72d802","source":{"kind":"arxiv","id":"2401.02659","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.02659","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"arxiv_version","alias_value":"2401.02659v1","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.02659","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_12","alias_value":"B6UVZSQXRA4C","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"B6UVZSQXRA4CFMKI","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"B6UVZSQX","created_at":"2026-07-05T07:30:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:B6UVZSQXRA4CFMKIJCKGASPZND","target":"record","payload":{"canonical_record":{"source":{"id":"2401.02659","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-05T06:35:24Z","cross_cats_sorted":[],"title_canon_sha256":"2538ca9556b162ddb7fd6510c6b99f7b3bea935704e31ba069bc970d572d8c56","abstract_canon_sha256":"7d20464d8a5fdfd98ac23094bacafe28483ab7b462a560a4a627ad382c271b51"},"schema_version":"1.0"},"canonical_sha256":"0fa95cca17883822b14848946049f968eca0cdeed007d8e0de09bf1a4f72d802","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:30:29.250419Z","signature_b64":"28ug3lsYkdCnAmYWVjEIVmPPw8tfRgsLH9govs5m0mlSUdlM4SGtABdc9UzM6OgoVNzFIwPOtX9Q9zlIms/aCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0fa95cca17883822b14848946049f968eca0cdeed007d8e0de09bf1a4f72d802","last_reissued_at":"2026-07-05T07:30:29.249870Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:30:29.249870Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.02659","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QUiIVjYHbtcXBCSyxoJHu16yI1lwckLv+tZKeoKJZIvgYKM3xJC7pv+WxMIl3mKVxRhn6WkHAa2RZGaNgkhrAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:31:42.564993Z"},"content_sha256":"7193c4379d40c85b6d7145f7ab96315233e2f6da7ae5702745bd888672aef12b","schema_version":"1.0","event_id":"sha256:7193c4379d40c85b6d7145f7ab96315233e2f6da7ae5702745bd888672aef12b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:B6UVZSQXRA4CFMKIJCKGASPZND","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guangdong Bai, Haoyu Wang, Jiayi Hua, Kailong Wang, Meizhen Wang, Xiapu Luo","submitted_at":"2024-01-05T06:35:24Z","abstract_excerpt":"Mobile malware has become one of the most critical security threats in the era of ubiquitous mobile computing. Despite the intensive efforts from security experts to counteract it, recent years have still witnessed a rapid growth of identified malware samples. This could be partly attributed to the newly-emerged technologies that may constantly open up under-studied attack surfaces for the adversaries. One typical example is the recently-developed mobile machine learning (ML) framework that enables storing and running deep learning (DL) models on mobile devices. Despite obvious advantages, thi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.02659","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.02659/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nPYFPe6W3kxhrUo924xGtibJRe5wH7zSJdhLc18qx8RKNBoYuKknwXl8BUYjJSTWemNCOVVjItWupolQe5RHAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T12:31:42.565875Z"},"content_sha256":"9b1cbb751c040fe6e9a8b57c02be0825f68c1211f184e9af35fac29d0ac20496","schema_version":"1.0","event_id":"sha256:9b1cbb751c040fe6e9a8b57c02be0825f68c1211f184e9af35fac29d0ac20496"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B6UVZSQXRA4CFMKIJCKGASPZND/bundle.json","state_url":"https://pith.science/pith/B6UVZSQXRA4CFMKIJCKGASPZND/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B6UVZSQXRA4CFMKIJCKGASPZND/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T12:31:42Z","links":{"resolver":"https://pith.science/pith/B6UVZSQXRA4CFMKIJCKGASPZND","bundle":"https://pith.science/pith/B6UVZSQXRA4CFMKIJCKGASPZND/bundle.json","state":"https://pith.science/pith/B6UVZSQXRA4CFMKIJCKGASPZND/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B6UVZSQXRA4CFMKIJCKGASPZND/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:B6UVZSQXRA4CFMKIJCKGASPZND","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7d20464d8a5fdfd98ac23094bacafe28483ab7b462a560a4a627ad382c271b51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-05T06:35:24Z","title_canon_sha256":"2538ca9556b162ddb7fd6510c6b99f7b3bea935704e31ba069bc970d572d8c56"},"schema_version":"1.0","source":{"id":"2401.02659","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.02659","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"arxiv_version","alias_value":"2401.02659v1","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.02659","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_12","alias_value":"B6UVZSQXRA4C","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_16","alias_value":"B6UVZSQXRA4CFMKI","created_at":"2026-07-05T07:30:29Z"},{"alias_kind":"pith_short_8","alias_value":"B6UVZSQX","created_at":"2026-07-05T07:30:29Z"}],"graph_snapshots":[{"event_id":"sha256:9b1cbb751c040fe6e9a8b57c02be0825f68c1211f184e9af35fac29d0ac20496","target":"graph","created_at":"2026-07-05T07:30:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.02659/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Mobile malware has become one of the most critical security threats in the era of ubiquitous mobile computing. Despite the intensive efforts from security experts to counteract it, recent years have still witnessed a rapid growth of identified malware samples. This could be partly attributed to the newly-emerged technologies that may constantly open up under-studied attack surfaces for the adversaries. One typical example is the recently-developed mobile machine learning (ML) framework that enables storing and running deep learning (DL) models on mobile devices. Despite obvious advantages, thi","authors_text":"Guangdong Bai, Haoyu Wang, Jiayi Hua, Kailong Wang, Meizhen Wang, Xiapu Luo","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-05T06:35:24Z","title":"MalModel: Hiding Malicious Payload in Mobile Deep Learning Models with Black-box Backdoor Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.02659","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7193c4379d40c85b6d7145f7ab96315233e2f6da7ae5702745bd888672aef12b","target":"record","created_at":"2026-07-05T07:30:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7d20464d8a5fdfd98ac23094bacafe28483ab7b462a560a4a627ad382c271b51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-05T06:35:24Z","title_canon_sha256":"2538ca9556b162ddb7fd6510c6b99f7b3bea935704e31ba069bc970d572d8c56"},"schema_version":"1.0","source":{"id":"2401.02659","kind":"arxiv","version":1}},"canonical_sha256":"0fa95cca17883822b14848946049f968eca0cdeed007d8e0de09bf1a4f72d802","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0fa95cca17883822b14848946049f968eca0cdeed007d8e0de09bf1a4f72d802","first_computed_at":"2026-07-05T07:30:29.249870Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:30:29.249870Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"28ug3lsYkdCnAmYWVjEIVmPPw8tfRgsLH9govs5m0mlSUdlM4SGtABdc9UzM6OgoVNzFIwPOtX9Q9zlIms/aCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:30:29.250419Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.02659","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7193c4379d40c85b6d7145f7ab96315233e2f6da7ae5702745bd888672aef12b","sha256:9b1cbb751c040fe6e9a8b57c02be0825f68c1211f184e9af35fac29d0ac20496"],"state_sha256":"5368cc5f3e82aa81ebfa7dea9a413ed7df9a524f3fec720c182daf695c701cf1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CZvjZIBP/QFEQSOneg++DSdCxFIxBYc73/En2IqCfPeoWksrtaUBScJcqg0SqMvlLZTy+V8oj2S7ynPPF75FAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T12:31:42.570794Z","bundle_sha256":"625609180bf06759652d0bce4785e35231ad42141db4b54d56801b26473f0094"}}