{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:EHXG7PAIQFOSOLGK3WH5DB5QUX","short_pith_number":"pith:EHXG7PAI","canonical_record":{"source":{"id":"2406.18894","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-27T05:14:34Z","cross_cats_sorted":[],"title_canon_sha256":"4d2a8e9c97f6d94c6b807afb7554c1e0071197011723b2a86e9c5505b5b28f5c","abstract_canon_sha256":"f9f8cfd5574fb2c381cdeec5858e916d7444d962736db34b216a185d3663d4b6"},"schema_version":"1.0"},"canonical_sha256":"21ee6fbc08815d272ccadd8fd187b0a5d1033234721d5c06f6b45a91710613e9","source":{"kind":"arxiv","id":"2406.18894","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18894","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18894v1","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18894","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_12","alias_value":"EHXG7PAIQFOS","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_16","alias_value":"EHXG7PAIQFOSOLGK","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_8","alias_value":"EHXG7PAI","created_at":"2026-07-05T10:32:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:EHXG7PAIQFOSOLGK3WH5DB5QUX","target":"record","payload":{"canonical_record":{"source":{"id":"2406.18894","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-27T05:14:34Z","cross_cats_sorted":[],"title_canon_sha256":"4d2a8e9c97f6d94c6b807afb7554c1e0071197011723b2a86e9c5505b5b28f5c","abstract_canon_sha256":"f9f8cfd5574fb2c381cdeec5858e916d7444d962736db34b216a185d3663d4b6"},"schema_version":"1.0"},"canonical_sha256":"21ee6fbc08815d272ccadd8fd187b0a5d1033234721d5c06f6b45a91710613e9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:32:27.798213Z","signature_b64":"tCgsNAtaoaykT+LoQu3XrE5nO5HbMoCY886k92RDQK56HD9VmRQHM2rF4+Iw+YrF0mcLemU4evzq1GYSv9nuCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"21ee6fbc08815d272ccadd8fd187b0a5d1033234721d5c06f6b45a91710613e9","last_reissued_at":"2026-07-05T10:32:27.797330Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:32:27.797330Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2406.18894","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RkMhHikvcUzX2r313pxYxqrEM+gOt6EygUfHhDbY7DvdyeIbL67nGZFl7grXYFGnHrg2g2AP2CTAVldiDGJPDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:10:32.500368Z"},"content_sha256":"1bfa7d232e3010fe290ff7ec68dc979da907b0c1821b1d80c7552f4948198c6a","schema_version":"1.0","event_id":"sha256:1bfa7d232e3010fe290ff7ec68dc979da907b0c1821b1d80c7552f4948198c6a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:EHXG7PAIQFOSOLGK3WH5DB5QUX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Assessing the Effectiveness of LLMs in Android Application Vulnerability Analysis","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Georgios Kambourakis, Georgios Karopoulos, Vasileios Kouliaridis","submitted_at":"2024-06-27T05:14:34Z","abstract_excerpt":"The increasing frequency of attacks on Android applications coupled with the recent popularity of large language models (LLMs) necessitates a comprehensive understanding of the capabilities of the latter in identifying potential vulnerabilities, which is key to mitigate the overall risk. To this end, the work at hand compares the ability of nine state-of-the-art LLMs to detect Android code vulnerabilities listed in the latest Open Worldwide Application Security Project (OWASP) Mobile Top 10. Each LLM was evaluated against an open dataset of over 100 vulnerable code samples, including obfuscate"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18894","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2406.18894/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U6KuiZf8fVlotr59C9XzrJ5ja0dhViNA/iwa3tB+fpRAuti+Wzfbiz7G8RyOajNGgmAsWeb+WwKxGtNezgiODw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T04:10:32.500873Z"},"content_sha256":"654a7b777308d5fe7e423eea5b1ca10a164178f1aeca1f0a8dce12cf2558cbaf","schema_version":"1.0","event_id":"sha256:654a7b777308d5fe7e423eea5b1ca10a164178f1aeca1f0a8dce12cf2558cbaf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/bundle.json","state_url":"https://pith.science/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