{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:M5K4QGX3N5QCPLX5KIC5QRGA3D","short_pith_number":"pith:M5K4QGX3","canonical_record":{"source":{"id":"2407.09295","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T14:30:05Z","cross_cats_sorted":[],"title_canon_sha256":"b394c7fd58f8a1988f7518c0eead77a2c3aaa4440bb92adaac9773ab3c5d0224","abstract_canon_sha256":"aeb5d6ce2fa2e4593f43adbfdaf4ef3e557c49bb9b6bd227a23771da2eb01429"},"schema_version":"1.0"},"canonical_sha256":"6755c81afb6f6027aefd5205d844c0d8ec343e56f847bd23b76d3eef079763c3","source":{"kind":"arxiv","id":"2407.09295","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.09295","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"arxiv_version","alias_value":"2407.09295v3","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.09295","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_12","alias_value":"M5K4QGX3N5QC","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_16","alias_value":"M5K4QGX3N5QCPLX5","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_8","alias_value":"M5K4QGX3","created_at":"2026-07-05T10:31:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:M5K4QGX3N5QCPLX5KIC5QRGA3D","target":"record","payload":{"canonical_record":{"source":{"id":"2407.09295","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T14:30:05Z","cross_cats_sorted":[],"title_canon_sha256":"b394c7fd58f8a1988f7518c0eead77a2c3aaa4440bb92adaac9773ab3c5d0224","abstract_canon_sha256":"aeb5d6ce2fa2e4593f43adbfdaf4ef3e557c49bb9b6bd227a23771da2eb01429"},"schema_version":"1.0"},"canonical_sha256":"6755c81afb6f6027aefd5205d844c0d8ec343e56f847bd23b76d3eef079763c3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:31:45.076514Z","signature_b64":"cT29tNCx3jVb7uKNsI7OMCf2U+iLgCbUkAGVQMXDB5lPaUmlA209+dutmZeTNHtENRDjmfq2e6p3PiC2P7O5DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6755c81afb6f6027aefd5205d844c0d8ec343e56f847bd23b76d3eef079763c3","last_reissued_at":"2026-07-05T10:31:45.075563Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:31:45.075563Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.09295","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"agfn3kNeE/kShZcQftJTmPkZfO3Wuth5PznAx7GIvlvrgYf0Q7hTXkWZPQ7aTtKo/nGGFd42+llBt+4PP7vBDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:19:55.853812Z"},"content_sha256":"1a633f0e46e6840655afd0a070ae912b35709c0622e116ef898fa84243b0f9d5","schema_version":"1.0","event_id":"sha256:1a633f0e46e6840655afd0a070ae912b35709c0622e116ef898fa84243b0f9d5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:M5K4QGX3N5QCPLX5KIC5QRGA3D","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chao Shen, Chenhao Lin, Shuaidong Li, Tianwei Zhang, Xinshan Yang, Yulong Yang, Zhengyu Zhao","submitted_at":"2024-07-12T14:30:05Z","abstract_excerpt":"The integration of Large Language Models (LLMs) and Multi-modal Large Language Models (MLLMs) into mobile GUI agents has significantly enhanced user efficiency and experience. However, this advancement also introduces potential security vulnerabilities that have yet to be thoroughly explored. In this paper, we present a systematic security investigation of multi-modal mobile GUI agents, addressing this critical gap in the existing literature. Our contributions are twofold: (1) we propose a novel threat modeling methodology, leading to the discovery and feasibility analysis of 34 previously unr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.09295","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.09295/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:31:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xReW7L2ZcMcaOVned+FJYaKURaqZkFZhMv+ZNlCX7fAGC7d+Y28ZHD90RjxPeviBdP4H1V5G73e2WAwJwJQuDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:19:55.854495Z"},"content_sha256":"4b60b40cc3b8b44fb1365b9bf5d7402da78f05847a0ff19472da0c4a1aa5fafa","schema_version":"1.0","event_id":"sha256:4b60b40cc3b8b44fb1365b9bf5d7402da78f05847a0ff19472da0c4a1aa5fafa"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/bundle.json","state_url":"https://pith.science/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T17:19:55Z","links":{"resolver":"https://pith.science