{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:CW563XS76B4VDYTBO2CV6EJGPU","short_pith_number":"pith:CW563XS7","canonical_record":{"source":{"id":"2210.10997","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-20T03:42:41Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"cc96eda3dab02bd7dfea5977986615ca8bbbdaf242b9b70e5eebe0258a73c671","abstract_canon_sha256":"98fe972a51d83752d2dbe11166b3d691da327fa86f81fcabba8b524cfdd39dea"},"schema_version":"1.0"},"canonical_sha256":"15bbedde5ff07951e26176855f11267d1bd928463e79504eb308ba207bd584cb","source":{"kind":"arxiv","id":"2210.10997","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.10997","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"arxiv_version","alias_value":"2210.10997v1","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.10997","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_12","alias_value":"CW563XS76B4V","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_16","alias_value":"CW563XS76B4VDYTB","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_8","alias_value":"CW563XS7","created_at":"2026-07-05T05:08:42Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:CW563XS76B4VDYTBO2CV6EJGPU","target":"record","payload":{"canonical_record":{"source":{"id":"2210.10997","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-20T03:42:41Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"cc96eda3dab02bd7dfea5977986615ca8bbbdaf242b9b70e5eebe0258a73c671","abstract_canon_sha256":"98fe972a51d83752d2dbe11166b3d691da327fa86f81fcabba8b524cfdd39dea"},"schema_version":"1.0"},"canonical_sha256":"15bbedde5ff07951e26176855f11267d1bd928463e79504eb308ba207bd584cb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:08:42.885973Z","signature_b64":"oyYd71ObQatNKxOmRM813ndRQOT4LgSLa6fGfVOVrR/5zyTTLdJE+0VCdH4zSkedM+hVh4k2xfafwUJbB9Z3Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"15bbedde5ff07951e26176855f11267d1bd928463e79504eb308ba207bd584cb","last_reissued_at":"2026-07-05T05:08:42.885539Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:08:42.885539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.10997","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TvWw6KcDf3TUmW1ePQ0qrRr1zoo29iWZjMTX8bJNUrXcEl0jy9KLLqbntitkTJ58edXQiGPfozXm2nhadJCfCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:26:50.610049Z"},"content_sha256":"980c5b530f9ae4935fbe01821be6d3a8d734d59df818db3dc08718e73021d58b","schema_version":"1.0","event_id":"sha256:980c5b530f9ae4935fbe01821be6d3a8d734d59df818db3dc08718e73021d58b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:CW563XS76B4VDYTBO2CV6EJGPU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Demystifying Hidden Sensitive Operations in Android apps","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Haipeng Cai, Jacques Klein, John Grundy, Jordan Samhi, Li Li, Tegawend\\'e F. Bissyand\\'e, Xiao Chen, Xiaoyu Sun","submitted_at":"2022-10-20T03:42:41Z","abstract_excerpt":"Security of Android devices is now paramount, given their wide adoption among consumers. As researchers develop tools for statically or dynamically detecting suspicious apps, malware writers regularly update their attack mechanisms to hide malicious behavior implementation. This poses two problems to current research techniques: static analysis approaches, given their over-approximations, can report an overwhelming number of false alarms, while dynamic approaches will miss those behaviors that are hidden through evasion techniques. We propose in this work a static approach specifically targete"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.10997","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.10997/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:08:42Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VDUN0PjvB1wkkd9AfeBPGXgaSqQgg3NZXJ6i88ePFxw1kqtKTtTQJ+EwmzWq28/zscHPFusIJsOAZFcuFCbeCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T20:26:50.610571Z"},"content_sha256":"89f5ecca920519f7a4fdc007594c7f340b5876b49bf2a509ad717163abc7bba7","schema_version":"1.0","event_id":"sha256:89f5ecca920519f7a4fdc007594c7f340b5876b49bf2a509ad717163abc7bba7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CW563XS76B4VDYTBO2CV6EJGPU/bundle.json","state_url":"https://pith.science/pith/CW563XS76B4VDYTBO2CV6EJGPU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CW563XS76B4VDYTBO2CV6EJGPU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T20:26:50Z","links":{"resolver":"https://pith.science/pith/CW563XS76B4VDYTBO2CV6EJGPU","bundle":"https://pith.science/pith/CW563XS76B4VDYTBO2CV6EJGPU/bundle.json","state":"https://pith.science/pith/CW563XS76B4VDYTBO2CV6EJGPU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CW563XS76B4VDYTBO2CV6EJGPU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:CW563XS76B4VDYTBO2CV6EJGPU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98fe972a51d83752d2dbe11166b3d691da327fa86f81fcabba8b524cfdd39dea","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-20T03:42:41Z","title_canon_sha256":"cc96eda3dab02bd7dfea5977986615ca8bbbdaf242b9b70e5eebe0258a73c671"},"schema_version":"1.0","source":{"id":"2210.10997","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.10997","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"arxiv_version","alias_value":"2210.10997v1","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.10997","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_12","alias_value":"CW563XS76B4V","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_16","alias_value":"CW563XS76B4VDYTB","created_at":"2026-07-05T05:08:42Z"},{"alias_kind":"pith_short_8","alias_value":"CW563XS7","created_at":"2026-07-05T05:08:42Z"}],"graph_snapshots":[{"event_id":"sha256:89f5ecca920519f7a4fdc007594c7f340b5876b49bf2a509ad717163abc7bba7","target":"graph","created_at":"2026-07-05T05:08:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.10997/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Security of Android devices is now paramount, given their wide adoption among consumers. As researchers develop tools for statically or dynamically detecting suspicious apps, malware writers regularly update their attack mechanisms to hide malicious behavior implementation. This poses two problems to current research techniques: static analysis approaches, given their over-approximations, can report an overwhelming number of false alarms, while dynamic approaches will miss those behaviors that are hidden through evasion techniques. We propose in this work a static approach specifically targete","authors_text":"Haipeng Cai, Jacques Klein, John Grundy, Jordan Samhi, Li Li, Tegawend\\'e F. Bissyand\\'e, Xiao Chen, Xiaoyu Sun","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-20T03:42:41Z","title":"Demystifying Hidden Sensitive Operations in Android apps"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.10997","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:980c5b530f9ae4935fbe01821be6d3a8d734d59df818db3dc08718e73021d58b","target":"record","created_at":"2026-07-05T05:08:42Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98fe972a51d83752d2dbe11166b3d691da327fa86f81fcabba8b524cfdd39dea","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-20T03:42:41Z","title_canon_sha256":"cc96eda3dab02bd7dfea5977986615ca8bbbdaf242b9b70e5eebe0258a73c671"},"schema_version":"1.0","source":{"id":"2210.10997","kind":"arxiv","version":1}},"canonical_sha256":"15bbedde5ff07951e26176855f11267d1bd928463e79504eb308ba207bd584cb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"15bbedde5ff07951e26176855f11267d1bd928463e79504eb308ba207bd584cb","first_computed_at":"2026-07-05T05:08:42.885539Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:08:42.885539Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"oyYd71ObQatNKxOmRM813ndRQOT4LgSLa6fGfVOVrR/5zyTTLdJE+0VCdH4zSkedM+hVh4k2xfafwUJbB9Z3Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T05:08:42.885973Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.10997","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:980c5b530f9ae4935fbe01821be6d3a8d734d59df818db3dc08718e73021d58b","sha256:89f5ecca920519f7a4fdc007594c7f340b5876b49bf2a509ad717163abc7bba7"],"state_sha256":"47269723582fd1e3165cb8229cab7c7bc661e59f6d40fac39450e832831942ad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"puHgzJf5uP33lXCcysJ9MSeMyLEHXrxHN8VArc0MPmLVEAMKNve4UuIBGzBOs1pOpDEehng7nyy6XCWGI3WlAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T20:26:50.615475Z","bundle_sha256":"b6f4574b985f92c5b809dc4e702d961b7ea19596773b33934a9189f809d2a02c"}}