{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:QACKNAKEKXV5IL2T3NAYZOBGDB","short_pith_number":"pith:QACKNAKE","canonical_record":{"source":{"id":"2508.17856","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T10:05:44Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"547e3811199dbfd16a2af16e0d17a8d19ab2bc32e363b6a664c9a1836b985008","abstract_canon_sha256":"df4b86e2a936ad9c66fc567d036500bffa3a5a116d8a440e83131eeb3d260fb9"},"schema_version":"1.0"},"canonical_sha256":"8004a6814455ebd42f53db418cb826184e5ccfae0f89f7e05f859fcb800031d4","source":{"kind":"arxiv","id":"2508.17856","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.17856","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"arxiv_version","alias_value":"2508.17856v1","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.17856","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_12","alias_value":"QACKNAKEKXV5","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_16","alias_value":"QACKNAKEKXV5IL2T","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_8","alias_value":"QACKNAKE","created_at":"2026-07-05T11:58:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:QACKNAKEKXV5IL2T3NAYZOBGDB","target":"record","payload":{"canonical_record":{"source":{"id":"2508.17856","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T10:05:44Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"547e3811199dbfd16a2af16e0d17a8d19ab2bc32e363b6a664c9a1836b985008","abstract_canon_sha256":"df4b86e2a936ad9c66fc567d036500bffa3a5a116d8a440e83131eeb3d260fb9"},"schema_version":"1.0"},"canonical_sha256":"8004a6814455ebd42f53db418cb826184e5ccfae0f89f7e05f859fcb800031d4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:58:49.005025Z","signature_b64":"Y6XBSd02z/DGsPU8QbPZ46mPkA1DFgP8us1izpEHNdWOcnjGoGThv2dj4LPrGJjQS79bEXZlry6Eblzw0rYqBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8004a6814455ebd42f53db418cb826184e5ccfae0f89f7e05f859fcb800031d4","last_reissued_at":"2026-07-05T11:58:49.004462Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:58:49.004462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.17856","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4eU/fUlxLJPfUDNnRub/yhoLrNHo2icxEIHeWOkuX0NaZ2KDOQCs+PJje0BletDLGlK3PV3Kx7SboL/YS0vOBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:47:52.202979Z"},"content_sha256":"14abd502d1a0f69c43da79aeb52e250508222d636c43f046b861670e970b0f80","schema_version":"1.0","event_id":"sha256:14abd502d1a0f69c43da79aeb52e250508222d636c43f046b861670e970b0f80"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:QACKNAKEKXV5IL2T3NAYZOBGDB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MalLoc: Toward Fine-grained Android Malicious Payload Localization via LLMs","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Aleksandr Pilgun, Jacques Klein, Jordan Samhi, Marco Alecci, Tegawend\\'e F. Bissyand\\'e, Tiezhu Sun, Xunzhu Tang, Yewei Song","submitted_at":"2025-08-25T10:05:44Z","abstract_excerpt":"The rapid evolution of Android malware poses significant challenges to the maintenance and security of mobile applications (apps). Traditional detection techniques often struggle to keep pace with emerging malware variants that employ advanced tactics such as code obfuscation and dynamic behavior triggering. One major limitation of these approaches is their inability to localize malicious payloads at a fine-grained level, hindering precise understanding of malicious behavior. This gap in understanding makes the design of effective and targeted mitigation strategies difficult, leaving mobile ap"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.17856","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.17856/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:58:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IR+FR9hDrRNf5342IzvgCr7u6iUe5Kh6jMbECjvQ1j8GdeKmv1UuhjO8LImCcuYmkkpafGyGdto2SsFRZY8YAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T01:47:52.203477Z"},"content_sha256":"b2b0c89d07dc64bf7ff236d7d417f57e82dfe6b0d12368db0a1fec10a4c1272b","schema_version":"1.0","event_id":"sha256:b2b0c89d07dc64bf7ff236d7d417f57e82dfe6b0d12368db0a1fec10a4c1272b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/bundle.json","state