{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2026:OBACYMKTASKMTIG3MO7GPKWHTU","short_pith_number":"pith:OBACYMKT","schema_version":"1.0","canonical_sha256":"70402c31530494c9a0db63be67aac79d33535cb7908c8e20806fc4f99f26b8e9","source":{"kind":"arxiv","id":"2606.13107","version":1},"attestation_state":"computed","paper":{"title":"The Invisible Ink of the Android Malware World: A Longitudinal Study on the Usage of Covert Communication Channels","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Manan Aggarwal, Manan Chugh, Mann Nariya, Sambuddho Chakravarty, Yogesh Kaushik, Zeya Umayya","submitted_at":"2026-06-11T09:34:55Z","abstract_excerpt":"Proxies, VPNs and Tor have long helped the privacy community and users in censored regions to fight censorship. However, the same tools can be maliciously exploited by malware and botnets to conceal their communication to external command and control servers. Despite being a critical concern fueled by the proliferation of malware based attacks, no longitudinal studies have analyzed how malware applications use covert channels (CC) to evade detection.\n  We fill this gap by performing the first study of the usage of covert channels in the Android malware ecosystem. To that end, we develop a mult"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2606.13107","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2026-06-11T09:34:55Z","cross_cats_sorted":["cs.NI"],"title_canon_sha256":"c49da1e14dc193b09d2822070a4f4513e3d7957cc5e62a3f0c5f13d4a969f3e7","abstract_canon_sha256":"1517100185bdb3d3c42dc0112702cbdadd5952d3a5bdd77f8e6a9bd7e7d38018"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-12T01:09:40.497626Z","signature_b64":"a5b3laiWaHB+0isiN4+CKMcYXU/xroT9mag6Qxp6F0BajD0MookUNQTk2bnhXwdkv7RwIGCvCn60E40ARwY8BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"70402c31530494c9a0db63be67aac79d33535cb7908c8e20806fc4f99f26b8e9","last_reissued_at":"2026-06-12T01:09:40.496893Z","signature_status":"signed_v1","first_computed_at":"2026-06-12T01:09:40.496893Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"The Invisible Ink of the Android Malware World: A Longitudinal Study on the Usage of Covert Communication Channels","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.NI"],"primary_cat":"cs.CR","authors_text":"Manan Aggarwal, Manan Chugh, Mann Nariya, Sambuddho Chakravarty, Yogesh Kaushik, Zeya Umayya","submitted_at":"2026-06-11T09:34:55Z","abstract_excerpt":"Proxies, VPNs and Tor have long helped the privacy community and users in censored regions to fight censorship. However, the same tools can be maliciously exploited by malware and botnets to conceal their communication to external command and control servers. Despite being a critical concern fueled by the proliferation of malware based attacks, no longitudinal studies have analyzed how malware applications use covert channels (CC) to evade detection.\n  We fill this gap by performing the first study of the usage of covert channels in the Android malware ecosystem. To that end, we develop a mult"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.13107","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.13107/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2606.13107","created_at":"2026-06-12T01:09:40.497005+00:00"},{"alias_kind":"arxiv_version","alias_value":"2606.13107v1","created_at":"2026-06-12T01:09:40.497005+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.13107","created_at":"2026-06-12T01:09:40.497005+00:00"},{"alias_kind":"pith_short_12","alias_value":"OBACYMKTASKM","created_at":"2026-06-12T01:09:40.497005+00:00"},{"alias_kind":"pith_short_16","alias_value":"OBACYMKTASKMTIG3","created_at":"2026-06-12T01:09:40.497005+00:00"},{"alias_kind":"pith_short_8","alias_value":"OBACYMKT","created_at":"2026-06-12T01:09:40.497005+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU","json":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU.json","graph_json":"https://pith.science/api/pith-number/OBACYMKTASKMTIG3MO7GPKWHTU/graph.json","events_json":"https://pith.science/api/pith-number/OBACYMKTASKMTIG3MO7GPKWHTU/events.json","paper":"https://pith.science/paper/OBACYMKT"},"agent_actions":{"view_html":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU","download_json":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU.json","view_paper":"https://pith.science/paper/OBACYMKT","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2606.13107&json=true","fetch_graph":"https://pith.science/api/pith-number/OBACYMKTASKMTIG3MO7GPKWHTU/graph.json","fetch_events":"https://pith.science/api/pith-number/OBACYMKTASKMTIG3MO7GPKWHTU/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU/action/timestamp_anchor","attest_storage":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU/action/storage_attestation","attest_author":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU/action/author_attestation","sign_citation":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU/action/citation_signature","submit_replication":"https://pith.science/pith/OBACYMKTASKMTIG3MO7GPKWHTU/action/replication_record"}},"created_at":"2026-06-12T01:09:40.497005+00:00","updated_at":"2026-06-12T01:09:40.497005+00:00"}