{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:NBXKMRRAA62KT5NU3FO2VEULCT","short_pith_number":"pith:NBXKMRRA","canonical_record":{"source":{"id":"1806.09059","kind":"arxiv","version":8},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-24T00:47:02Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"929d6d92dd0537551df2382deeaca04fe9449082f6425fa39e1d283adf7e8a02","abstract_canon_sha256":"effd438ce073dbec6dc230685b28dc00b6ad447bab9905e050079e777d081170"},"schema_version":"1.0"},"canonical_sha256":"686ea6462007b4a9f5b4d95daa928b14feea1db6da6e5e6c989668b364f4a444","source":{"kind":"arxiv","id":"1806.09059","version":8},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.09059","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"arxiv_version","alias_value":"1806.09059v8","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.09059","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_12","alias_value":"NBXKMRRAA62K","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_16","alias_value":"NBXKMRRAA62KT5NU","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_8","alias_value":"NBXKMRRA","created_at":"2026-07-04T23:51:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:NBXKMRRAA62KT5NU3FO2VEULCT","target":"record","payload":{"canonical_record":{"source":{"id":"1806.09059","kind":"arxiv","version":8},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-24T00:47:02Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"929d6d92dd0537551df2382deeaca04fe9449082f6425fa39e1d283adf7e8a02","abstract_canon_sha256":"effd438ce073dbec6dc230685b28dc00b6ad447bab9905e050079e777d081170"},"schema_version":"1.0"},"canonical_sha256":"686ea6462007b4a9f5b4d95daa928b14feea1db6da6e5e6c989668b364f4a444","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:51:18.465489Z","signature_b64":"RIjrMlQME8P7kokXzZwQq5g6ET/qTfBUak0bPv0sroYjFWhq0Y3MIWu9A7TJFhMd6uLFPu9jvmw594HcoOp2BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"686ea6462007b4a9f5b4d95daa928b14feea1db6da6e5e6c989668b364f4a444","last_reissued_at":"2026-07-04T23:51:18.465132Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:51:18.465132Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1806.09059","source_version":8,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:51:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"miStiBrq7gOEtAULfx3n8+JnRYyYWLVG7sM9NXeLMuXvirJKBp7Q1JUqDSj4HD2hOrDVPbh20aA+IK72GFHPDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T23:08:46.685398Z"},"content_sha256":"83f2ab7c30f6d63c0cb4c31b23921d2ad2c214ddbacf262921d690ef1d4786fb","schema_version":"1.0","event_id":"sha256:83f2ab7c30f6d63c0cb4c31b23921d2ad2c214ddbacf262921d690ef1d4786fb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:NBXKMRRAA62KT5NU3FO2VEULCT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are Free Android App Security Analysis Tools Effective in Detecting Known Vulnerabilities?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Joydeep Mitra, Venkatesh-Prasad Ranganath","submitted_at":"2018-06-24T00:47:02Z","abstract_excerpt":"Increasing interest in securing the Android ecosystem has spawned numerous efforts to assist app developers in building secure apps. These efforts have resulted in tools and techniques capable of detecting vulnerabilities (and malicious behaviors) in apps. However, there has been no evaluation of the effectiveness of these tools and techniques in detecting known vulnerabilities. The absence of such evaluations puts app developers at a disadvantage when choosing security analysis tools to secure their apps. In this regard, we evaluated the effectiveness of vulnerability detection tools for Andr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.09059","kind":"arxiv","version":8},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1806.09059/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:51:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kiq4gz2vbvK3J4L583h9P6d5XkwmpC5rq5bYLedoJZ9yqQcqYRz0yYl5Mn9yVRvTcCINNCEI2PiUNXX+8zMHBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T23:08:46.685733Z"},"content_sha256":"e2f492a1fa2c49b2cd9972c319278754cb551fc6ee78d29d40665a94d8c07023","schema_version":"1.0","event_id":"sha256:e2f492a1fa2c49b2cd9972c319278754cb551fc6ee78d29d40665a94d8c07023"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NBXKMRRAA62KT5NU3FO2VEULCT/bundle.json","state_url":"https://pith.science