{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:CIZY6XAXJYJ6CJHGPN53THXG4G","short_pith_number":"pith:CIZY6XAX","canonical_record":{"source":{"id":"2312.17356","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-28T20:48:16Z","cross_cats_sorted":[],"title_canon_sha256":"6dc7870745e18dc01fd747e36f7ff17a0a20febbc598740df748c784b9c722e2","abstract_canon_sha256":"0404643dcb3a3b17195ae5429b519ae5ba57287b6aa3b2fe4955e9bbfbdd0e5c"},"schema_version":"1.0"},"canonical_sha256":"12338f5c174e13e124e67b7bb99ee6e19f69974398a1d60c2e286738f21332dd","source":{"kind":"arxiv","id":"2312.17356","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.17356","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"arxiv_version","alias_value":"2312.17356v1","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.17356","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_12","alias_value":"CIZY6XAXJYJ6","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_16","alias_value":"CIZY6XAXJYJ6CJHG","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_8","alias_value":"CIZY6XAX","created_at":"2026-07-05T07:28:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:CIZY6XAXJYJ6CJHGPN53THXG4G","target":"record","payload":{"canonical_record":{"source":{"id":"2312.17356","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-28T20:48:16Z","cross_cats_sorted":[],"title_canon_sha256":"6dc7870745e18dc01fd747e36f7ff17a0a20febbc598740df748c784b9c722e2","abstract_canon_sha256":"0404643dcb3a3b17195ae5429b519ae5ba57287b6aa3b2fe4955e9bbfbdd0e5c"},"schema_version":"1.0"},"canonical_sha256":"12338f5c174e13e124e67b7bb99ee6e19f69974398a1d60c2e286738f21332dd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:28:49.932690Z","signature_b64":"HBbwiiDEUMZ1YzTXaUJFCjcrxFD6hmysnWGYo99kzF6ttHgA0cSbidKnHi3nRJjlhDSf0suAwQTzv1tepm3pAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"12338f5c174e13e124e67b7bb99ee6e19f69974398a1d60c2e286738f21332dd","last_reissued_at":"2026-07-05T07:28:49.932243Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:28:49.932243Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.17356","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:28:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SA1iayiQZGJO1uCmHlQkJOf/vSc1AQJBbdH5GOhQU1uhBw9AO99Xo7UqGAcf8C3bzAkfP/kVH2KK3/8ZqdpoAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:52:21.213252Z"},"content_sha256":"1df71e8d63c0fbc60fc743a4d9dc44a2742b7d2e59fb55093570c78521eefcf4","schema_version":"1.0","event_id":"sha256:1df71e8d63c0fbc60fc743a4d9dc44a2742b7d2e59fb55093570c78521eefcf4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:CIZY6XAXJYJ6CJHGPN53THXG4G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Can you See me? On the Visibility of NOPs against Android Malware Detectors","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Davide Maiorca, Diego Soi, Giorgio Giacinto, Harel Berger","submitted_at":"2023-12-28T20:48:16Z","abstract_excerpt":"Android malware still represents the most significant threat to mobile systems. While Machine Learning systems are increasingly used to identify these threats, past studies have revealed that attackers can bypass these detection mechanisms by making subtle changes to Android applications, such as adding specific API calls. These modifications are often referred to as No OPerations (NOP), which ideally should not alter the semantics of the program. However, many NOPs can be spotted and eliminated by refining the app analysis process. This paper proposes a visibility metric that assesses the dif"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.17356","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.17356/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:28:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2UZZXE0/IXsMbfwS/RkUiZVRs/47tKC4onpsHqhRVnI6wguRQBRxF9gafcQcQKAbeMzldU7EEz3De6+0pz2IAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:52:21.213822Z"},"content_sha256":"0af82968c45a59dfe009ede3f06adba0552b8e4909532e987d9ac540c29c8593","schema_version":"1.0","event_id":"sha256:0af82968c45a59dfe009ede3f06adba0552b8e4909532e987d9ac540c29c8593"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