T04:10:32Z","links":{"resolver":"https://pith.science/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX","bundle":"https://pith.science/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/bundle.json","state":"https://pith.science/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EHXG7PAIQFOSOLGK3WH5DB5QUX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:EHXG7PAIQFOSOLGK3WH5DB5QUX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f9f8cfd5574fb2c381cdeec5858e916d7444d962736db34b216a185d3663d4b6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-27T05:14:34Z","title_canon_sha256":"4d2a8e9c97f6d94c6b807afb7554c1e0071197011723b2a86e9c5505b5b28f5c"},"schema_version":"1.0","source":{"id":"2406.18894","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2406.18894","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"arxiv_version","alias_value":"2406.18894v1","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2406.18894","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_12","alias_value":"EHXG7PAIQFOS","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_16","alias_value":"EHXG7PAIQFOSOLGK","created_at":"2026-07-05T10:32:27Z"},{"alias_kind":"pith_short_8","alias_value":"EHXG7PAI","created_at":"2026-07-05T10:32:27Z"}],"graph_snapshots":[{"event_id":"sha256:654a7b777308d5fe7e423eea5b1ca10a164178f1aeca1f0a8dce12cf2558cbaf","target":"graph","created_at":"2026-07-05T10:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2406.18894/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The increasing frequency of attacks on Android applications coupled with the recent popularity of large language models (LLMs) necessitates a comprehensive understanding of the capabilities of the latter in identifying potential vulnerabilities, which is key to mitigate the overall risk. To this end, the work at hand compares the ability of nine state-of-the-art LLMs to detect Android code vulnerabilities listed in the latest Open Worldwide Application Security Project (OWASP) Mobile Top 10. Each LLM was evaluated against an open dataset of over 100 vulnerable code samples, including obfuscate","authors_text":"Georgios Kambourakis, Georgios Karopoulos, Vasileios Kouliaridis","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-27T05:14:34Z","title":"Assessing the Effectiveness of LLMs in Android Application Vulnerability Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2406.18894","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1bfa7d232e3010fe290ff7ec68dc979da907b0c1821b1d80c7552f4948198c6a","target":"record","created_at":"2026-07-05T10:32:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f9f8cfd5574fb2c381cdeec5858e916d7444d962736db34b216a185d3663d4b6","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-06-27T05:14:34Z","title_canon_sha256":"4d2a8e9c97f6d94c6b807afb7554c1e0071197011723b2a86e9c5505b5b28f5c"},"schema_version":"1.0","source":{"id":"2406.18894","kind":"arxiv","version":1}},"canonical_sha256":"21ee6fbc08815d272ccadd8fd187b0a5d1033234721d5c06f6b45a91710613e9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"21ee6fbc08815d272ccadd8fd187b0a5d1033234721d5c06f6b45a91710613e9","first_computed_at":"2026-07-05T10:32:27.797330Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:32:27.797330Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tCgsNAtaoaykT+LoQu3XrE5nO5HbMoCY886k92RDQK56HD9VmRQHM2rF4+Iw+YrF0mcLemU4evzq1GYSv9nuCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:32:27.798213Z","signed_message":"canonical_sha256_bytes"},"source_id":"2406.18894","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1bfa7d232e3010fe290ff7ec68dc979da907b0c1821b1d80c7552f4948198c6a","sha256:654a7b777308d5fe7e423eea5b1ca10a164178f1aeca1f0a8dce12cf2558cbaf"],"state_sha256":"0f19cb5ad592b62a275cac59c16766dce015c37e97248c92448e7d2bed74f748"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OiI5i0rH0ANlaTW0WVJvUm/mrC4UbwDh+21UeXZV74r7ius1M5AJGK8qufWZHsOSWibDbMdR/UdAA1urODEmAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T04:10:32.505129Z","bundle_sha256":"cd41132def87dbb95c27725a37c98902d0198b8143df4765d10f324a340c777a"}}