/pith/NBXKMRRAA62KT5NU3FO2VEULCT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NBXKMRRAA62KT5NU3FO2VEULCT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T23:08:46Z","links":{"resolver":"https://pith.science/pith/NBXKMRRAA62KT5NU3FO2VEULCT","bundle":"https://pith.science/pith/NBXKMRRAA62KT5NU3FO2VEULCT/bundle.json","state":"https://pith.science/pith/NBXKMRRAA62KT5NU3FO2VEULCT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NBXKMRRAA62KT5NU3FO2VEULCT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:NBXKMRRAA62KT5NU3FO2VEULCT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"effd438ce073dbec6dc230685b28dc00b6ad447bab9905e050079e777d081170","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-24T00:47:02Z","title_canon_sha256":"929d6d92dd0537551df2382deeaca04fe9449082f6425fa39e1d283adf7e8a02"},"schema_version":"1.0","source":{"id":"1806.09059","kind":"arxiv","version":8}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1806.09059","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"arxiv_version","alias_value":"1806.09059v8","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1806.09059","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_12","alias_value":"NBXKMRRAA62K","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_16","alias_value":"NBXKMRRAA62KT5NU","created_at":"2026-07-04T23:51:18Z"},{"alias_kind":"pith_short_8","alias_value":"NBXKMRRA","created_at":"2026-07-04T23:51:18Z"}],"graph_snapshots":[{"event_id":"sha256:e2f492a1fa2c49b2cd9972c319278754cb551fc6ee78d29d40665a94d8c07023","target":"graph","created_at":"2026-07-04T23:51:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1806.09059/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Increasing interest in securing the Android ecosystem has spawned numerous efforts to assist app developers in building secure apps. These efforts have resulted in tools and techniques capable of detecting vulnerabilities (and malicious behaviors) in apps. However, there has been no evaluation of the effectiveness of these tools and techniques in detecting known vulnerabilities. The absence of such evaluations puts app developers at a disadvantage when choosing security analysis tools to secure their apps. In this regard, we evaluated the effectiveness of vulnerability detection tools for Andr","authors_text":"Joydeep Mitra, Venkatesh-Prasad Ranganath","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-24T00:47:02Z","title":"Are Free Android App Security Analysis Tools Effective in Detecting Known Vulnerabilities?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1806.09059","kind":"arxiv","version":8},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:83f2ab7c30f6d63c0cb4c31b23921d2ad2c214ddbacf262921d690ef1d4786fb","target":"record","created_at":"2026-07-04T23:51:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"effd438ce073dbec6dc230685b28dc00b6ad447bab9905e050079e777d081170","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-06-24T00:47:02Z","title_canon_sha256":"929d6d92dd0537551df2382deeaca04fe9449082f6425fa39e1d283adf7e8a02"},"schema_version":"1.0","source":{"id":"1806.09059","kind":"arxiv","version":8}},"canonical_sha256":"686ea6462007b4a9f5b4d95daa928b14feea1db6da6e5e6c989668b364f4a444","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"686ea6462007b4a9f5b4d95daa928b14feea1db6da6e5e6c989668b364f4a444","first_computed_at":"2026-07-04T23:51:18.465132Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:51:18.465132Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RIjrMlQME8P7kokXzZwQq5g6ET/qTfBUak0bPv0sroYjFWhq0Y3MIWu9A7TJFhMd6uLFPu9jvmw594HcoOp2BA==","signature_status":"signed_v1","signed_at":"2026-07-04T23:51:18.465489Z","signed_message":"canonical_sha256_bytes"},"source_id":"1806.09059","source_kind":"arxiv","source_version":8}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:83f2ab7c30f6d63c0cb4c31b23921d2ad2c214ddbacf262921d690ef1d4786fb","sha256:e2f492a1fa2c49b2cd9972c319278754cb551fc6ee78d29d40665a94d8c07023"],"state_sha256":"f08126ca1b8ed19d246a1157d9bece949ebe183184cf4d8aae6c51a3d6b80fac"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vnKIZZoKrraithSmCjSuGVqtH8CRAHy4LQJBDNxdKZ+G3BHZKGzEIydmIQ+oK/uety+5vOiGIzd0kaUJ5shuCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T23:08:46.688812Z","bundle_sha256":"8ca430d720c0ac57668114ba0698fd4b8f76487f0a897d859a60960946cfcfea"}}