{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:E2A5KYRVS6UUXMCPOFOYJHVWZJ","short_pith_number":"pith:E2A5KYRV","canonical_record":{"source":{"id":"1811.12713","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-30T10:44:36Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"e8b7f0fc4ad55492d558d0e517368ab54f621cf58bbe30baa9c164925a2b640f","abstract_canon_sha256":"e958196ee4406fce30c54be68e6459f869a05b162ab3fb2b8846ceef5d5acccb"},"schema_version":"1.0"},"canonical_sha256":"2681d5623597a94bb04f715d849eb6ca54c468cad652ba1f72306927f41de2ae","source":{"kind":"arxiv","id":"1811.12713","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.12713","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"arxiv_version","alias_value":"1811.12713v2","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.12713","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"pith_short_12","alias_value":"E2A5KYRVS6UU","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_16","alias_value":"E2A5KYRVS6UUXMCP","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_8","alias_value":"E2A5KYRV","created_at":"2026-05-18T12:32:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:E2A5KYRVS6UUXMCPOFOYJHVWZJ","target":"record","payload":{"canonical_record":{"source":{"id":"1811.12713","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-30T10:44:36Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"e8b7f0fc4ad55492d558d0e517368ab54f621cf58bbe30baa9c164925a2b640f","abstract_canon_sha256":"e958196ee4406fce30c54be68e6459f869a05b162ab3fb2b8846ceef5d5acccb"},"schema_version":"1.0"},"canonical_sha256":"2681d5623597a94bb04f715d849eb6ca54c468cad652ba1f72306927f41de2ae","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:58:47.138107Z","signature_b64":"sUlgjkDqXyDudPtXj+YbYwZzc00qc8AvWTvgQ+DUK7mytXBkjOVi0PSX3+7oWfSxO4MB5EkF9canQZ+bdBHTCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2681d5623597a94bb04f715d849eb6ca54c468cad652ba1f72306927f41de2ae","last_reissued_at":"2026-05-17T23:58:47.137676Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:58:47.137676Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.12713","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jgyrb1vOcoBB+Rlp6aDKmII7GAZTCnEbi8uo/8XCJHgjra1qykQlPRM2ZRSvnXRDNo/SvRgmZ38Omlst1l1zDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T12:51:05.865700Z"},"content_sha256":"034515654ff0a8a47e36b80b120598b3245e49962b868f6d42ffe79c6d6e5325","schema_version":"1.0","event_id":"sha256:034515654ff0a8a47e36b80b120598b3245e49962b868f6d42ffe79c6d6e5325"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:E2A5KYRVS6UUXMCPOFOYJHVWZJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security Code Smells in Android ICC","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Mohammad Ghafari, Oscar Nierstrasz, Pascal Gadient, Patrick Frischknecht","submitted_at":"2018-11-30T10:44:36Z","abstract_excerpt":"Android Inter-Component Communication (ICC) is complex, largely unconstrained, and hard for developers to understand. As a consequence, ICC is a common source of security vulnerability in Android apps. To promote secure programming practices, we have reviewed related research, and identified avoidable ICC vulnerabilities in Android-run devices and the security code smells that indicate their presence. We explain the vulnerabilities and their corresponding smells, and we discuss how they can be eliminated or mitigated during development. We present a lightweight static analysis tool on top of