{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:LRQKUAZDTAYIKYF4CD5ADB2FEZ","short_pith_number":"pith:LRQKUAZD","canonical_record":{"source":{"id":"1811.08520","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-11-20T22:39:10Z","cross_cats_sorted":[],"title_canon_sha256":"399b29745dee3085a4d6729f8f0ac28df02073475898d73cd42a3c7400d0ea52","abstract_canon_sha256":"4bf63ef9abb93b591735ac038d11aad3e45ed779f1d862afd111647c087532d2"},"schema_version":"1.0"},"canonical_sha256":"5c60aa032398308560bc10fa01874526727f35b7312d7815ecfa33b988faf909","source":{"kind":"arxiv","id":"1811.08520","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.08520","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"arxiv_version","alias_value":"1811.08520v1","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.08520","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"pith_short_12","alias_value":"LRQKUAZDTAYI","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"LRQKUAZDTAYIKYF4","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"LRQKUAZD","created_at":"2026-05-18T12:32:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:LRQKUAZDTAYIKYF4CD5ADB2FEZ","target":"record","payload":{"canonical_record":{"source":{"id":"1811.08520","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-11-20T22:39:10Z","cross_cats_sorted":[],"title_canon_sha256":"399b29745dee3085a4d6729f8f0ac28df02073475898d73cd42a3c7400d0ea52","abstract_canon_sha256":"4bf63ef9abb93b591735ac038d11aad3e45ed779f1d862afd111647c087532d2"},"schema_version":"1.0"},"canonical_sha256":"5c60aa032398308560bc10fa01874526727f35b7312d7815ecfa33b988faf909","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:00:12.325656Z","signature_b64":"USuT26JQjyWueEAwhoATrlnvKL51lsTzajORgB3K72KHfzAqPrSdu7Bih51LgaVx7n3c8xXiU0wNyaGnkroTBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c60aa032398308560bc10fa01874526727f35b7312d7815ecfa33b988faf909","last_reissued_at":"2026-05-18T00:00:12.325052Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:00:12.325052Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.08520","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cJ3uwv1pbt1m8JPQT/b9IfEbLcvFNUbEuZIRkj+YQ/o00ghxiU1pV7EgySYUqwqzj6G84PgqvCNUglrVmUjpDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-20T15:21:10.913655Z"},"content_sha256":"e80e855faa8047355af1c974fbbfe45b5735106ab234c3fb94b34b3499e3bd94","schema_version":"1.0","event_id":"sha256:e80e855faa8047355af1c974fbbfe45b5735106ab234c3fb94b34b3499e3bd94"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:LRQKUAZDTAYIKYF4CD5ADB2FEZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Rebooting Research on Detecting Repackaged Android Apps: Literature Review and Benchmark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.SE","authors_text":"Jacques Klein, Li Li, Tegawend\\'e Bissyand\\'e","submitted_at":"2018-11-20T22:39:10Z","abstract_excerpt":"Repackaging is a serious threat to the Android ecosystem as it deprives app developers of their benefits, contributes to spreading malware on users' devices, and increases the workload of market maintainers. In the space of six years, the research around this specific issue has produced 57 approaches which do not readily scale to millions of apps or are only evaluated on private datasets without, in general, tool support available to the community. Through a systematic literature review of the subject, we argue that the research is slowing down, where many state-of-the-art approaches have repo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.08520","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:00:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"P/G7/rJ8AVzK83eDvCsRgsP3/fDdENfj4JZm02cJ0abMJUWfWiCgVKdS1qGLLT+WSMJ3wzpUCJ0nk1pjm8ZlCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-20T15:21:10.914041Z"},"content_sha256":"6652fe62467e176d231a3db2fc6f788f67cea1811332085b23533f6e341ed57f","schema_version":"1.0","event_id":"sha256:6652fe62467e176d231a3db2fc6f788f67cea1811332085b23533f6e341ed57f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/bundle.json","state_url":"https://pith.science/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-20T15:21:10Z","links":{"resolver":"https://pith.science/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ","bundle":"https://pith.science/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/bundle.json","state":"https://pith.science/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LRQKUAZDTAYIKYF4CD5ADB2FEZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:LRQKUAZDTAYIKYF4CD5ADB2FEZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4bf63ef9abb93b591735ac038d11aad3e45ed779f1d862afd111647c087532d2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-11-20T22:39:10Z","title_canon_sha256":"399b29745dee3085a4d6729f8f0ac28df02073475898d73cd42a3c7400d0ea52"},"schema_version":"1.0","source":{"id":"1811.08520","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.08520","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"arxiv_version","alias_value":"1811.08520v1","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.08520","created_at":"2026-05-18T00:00:12Z"},{"alias_kind":"pith_short_12","alias_value":"LRQKUAZDTAYI","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_16","alias_value":"LRQKUAZDTAYIKYF4","created_at":"2026-05-18T12:32:37Z"},{"alias_kind":"pith_short_8","alias_value":"LRQKUAZD","created_at":"2026-05-18T12:32:37Z"}],"graph_snapshots":[{"event_id":"sha256:6652fe62467e176d231a3db2fc6f788f67cea1811332085b23533f6e341ed57f","target":"graph","created_at":"2026-05-18T00:00:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Repackaging is a serious threat to the Android ecosystem as it deprives app developers of their benefits, contributes to spreading malware on users' devices, and increases the workload of market maintainers. In the space of six years, the research around this specific issue has produced 57 approaches which do not readily scale to millions of apps or are only evaluated on private datasets without, in general, tool support available to the community. Through a systematic literature review of the subject, we argue that the research is slowing down, where many state-of-the-art approaches have repo","authors_text":"Jacques Klein, Li Li, Tegawend\\'e Bissyand\\'e","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-11-20T22:39:10Z","title":"Rebooting Research on Detecting Repackaged Android Apps: Literature Review and Benchmark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.08520","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e80e855faa8047355af1c974fbbfe45b5735106ab234c3fb94b34b3499e3bd94","target":"record","created_at":"2026-05-18T00:00:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4bf63ef9abb93b591735ac038d11aad3e45ed779f1d862afd111647c087532d2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.SE","submitted_at":"2018-11-20T22:39:10Z","title_canon_sha256":"399b29745dee3085a4d6729f8f0ac28df02073475898d73cd42a3c7400d0ea52"},"schema_version":"1.0","source":{"id":"1811.08520","kind":"arxiv","version":1}},"canonical_sha256":"5c60aa032398308560bc10fa01874526727f35b7312d7815ecfa33b988faf909","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c60aa032398308560bc10fa01874526727f35b7312d7815ecfa33b988faf909","first_computed_at":"2026-05-18T00:00:12.325052Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:00:12.325052Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"USuT26JQjyWueEAwhoATrlnvKL51lsTzajORgB3K72KHfzAqPrSdu7Bih51LgaVx7n3c8xXiU0wNyaGnkroTBw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:00:12.325656Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.08520","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e80e855faa8047355af1c974fbbfe45b5735106ab234c3fb94b34b3499e3bd94","sha256:6652fe62467e176d231a3db2fc6f788f67cea1811332085b23533f6e341ed57f"],"state_sha256":"151c8d10f61af605fdacd7bee911644f9fd4bca497b2ae24c852d42c1bcc40d9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"izBJfGfPL5RuR+W0Rn8Hrv6m9ukmO6N1aOjWQhBxKiPQ6Qkh5Zt9h8ZFDZr7OTapiBBKBugkygMVRDhVlK0DBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-20T15:21:10.916022Z","bundle_sha256":"1d16634281f29092c720e5fadd5a236adfb1de1a48ed50627e9247fcd8b08299"}}