{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:FGXDNFMO3PXKM2CF755EBTI5QI","short_pith_number":"pith:FGXDNFMO","canonical_record":{"source":{"id":"1706.08056","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-25T08:18:38Z","cross_cats_sorted":[],"title_canon_sha256":"14bffe732e10ab2fdb32a36d889b8021e67eb9ccb75bc6d7c6416313d298e12c","abstract_canon_sha256":"783cc58f14e03b583f16bc192bc552c27adae75adcef3310d9647bdee25cf889"},"schema_version":"1.0"},"canonical_sha256":"29ae36958edbeea66845ff7a40cd1d821f644ca1a1d9a3add8f9ff0ac391d9f4","source":{"kind":"arxiv","id":"1706.08056","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.08056","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"arxiv_version","alias_value":"1706.08056v1","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.08056","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"pith_short_12","alias_value":"FGXDNFMO3PXK","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"FGXDNFMO3PXKM2CF","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"FGXDNFMO","created_at":"2026-05-18T12:31:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:FGXDNFMO3PXKM2CF755EBTI5QI","target":"record","payload":{"canonical_record":{"source":{"id":"1706.08056","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-25T08:18:38Z","cross_cats_sorted":[],"title_canon_sha256":"14bffe732e10ab2fdb32a36d889b8021e67eb9ccb75bc6d7c6416313d298e12c","abstract_canon_sha256":"783cc58f14e03b583f16bc192bc552c27adae75adcef3310d9647bdee25cf889"},"schema_version":"1.0"},"canonical_sha256":"29ae36958edbeea66845ff7a40cd1d821f644ca1a1d9a3add8f9ff0ac391d9f4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:41:43.706639Z","signature_b64":"kT3eDRab6AHpNbWoNVhtGDRyT29zsdwX1xaRI82RTfYn1vnE8cTw6axp/NlohEbVQe+0KUo+MlXuzxJ+EVhMDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"29ae36958edbeea66845ff7a40cd1d821f644ca1a1d9a3add8f9ff0ac391d9f4","last_reissued_at":"2026-05-18T00:41:43.705977Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:41:43.705977Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1706.08056","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"V0x5HCmlW4+2ykIQbg2SHQPnb/um+pdpE7Jm2IjtA1LZvtRMOESHfJZwR7wEMUuAqL5eJDZ6qb6wGlFrkJDsBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T20:01:38.712768Z"},"content_sha256":"043a854250680a979a80cfe9f5b4b40ee6402a31e3e8faad4b455a0671594371","schema_version":"1.0","event_id":"sha256:043a854250680a979a80cfe9f5b4b40ee6402a31e3e8faad4b455a0671594371"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:FGXDNFMO3PXKM2CF755EBTI5QI","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Network Traffic Forensics on Firefox Mobile OS: Facebook, Twitter and Telegram as Case Studies","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ali Dehghantanha, Mohd Najwadi Yusoff, Ramlan Mahmod","submitted_at":"2017-06-25T08:18:38Z","abstract_excerpt":"Development of mobile web-centric OS such as Firefox OS has created new challenges, and opportunities for digital investigators. Network traffic forensic plays an important role in cybercrime investigation to detect subject(s) and object(s) of the crime. In this chapter, we detect and analyze residual network traffic artefacts of Firefox OS in relation to two popular social networking applications (Facebook and Twitter) and one instant messaging application (Telegram). We utilized a Firefox OS simulator to generate relevant traffic while all communication data were captured using network monit"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.08056","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:41:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"y4SktHFMoUdFl3DdJRFJpwvoqJoBFQkO15jH3QRyw0GcK3BFDrV+f7eEWvfzrXGQxOnltvEP24E4xTCRIJn0AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-05T20:01:38.713495Z"},"content_sha256":"fa87021a922ba54671412f78a074c91eb19006660fe0a4b55735ad1cf9f04e26","schema_version":"1.0","event_id":"sha256:fa87021a922ba54671412f78a074c91eb19006660fe0a4b55735ad1cf9f04e26"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FGXDNFMO3PXKM2CF755EBTI5QI/bundle.json","state_url":"https://pith.science/pith/FGXDNFMO3PXKM2CF755EBTI5QI/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FGXDNFMO3PXKM2CF755EBTI5QI/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-05T20:01:38Z","links":{"resolver":"https://pith.science/pith/FGXDNFMO3PXKM2CF755EBTI5QI","bundle":"https://pith.science/pith/FGXDNFMO3PXKM2CF755EBTI5QI/bundle.json","state":"https://pith.science/pith/FGXDNFMO3PXKM2CF755EBTI5QI/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FGXDNFMO3PXKM2CF755EBTI5QI/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:FGXDNFMO3PXKM2CF755EBTI5QI","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"783cc58f14e03b583f16bc192bc552c27adae75adcef3310d9647bdee25cf889","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-25T08:18:38Z","title_canon_sha256":"14bffe732e10ab2fdb32a36d889b8021e67eb9ccb75bc6d7c6416313d298e12c"},"schema_version":"1.0","source":{"id":"1706.08056","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1706.08056","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"arxiv_version","alias_value":"1706.08056v1","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1706.08056","created_at":"2026-05-18T00:41:43Z"},{"alias_kind":"pith_short_12","alias_value":"FGXDNFMO3PXK","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"FGXDNFMO3PXKM2CF","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"FGXDNFMO","created_at":"2026-05-18T12:31:15Z"}],"graph_snapshots":[{"event_id":"sha256:fa87021a922ba54671412f78a074c91eb19006660fe0a4b55735ad1cf9f04e26","target":"graph","created_at":"2026-05-18T00:41:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Development of mobile web-centric OS such as Firefox OS has created new challenges, and opportunities for digital investigators. Network traffic forensic plays an important role in cybercrime investigation to detect subject(s) and object(s) of the crime. In this chapter, we detect and analyze residual network traffic artefacts of Firefox OS in relation to two popular social networking applications (Facebook and Twitter) and one instant messaging application (Telegram). We utilized a Firefox OS simulator to generate relevant traffic while all communication data were captured using network monit","authors_text":"Ali Dehghantanha, Mohd Najwadi Yusoff, Ramlan Mahmod","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-25T08:18:38Z","title":"Network Traffic Forensics on Firefox Mobile OS: Facebook, Twitter and Telegram as Case Studies"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1706.08056","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:043a854250680a979a80cfe9f5b4b40ee6402a31e3e8faad4b455a0671594371","target":"record","created_at":"2026-05-18T00:41:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"783cc58f14e03b583f16bc192bc552c27adae75adcef3310d9647bdee25cf889","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2017-06-25T08:18:38Z","title_canon_sha256":"14bffe732e10ab2fdb32a36d889b8021e67eb9ccb75bc6d7c6416313d298e12c"},"schema_version":"1.0","source":{"id":"1706.08056","kind":"arxiv","version":1}},"canonical_sha256":"29ae36958edbeea66845ff7a40cd1d821f644ca1a1d9a3add8f9ff0ac391d9f4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"29ae36958edbeea66845ff7a40cd1d821f644ca1a1d9a3add8f9ff0ac391d9f4","first_computed_at":"2026-05-18T00:41:43.705977Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:41:43.705977Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kT3eDRab6AHpNbWoNVhtGDRyT29zsdwX1xaRI82RTfYn1vnE8cTw6axp/NlohEbVQe+0KUo+MlXuzxJ+EVhMDQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:41:43.706639Z","signed_message":"canonical_sha256_bytes"},"source_id":"1706.08056","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:043a854250680a979a80cfe9f5b4b40ee6402a31e3e8faad4b455a0671594371","sha256:fa87021a922ba54671412f78a074c91eb19006660fe0a4b55735ad1cf9f04e26"],"state_sha256":"2214bbcef745eb3efe943824b07fc4815f14c104bf9465166255e34b2330bdd2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vIgzTZHGh9A7qH5uqt/CadfH9bY1ga7QbZgMvP3+OISYS8GOFBp6MiIW1CudAZuhfMrj1E5MHQMobl8zqq6KDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-05T20:01:38.717471Z","bundle_sha256":"d58db98b7e8c90fea013b437d3b71b1ca18d0d741e502c46c413fb5921f2b77e"}}