A"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.12713","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:58:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bKYJsRg8u6Cqk4nXrhOBfssPINDOHCk4w1fWEeXeldXTALsfXMtFngFmrENfNoi9EDm7bZ2nW1HNUM+K8F+tBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-01T12:51:05.866049Z"},"content_sha256":"5904a5214bdf6aecf1d0c883ca3d49aaa464fe69001fa8cf735bffe437d83615","schema_version":"1.0","event_id":"sha256:5904a5214bdf6aecf1d0c883ca3d49aaa464fe69001fa8cf735bffe437d83615"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/bundle.json","state_url":"https://pith.science/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-01T12:51:05Z","links":{"resolver":"https://pith.science/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ","bundle":"https://pith.science/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/bundle.json","state":"https://pith.science/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/E2A5KYRVS6UUXMCPOFOYJHVWZJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:E2A5KYRVS6UUXMCPOFOYJHVWZJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e958196ee4406fce30c54be68e6459f869a05b162ab3fb2b8846ceef5d5acccb","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-30T10:44:36Z","title_canon_sha256":"e8b7f0fc4ad55492d558d0e517368ab54f621cf58bbe30baa9c164925a2b640f"},"schema_version":"1.0","source":{"id":"1811.12713","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.12713","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"arxiv_version","alias_value":"1811.12713v2","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.12713","created_at":"2026-05-17T23:58:47Z"},{"alias_kind":"pith_short_12","alias_value":"E2A5KYRVS6UU","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_16","alias_value":"E2A5KYRVS6UUXMCP","created_at":"2026-05-18T12:32:19Z"},{"alias_kind":"pith_short_8","alias_value":"E2A5KYRV","created_at":"2026-05-18T12:32:19Z"}],"graph_snapshots":[{"event_id":"sha256:5904a5214bdf6aecf1d0c883ca3d49aaa464fe69001fa8cf735bffe437d83615","target":"graph","created_at":"2026-05-17T23:58:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Android Inter-Component Communication (ICC) is complex, largely unconstrained, and hard for developers to understand. As a consequence, ICC is a common source of security vulnerability in Android apps. To promote secure programming practices, we have reviewed related research, and identified avoidable ICC vulnerabilities in Android-run devices and the security code smells that indicate their presence. We explain the vulnerabilities and their corresponding smells, and we discuss how they can be eliminated or mitigated during development. We present a lightweight static analysis tool on top of A","authors_text":"Mohammad Ghafari, Oscar Nierstrasz, Pascal Gadient, Patrick Frischknecht","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-30T10:44:36Z","title":"Security Code Smells in Android ICC"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.12713","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:034515654ff0a8a47e36b80b120598b3245e49962b868f6d42ffe79c6d6e5325","target":"record","created_at":"2026-05-17T23:58:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e958196ee4406fce30c54be68e6459f869a05b162ab3fb2b8846ceef5d5acccb","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-30T10:44:36Z","title_canon_sha256":"e8b7f0fc4ad55492d558d0e517368ab54f621cf58bbe30baa9c164925a2b640f"},"schema_version":"1.0","source":{"id":"1811.12713","kind":"arxiv","version":2}},"canonical_sha256":"2681d5623597a94bb04f715d849eb6ca54c468cad652ba1f72306927f41de2ae","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2681d5623597a94bb04f715d849eb6ca54c468cad652ba1f72306927f41de2ae","first_computed_at":"2026-05-17T23:58:47.137676Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:58:47.137676Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sUlgjkDqXyDudPtXj+YbYwZzc00qc8AvWTvgQ+DUK7mytXBkjOVi0PSX3+7oWfSxO4MB5EkF9canQZ+bdBHTCg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:58:47.138107Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.12713","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:034515654ff0a8a47e36b80b120598b3245e49962b868f6d42ffe79c6d6e5325","sha256:5904a5214bdf6aecf1d0c883ca3d49aaa464fe69001fa8cf735bffe437d83615"],"state_sha256":"45a5bfeca012aa3d3cbd75af6dfe4e08c8d85e5f4cd559f3866b13661a8b1935"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hjP7e9IsNUSGXwE7fIuwng5D7DLz9RygY3ogmvCrfMx152xW4AoBrCGjJEU5cLUx5U1jpU9Y6yIpOMyBbL54Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-01T12:51:05.867980Z","bundle_sha256":"b9d44ed5359645d84af5e118c8f04f8b4293ca61be19445f739b2ed5e64ee415"}}