{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:G5CLBA7ABRBB6KS5HYTSG7SBRO","short_pith_number":"pith:G5CLBA7A","canonical_record":{"source":{"id":"1709.06654","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-19T21:39:46Z","cross_cats_sorted":[],"title_canon_sha256":"384889002bb033598e2c734a0e0192e62bb71f8f865813930cb75833fa187f22","abstract_canon_sha256":"e563ca68c132cc685ca0894256d5a9654b00fc5e4e48a7b7b3404b702b5099df"},"schema_version":"1.0"},"canonical_sha256":"3744b083e00c421f2a5d3e27237e418b8a385a523d44e15395275b6d09d53e3e","source":{"kind":"arxiv","id":"1709.06654","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.06654","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"arxiv_version","alias_value":"1709.06654v2","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.06654","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"pith_short_12","alias_value":"G5CLBA7ABRBB","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"G5CLBA7ABRBB6KS5","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"G5CLBA7A","created_at":"2026-05-18T12:31:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:G5CLBA7ABRBB6KS5HYTSG7SBRO","target":"record","payload":{"canonical_record":{"source":{"id":"1709.06654","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-19T21:39:46Z","cross_cats_sorted":[],"title_canon_sha256":"384889002bb033598e2c734a0e0192e62bb71f8f865813930cb75833fa187f22","abstract_canon_sha256":"e563ca68c132cc685ca0894256d5a9654b00fc5e4e48a7b7b3404b702b5099df"},"schema_version":"1.0"},"canonical_sha256":"3744b083e00c421f2a5d3e27237e418b8a385a523d44e15395275b6d09d53e3e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:55:43.204963Z","signature_b64":"VO9UVLoFTt0H4+4HkAMldaI/LqX1RBne2lf2J8sct92svbPB9QJJ24VBjgVlV4w3Y1D1U8R4HynzuAfjq1GqAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3744b083e00c421f2a5d3e27237e418b8a385a523d44e15395275b6d09d53e3e","last_reissued_at":"2026-05-17T23:55:43.204419Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:55:43.204419Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1709.06654","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:55:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q+huKSy8QXgnx70hToO8XsCrlzXw4kXr24p2Xw+XroJ5fb+oHSVcDyGcsXzviXWWLFMa41NlR/ZuBQn2UifrAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T02:32:54.674421Z"},"content_sha256":"827e9c0274de2f188023fb6d5aa0ae6bc2f6824a4131b5e9b8ddbe231b383b73","schema_version":"1.0","event_id":"sha256:827e9c0274de2f188023fb6d5aa0ae6bc2f6824a4131b5e9b8ddbe231b383b73"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:G5CLBA7ABRBB6KS5HYTSG7SBRO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Keeping Context In Mind: Automating Mobile App Access Control with User Interface Inspection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hao Fu, Pransant Mohapatra, Sencun Zhu, Zizhan Zheng","submitted_at":"2017-09-19T21:39:46Z","abstract_excerpt":"Recent studies observe that app foreground is the most striking component that influences the access control decisions in mobile platform, as users tend to deny permission requests lacking visible evidence. However, none of the existing permission models provides a systematic approach that can automatically answer the question: Is the resource access indicated by app foreground? In this work, we present the design, implementation, and evaluation of COSMOS, a context-aware mediation system that bridges the semantic gap between foreground interaction and background access, in order to protect