/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D","bundle":"https://pith.science/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/bundle.json","state":"https://pith.science/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/state.json","well_known_bundle":"https://pith.science/.well-known/pith/M5K4QGX3N5QCPLX5KIC5QRGA3D/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:M5K4QGX3N5QCPLX5KIC5QRGA3D","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aeb5d6ce2fa2e4593f43adbfdaf4ef3e557c49bb9b6bd227a23771da2eb01429","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T14:30:05Z","title_canon_sha256":"b394c7fd58f8a1988f7518c0eead77a2c3aaa4440bb92adaac9773ab3c5d0224"},"schema_version":"1.0","source":{"id":"2407.09295","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.09295","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"arxiv_version","alias_value":"2407.09295v3","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.09295","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_12","alias_value":"M5K4QGX3N5QC","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_16","alias_value":"M5K4QGX3N5QCPLX5","created_at":"2026-07-05T10:31:45Z"},{"alias_kind":"pith_short_8","alias_value":"M5K4QGX3","created_at":"2026-07-05T10:31:45Z"}],"graph_snapshots":[{"event_id":"sha256:4b60b40cc3b8b44fb1365b9bf5d7402da78f05847a0ff19472da0c4a1aa5fafa","target":"graph","created_at":"2026-07-05T10:31:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.09295/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The integration of Large Language Models (LLMs) and Multi-modal Large Language Models (MLLMs) into mobile GUI agents has significantly enhanced user efficiency and experience. However, this advancement also introduces potential security vulnerabilities that have yet to be thoroughly explored. In this paper, we present a systematic security investigation of multi-modal mobile GUI agents, addressing this critical gap in the existing literature. Our contributions are twofold: (1) we propose a novel threat modeling methodology, leading to the discovery and feasibility analysis of 34 previously unr","authors_text":"Chao Shen, Chenhao Lin, Shuaidong Li, Tianwei Zhang, Xinshan Yang, Yulong Yang, Zhengyu Zhao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T14:30:05Z","title":"Systematic Categorization, Construction and Evaluation of New Attacks against Multi-modal Mobile GUI Agents"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.09295","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1a633f0e46e6840655afd0a070ae912b35709c0622e116ef898fa84243b0f9d5","target":"record","created_at":"2026-07-05T10:31:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aeb5d6ce2fa2e4593f43adbfdaf4ef3e557c49bb9b6bd227a23771da2eb01429","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-07-12T14:30:05Z","title_canon_sha256":"b394c7fd58f8a1988f7518c0eead77a2c3aaa4440bb92adaac9773ab3c5d0224"},"schema_version":"1.0","source":{"id":"2407.09295","kind":"arxiv","version":3}},"canonical_sha256":"6755c81afb6f6027aefd5205d844c0d8ec343e56f847bd23b76d3eef079763c3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6755c81afb6f6027aefd5205d844c0d8ec343e56f847bd23b76d3eef079763c3","first_computed_at":"2026-07-05T10:31:45.075563Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:31:45.075563Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cT29tNCx3jVb7uKNsI7OMCf2U+iLgCbUkAGVQMXDB5lPaUmlA209+dutmZeTNHtENRDjmfq2e6p3PiC2P7O5DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:31:45.076514Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.09295","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1a633f0e46e6840655afd0a070ae912b35709c0622e116ef898fa84243b0f9d5","sha256:4b60b40cc3b8b44fb1365b9bf5d7402da78f05847a0ff19472da0c4a1aa5fafa"],"state_sha256":"b2deceef610b2521c3ddc32009bcf67ba95390751c12ba677fb7eb3acbe4adc4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G/MMmwbz80auHxb7KDBaZhiDt4G13sTnuMrh42+jXMUaWlgXibXsYhhxXUGozjP+4954FFRPu66tHnqO8n1iBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T17:19:55.860695Z","bundle_sha256":"0e55572521c553d3fb5fe9d25e753e4b917f8ee1471647cdb8e0b984502a5c0f"}}