{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2017:OJ575SM4IRH27XEXQGB4BY3T4G","short_pith_number":"pith:OJ575SM4","canonical_record":{"source":{"id":"1708.06384","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-21T19:20:20Z","cross_cats_sorted":[],"title_canon_sha256":"36770ef0241a76ec8c7604227938bdd44f2cf3249b7cb1239fbfd03c1e1e539d","abstract_canon_sha256":"2b12030fb2423f9719be5044d73b219395c3d593dde1c876a49694ec7b3ca9e3"},"schema_version":"1.0"},"canonical_sha256":"727bfec99c444fafdc978183c0e373e189162be5e0605cf2d24362ae67ff1afa","source":{"kind":"arxiv","id":"1708.06384","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.06384","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"arxiv_version","alias_value":"1708.06384v4","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.06384","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"pith_short_12","alias_value":"OJ575SM4IRH2","created_at":"2026-05-18T12:31:34Z"},{"alias_kind":"pith_short_16","alias_value":"OJ575SM4IRH27XEX","created_at":"2026-05-18T12:31:34Z"},{"alias_kind":"pith_short_8","alias_value":"OJ575SM4","created_at":"2026-05-18T12:31:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2017:OJ575SM4IRH27XEXQGB4BY3T4G","target":"record","payload":{"canonical_record":{"source":{"id":"1708.06384","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-21T19:20:20Z","cross_cats_sorted":[],"title_canon_sha256":"36770ef0241a76ec8c7604227938bdd44f2cf3249b7cb1239fbfd03c1e1e539d","abstract_canon_sha256":"2b12030fb2423f9719be5044d73b219395c3d593dde1c876a49694ec7b3ca9e3"},"schema_version":"1.0"},"canonical_sha256":"727bfec99c444fafdc978183c0e373e189162be5e0605cf2d24362ae67ff1afa","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:02:13.407005Z","signature_b64":"ZOBA9KV5/IVxTulbTDKHG9HHAfwVQcSvHXbvNz55S5MRRY8NEBaj3qYyyzJGapLZ1/fW0He4fv45OyRpE+OmBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"727bfec99c444fafdc978183c0e373e189162be5e0605cf2d24362ae67ff1afa","last_reissued_at":"2026-05-18T00:02:13.377150Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:02:13.377150Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1708.06384","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ZjfrOsieg1IaWunqbxuzK5w87lMas956jDDjqyjSAR59EjJih2GgySMrVO77oL2wop1xsWrO4D/Pr+MG7GxBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T17:05:59.530867Z"},"content_sha256":"6b91ae140582d50483f070f4051a1dd7cfe7710c4827e1c33c868b152e7d3c85","schema_version":"1.0","event_id":"sha256:6b91ae140582d50483f070f4051a1dd7cfe7710c4827e1c33c868b152e7d3c85"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2017:OJ575SM4IRH27XEXQGB4BY3T4G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"PrivacyProxy: Leveraging Crowdsourcing and In Situ Traffic Analysis to Detect and Mitigate Information Leakage","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Gaurav Srivastava, Jason Hong, Kevin Ku, Kunal Bhuwalka, Matt Fredrikson, Saksham Chitkara, Swarup Kumar Sahoo, Yuvraj Agarwal","submitted_at":"2017-08-21T19:20:20Z","abstract_excerpt":"Many smartphone apps transmit personally identifiable information (PII), often without the users knowledge. To address this issue, we present PrivacyProxy, a system that monitors outbound network traffic and generates app-specific signatures to represent sensitive data being shared. PrivacyProxy uses a crowd-based approach to detect likely PII in an adaptive and scalable manner by anonymously combining signatures from different users of the same app. Furthermore, we do not observe users network traffic and instead rely on hashed signatures. We present the design and implementation of PrivacyPr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.06384","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:02:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RJwJeUcF/DBV4k7HPgLm4/rpsURzlHQgo0EDyZxAV+u0Cdfva8VeC+MYSRrhA5WUwaHL/ypzlE1kWcwA2cgWAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-28T17:05:59.531521Z"},"content_sha256":"ae435828f2dfd6377589a6ea3eb9b7ae3486561f0dba57725310a0b69d3209d3","schema_version":"1.0","event_id":"sha256:ae435828f2dfd6377589a6ea3eb9b7ae3486561f0dba57725310a0b69d3209d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/OJ575SM4IRH27XEXQGB4BY3T4G/bundle.json","state_url":"https://pith.science/pith/OJ575SM4IRH27XEXQGB4BY3T4G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/OJ575SM4IRH27XEXQGB4BY3T4G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-28T17:05:59Z","links":{"resolver":"https://pith.science/pith/OJ575SM4IRH27XEXQGB4BY3T4G","bundle":"https://pith.science/pith/OJ575SM4IRH27XEXQGB4BY3T4G/bundle.json","state":"https://pith.science/pith/OJ575SM4IRH27XEXQGB4BY3T4G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/OJ575SM4IRH27XEXQGB4BY3T4G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:OJ575SM4IRH27XEXQGB4BY3T4G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2b12030fb2423f9719be5044d73b219395c3d593dde1c876a49694ec7b3ca9e3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-21T19:20:20Z","title_canon_sha256":"36770ef0241a76ec8c7604227938bdd44f2cf3249b7cb1239fbfd03c1e1e539d"},"schema_version":"1.0","source":{"id":"1708.06384","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1708.06384","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"arxiv_version","alias_value":"1708.06384v4","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1708.06384","created_at":"2026-05-18T00:02:13Z"},{"alias_kind":"pith_short_12","alias_value":"OJ575SM4IRH2","created_at":"2026-05-18T12:31:34Z"},{"alias_kind":"pith_short_16","alias_value":"OJ575SM4IRH27XEX","created_at":"2026-05-18T12:31:34Z"},{"alias_kind":"pith_short_8","alias_value":"OJ575SM4","created_at":"2026-05-18T12:31:34Z"}],"graph_snapshots":[{"event_id":"sha256:ae435828f2dfd6377589a6ea3eb9b7ae3486561f0dba57725310a0b69d3209d3","target":"graph","created_at":"2026-05-18T00:02:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Many smartphone apps transmit personally identifiable information (PII), often without the users knowledge. To address this issue, we present PrivacyProxy, a system that monitors outbound network traffic and generates app-specific signatures to represent sensitive data being shared. PrivacyProxy uses a crowd-based approach to detect likely PII in an adaptive and scalable manner by anonymously combining signatures from different users of the same app. Furthermore, we do not observe users network traffic and instead rely on hashed signatures. We present the design and implementation of PrivacyPr","authors_text":"Gaurav Srivastava, Jason Hong, Kevin Ku, Kunal Bhuwalka, Matt Fredrikson, Saksham Chitkara, Swarup Kumar Sahoo, Yuvraj Agarwal","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-21T19:20:20Z","title":"PrivacyProxy: Leveraging Crowdsourcing and In Situ Traffic Analysis to Detect and Mitigate Information Leakage"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1708.06384","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6b91ae140582d50483f070f4051a1dd7cfe7710c4827e1c33c868b152e7d3c85","target":"record","created_at":"2026-05-18T00:02:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2b12030fb2423f9719be5044d73b219395c3d593dde1c876a49694ec7b3ca9e3","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-08-21T19:20:20Z","title_canon_sha256":"36770ef0241a76ec8c7604227938bdd44f2cf3249b7cb1239fbfd03c1e1e539d"},"schema_version":"1.0","source":{"id":"1708.06384","kind":"arxiv","version":4}},"canonical_sha256":"727bfec99c444fafdc978183c0e373e189162be5e0605cf2d24362ae67ff1afa","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"727bfec99c444fafdc978183c0e373e189162be5e0605cf2d24362ae67ff1afa","first_computed_at":"2026-05-18T00:02:13.377150Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:02:13.377150Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZOBA9KV5/IVxTulbTDKHG9HHAfwVQcSvHXbvNz55S5MRRY8NEBaj3qYyyzJGapLZ1/fW0He4fv45OyRpE+OmBA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:02:13.407005Z","signed_message":"canonical_sha256_bytes"},"source_id":"1708.06384","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6b91ae140582d50483f070f4051a1dd7cfe7710c4827e1c33c868b152e7d3c85","sha256:ae435828f2dfd6377589a6ea3eb9b7ae3486561f0dba57725310a0b69d3209d3"],"state_sha256":"09ae10d4caa20793d6f21797fa801d06a549e87d09cc22f41943b73266d44d15"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cC6vXh3/YoINkPyF75Z1UUMTzH5IeD2PLXrNw/eXWdxCtQztwThHWi5Gx0hicOrlxxKm44MOyjrdIJNy5BXXAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-28T17:05:59.535258Z","bundle_sha256":"79454031856876a1f5e5a657ffa2ee6f0055f177fc9f4724c57b178b75ac9b39"}}