_url":"https://pith.science/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T01:47:52Z","links":{"resolver":"https://pith.science/pith/QACKNAKEKXV5IL2T3NAYZOBGDB","bundle":"https://pith.science/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/bundle.json","state":"https://pith.science/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QACKNAKEKXV5IL2T3NAYZOBGDB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:QACKNAKEKXV5IL2T3NAYZOBGDB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df4b86e2a936ad9c66fc567d036500bffa3a5a116d8a440e83131eeb3d260fb9","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T10:05:44Z","title_canon_sha256":"547e3811199dbfd16a2af16e0d17a8d19ab2bc32e363b6a664c9a1836b985008"},"schema_version":"1.0","source":{"id":"2508.17856","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.17856","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"arxiv_version","alias_value":"2508.17856v1","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.17856","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_12","alias_value":"QACKNAKEKXV5","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_16","alias_value":"QACKNAKEKXV5IL2T","created_at":"2026-07-05T11:58:49Z"},{"alias_kind":"pith_short_8","alias_value":"QACKNAKE","created_at":"2026-07-05T11:58:49Z"}],"graph_snapshots":[{"event_id":"sha256:b2b0c89d07dc64bf7ff236d7d417f57e82dfe6b0d12368db0a1fec10a4c1272b","target":"graph","created_at":"2026-07-05T11:58:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.17856/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rapid evolution of Android malware poses significant challenges to the maintenance and security of mobile applications (apps). Traditional detection techniques often struggle to keep pace with emerging malware variants that employ advanced tactics such as code obfuscation and dynamic behavior triggering. One major limitation of these approaches is their inability to localize malicious payloads at a fine-grained level, hindering precise understanding of malicious behavior. This gap in understanding makes the design of effective and targeted mitigation strategies difficult, leaving mobile ap","authors_text":"Aleksandr Pilgun, Jacques Klein, Jordan Samhi, Marco Alecci, Tegawend\\'e F. Bissyand\\'e, Tiezhu Sun, Xunzhu Tang, Yewei Song","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T10:05:44Z","title":"MalLoc: Toward Fine-grained Android Malicious Payload Localization via LLMs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.17856","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:14abd502d1a0f69c43da79aeb52e250508222d636c43f046b861670e970b0f80","target":"record","created_at":"2026-07-05T11:58:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df4b86e2a936ad9c66fc567d036500bffa3a5a116d8a440e83131eeb3d260fb9","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-08-25T10:05:44Z","title_canon_sha256":"547e3811199dbfd16a2af16e0d17a8d19ab2bc32e363b6a664c9a1836b985008"},"schema_version":"1.0","source":{"id":"2508.17856","kind":"arxiv","version":1}},"canonical_sha256":"8004a6814455ebd42f53db418cb826184e5ccfae0f89f7e05f859fcb800031d4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8004a6814455ebd42f53db418cb826184e5ccfae0f89f7e05f859fcb800031d4","first_computed_at":"2026-07-05T11:58:49.004462Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:58:49.004462Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Y6XBSd02z/DGsPU8QbPZ46mPkA1DFgP8us1izpEHNdWOcnjGoGThv2dj4LPrGJjQS79bEXZlry6Eblzw0rYqBw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:58:49.005025Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.17856","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:14abd502d1a0f69c43da79aeb52e250508222d636c43f046b861670e970b0f80","sha256:b2b0c89d07dc64bf7ff236d7d417f57e82dfe6b0d12368db0a1fec10a4c1272b"],"state_sha256":"c0915970a76e2c140e2bf0a85735cad2cf1d0c1d731467628b7d85db92ba4b79"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WDyABZlsdvUlHXQgZL9pdYQTP05BinSAKJJVycipo+8+A4BP0r3f7VzIyVw/N2GWkqtMjN94DRybvOLfyRyUAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T01:47:52.207000Z","bundle_sha256":"b67d9655869380a177954ff1de90985c43e9a8b3844170bb27fd28eb28faa015"}}