sy"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.06654","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:55:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mmwfmhSUNMhlmCfB7UFfk6b9H3jrFNlwob8cUrn39DNBoJucUlCwROY7qucA0r+WdulJxdvnxWc3OAagncXTAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-31T02:32:54.675208Z"},"content_sha256":"a1fefb2f7945039c707be8fc1007b1e4af2cd056c745d08d391b8a80c0efd4ac","schema_version":"1.0","event_id":"sha256:a1fefb2f7945039c707be8fc1007b1e4af2cd056c745d08d391b8a80c0efd4ac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/bundle.json","state_url":"https://pith.science/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-31T02:32:54Z","links":{"resolver":"https://pith.science/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO","bundle":"https://pith.science/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/bundle.json","state":"https://pith.science/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G5CLBA7ABRBB6KS5HYTSG7SBRO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:G5CLBA7ABRBB6KS5HYTSG7SBRO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e563ca68c132cc685ca0894256d5a9654b00fc5e4e48a7b7b3404b702b5099df","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-19T21:39:46Z","title_canon_sha256":"384889002bb033598e2c734a0e0192e62bb71f8f865813930cb75833fa187f22"},"schema_version":"1.0","source":{"id":"1709.06654","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1709.06654","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"arxiv_version","alias_value":"1709.06654v2","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1709.06654","created_at":"2026-05-17T23:55:43Z"},{"alias_kind":"pith_short_12","alias_value":"G5CLBA7ABRBB","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_16","alias_value":"G5CLBA7ABRBB6KS5","created_at":"2026-05-18T12:31:15Z"},{"alias_kind":"pith_short_8","alias_value":"G5CLBA7A","created_at":"2026-05-18T12:31:15Z"}],"graph_snapshots":[{"event_id":"sha256:a1fefb2f7945039c707be8fc1007b1e4af2cd056c745d08d391b8a80c0efd4ac","target":"graph","created_at":"2026-05-17T23:55:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recent studies observe that app foreground is the most striking component that influences the access control decisions in mobile platform, as users tend to deny permission requests lacking visible evidence. However, none of the existing permission models provides a systematic approach that can automatically answer the question: Is the resource access indicated by app foreground? In this work, we present the design, implementation, and evaluation of COSMOS, a context-aware mediation system that bridges the semantic gap between foreground interaction and background access, in order to protect sy","authors_text":"Hao Fu, Pransant Mohapatra, Sencun Zhu, Zizhan Zheng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-19T21:39:46Z","title":"Keeping Context In Mind: Automating Mobile App Access Control with User Interface Inspection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1709.06654","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:827e9c0274de2f188023fb6d5aa0ae6bc2f6824a4131b5e9b8ddbe231b383b73","target":"record","created_at":"2026-05-17T23:55:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e563ca68c132cc685ca0894256d5a9654b00fc5e4e48a7b7b3404b702b5099df","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-09-19T21:39:46Z","title_canon_sha256":"384889002bb033598e2c734a0e0192e62bb71f8f865813930cb75833fa187f22"},"schema_version":"1.0","source":{"id":"1709.06654","kind":"arxiv","version":2}},"canonical_sha256":"3744b083e00c421f2a5d3e27237e418b8a385a523d44e15395275b6d09d53e3e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3744b083e00c421f2a5d3e27237e418b8a385a523d44e15395275b6d09d53e3e","first_computed_at":"2026-05-17T23:55:43.204419Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:55:43.204419Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VO9UVLoFTt0H4+4HkAMldaI/LqX1RBne2lf2J8sct92svbPB9QJJ24VBjgVlV4w3Y1D1U8R4HynzuAfjq1GqAg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:55:43.204963Z","signed_message":"canonical_sha256_bytes"},"source_id":"1709.06654","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:827e9c0274de2f188023fb6d5aa0ae6bc2f6824a4131b5e9b8ddbe231b383b73","sha256:a1fefb2f7945039c707be8fc1007b1e4af2cd056c745d08d391b8a80c0efd4ac"],"state_sha256":"236b8d6bd28bfde0bdab7e7504da6c5be300b630ba9ac8e17b2b3e18aeec19d8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SPIGlpbyPVjlN+Q5gUF/4nTbfJswQNN/QrLcK1e4kYVJxvDqey4Qt9cp1/LyplzhQmTp3mFD2H4vKILtFXrbDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-31T02:32:54.679223Z","bundle_sha256":"00fb4df0337c82e7ba562be6af07c2aa837ca6e365dbe239fa2135469aa99561"}}