/bundle.json","state_url":"https://pith.science/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:52:21Z","links":{"resolver":"https://pith.science/pith/CIZY6XAXJYJ6CJHGPN53THXG4G","bundle":"https://pith.science/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/bundle.json","state":"https://pith.science/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CIZY6XAXJYJ6CJHGPN53THXG4G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:CIZY6XAXJYJ6CJHGPN53THXG4G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0404643dcb3a3b17195ae5429b519ae5ba57287b6aa3b2fe4955e9bbfbdd0e5c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-28T20:48:16Z","title_canon_sha256":"6dc7870745e18dc01fd747e36f7ff17a0a20febbc598740df748c784b9c722e2"},"schema_version":"1.0","source":{"id":"2312.17356","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.17356","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"arxiv_version","alias_value":"2312.17356v1","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.17356","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_12","alias_value":"CIZY6XAXJYJ6","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_16","alias_value":"CIZY6XAXJYJ6CJHG","created_at":"2026-07-05T07:28:49Z"},{"alias_kind":"pith_short_8","alias_value":"CIZY6XAX","created_at":"2026-07-05T07:28:49Z"}],"graph_snapshots":[{"event_id":"sha256:0af82968c45a59dfe009ede3f06adba0552b8e4909532e987d9ac540c29c8593","target":"graph","created_at":"2026-07-05T07:28:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.17356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Android malware still represents the most significant threat to mobile systems. While Machine Learning systems are increasingly used to identify these threats, past studies have revealed that attackers can bypass these detection mechanisms by making subtle changes to Android applications, such as adding specific API calls. These modifications are often referred to as No OPerations (NOP), which ideally should not alter the semantics of the program. However, many NOPs can be spotted and eliminated by refining the app analysis process. This paper proposes a visibility metric that assesses the dif","authors_text":"Davide Maiorca, Diego Soi, Giorgio Giacinto, Harel Berger","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-28T20:48:16Z","title":"Can you See me? On the Visibility of NOPs against Android Malware Detectors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.17356","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1df71e8d63c0fbc60fc743a4d9dc44a2742b7d2e59fb55093570c78521eefcf4","target":"record","created_at":"2026-07-05T07:28:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0404643dcb3a3b17195ae5429b519ae5ba57287b6aa3b2fe4955e9bbfbdd0e5c","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-12-28T20:48:16Z","title_canon_sha256":"6dc7870745e18dc01fd747e36f7ff17a0a20febbc598740df748c784b9c722e2"},"schema_version":"1.0","source":{"id":"2312.17356","kind":"arxiv","version":1}},"canonical_sha256":"12338f5c174e13e124e67b7bb99ee6e19f69974398a1d60c2e286738f21332dd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"12338f5c174e13e124e67b7bb99ee6e19f69974398a1d60c2e286738f21332dd","first_computed_at":"2026-07-05T07:28:49.932243Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:28:49.932243Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HBbwiiDEUMZ1YzTXaUJFCjcrxFD6hmysnWGYo99kzF6ttHgA0cSbidKnHi3nRJjlhDSf0suAwQTzv1tepm3pAg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:28:49.932690Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.17356","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1df71e8d63c0fbc60fc743a4d9dc44a2742b7d2e59fb55093570c78521eefcf4","sha256:0af82968c45a59dfe009ede3f06adba0552b8e4909532e987d9ac540c29c8593"],"state_sha256":"de7d6953bfef68a4c5ed5e34fcf2aad58046415d02a3d92b9842f854ad1bac6b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SzdASHXhumhHJYoOEb+WoRH8/jdWw9iKDeBgF9Kp8ifETBLXRp50jWEr1pZI9lEZwq1Hmsb48uKBfCDlUaKxCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:52:21.218524Z","bundle_sha256":"389e302664e9af82406e52e6579f148b6de465570e3fda3d1e4b4f998891cc3c"}}