{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:UIQIHHVQT6YXJZYSAUG6NN67J5","short_pith_number":"pith:UIQIHHVQ","canonical_record":{"source":{"id":"2109.06613","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-09-14T12:08:59Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0337f20a5fb91d1dc690a07f56dbaf7292482c1c7fc6b3f11666e1ab38cbd3df","abstract_canon_sha256":"15fca0ed8a32e2422bbe0ca6c6d8e6c98e323fa957b83c9002a7f8166b80f52a"},"schema_version":"1.0"},"canonical_sha256":"a220839eb09fb174e712050de6b7df4f5c16108f1804d7358a39f78b2d6b1e29","source":{"kind":"arxiv","id":"2109.06613","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.06613","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"arxiv_version","alias_value":"2109.06613v1","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.06613","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_12","alias_value":"UIQIHHVQT6YX","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_16","alias_value":"UIQIHHVQT6YXJZYS","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_8","alias_value":"UIQIHHVQ","created_at":"2026-07-05T03:14:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:UIQIHHVQT6YXJZYSAUG6NN67J5","target":"record","payload":{"canonical_record":{"source":{"id":"2109.06613","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-09-14T12:08:59Z","cross_cats_sorted":["cs.SE"],"title_canon_sha256":"0337f20a5fb91d1dc690a07f56dbaf7292482c1c7fc6b3f11666e1ab38cbd3df","abstract_canon_sha256":"15fca0ed8a32e2422bbe0ca6c6d8e6c98e323fa957b83c9002a7f8166b80f52a"},"schema_version":"1.0"},"canonical_sha256":"a220839eb09fb174e712050de6b7df4f5c16108f1804d7358a39f78b2d6b1e29","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:14:28.633773Z","signature_b64":"lKYDgFOOQaJ9gXBna8Td6Jx1hX2oPqLoZ8+EBtlqy4dxJMRodqJjCt68ZpHEenSKcR7hCfW8WXqByEcCPVhkAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a220839eb09fb174e712050de6b7df4f5c16108f1804d7358a39f78b2d6b1e29","last_reissued_at":"2026-07-05T03:14:28.633269Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:14:28.633269Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2109.06613","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:14:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ho36Q1P2n8y0kwhzjvld8YUgVXXA9u9ppGA4AjyYGxXG9Fs6VXJYiLjFp3vfN6a77xzvwUfynkKyPSo+SFHQAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:42:13.867355Z"},"content_sha256":"d6f1083f70d15d89c8416dfec572fedab629aa9e3588c54ace7c397f8d2c37aa","schema_version":"1.0","event_id":"sha256:d6f1083f70d15d89c8416dfec572fedab629aa9e3588c54ace7c397f8d2c37aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:UIQIHHVQT6YXJZYSAUG6NN67J5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring the Use of Static and Dynamic Analysis to Improve the Performance of the Mining Sandbox Approach for Android Malware Identification","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.SE"],"primary_cat":"cs.CR","authors_text":"Francisco Handrick da Costa, Ingrid Lorraine da Silva, Ismael Medeiros, Jo\\~ao Victor da Silva, Krishna Narasimhan, M\\'arcio Ribeiro, Rodrigo Bonif\\'acio, Thales Menezes","submitted_at":"2021-09-14T12:08:59Z","abstract_excerpt":"The Android mining sandbox approach consists in running dynamic analysis tools on a benign version of an Android app and recording every call to sensitive APIs. Later, one can use this information to (a) prevent calls to other sensitive APIs (those not previously recorded) or (b) run the dynamic analysis tools again in a different version of the app -- in order to identify possible malicious behavior. Although the use of dynamic analysis for mining Android sandboxes has been empirically investigated before, little is known about the potential benefits of combining static analysis with the mini"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.06613","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.06613/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:14:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cp/+HmGSdVRJABCNO03H7k9I5e7vJww+IsIejDVmMx5198YWyUuryOuJHBpB9f0UPvVmFjm5oEpY0d92DtL8AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T09:42:13.867978Z"},"content_sha256":"9a5e76b6bd711386333c70e953dbb4c14f3304ee452c4c21fd9d057981a322fe","schema_version":"1.0","event_id":"sha256:9a5e76b6bd711386333c70e953dbb4c14f3304ee452c4c21fd9d057981a322fe"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/bundle.json","state_url":"https://pith.science/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T09:42:13Z","links":{"resolver":"https://pith.science/pith/UIQIHHVQT6YXJZYSAUG6NN67J5","bundle":"https://pith.science/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/bundle.json","state":"https://pith.science/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UIQIHHVQT6YXJZYSAUG6NN67J5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:UIQIHHVQT6YXJZYSAUG6NN67J5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"15fca0ed8a32e2422bbe0ca6c6d8e6c98e323fa957b83c9002a7f8166b80f52a","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-09-14T12:08:59Z","title_canon_sha256":"0337f20a5fb91d1dc690a07f56dbaf7292482c1c7fc6b3f11666e1ab38cbd3df"},"schema_version":"1.0","source":{"id":"2109.06613","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.06613","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"arxiv_version","alias_value":"2109.06613v1","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.06613","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_12","alias_value":"UIQIHHVQT6YX","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_16","alias_value":"UIQIHHVQT6YXJZYS","created_at":"2026-07-05T03:14:28Z"},{"alias_kind":"pith_short_8","alias_value":"UIQIHHVQ","created_at":"2026-07-05T03:14:28Z"}],"graph_snapshots":[{"event_id":"sha256:9a5e76b6bd711386333c70e953dbb4c14f3304ee452c4c21fd9d057981a322fe","target":"graph","created_at":"2026-07-05T03:14:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.06613/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The Android mining sandbox approach consists in running dynamic analysis tools on a benign version of an Android app and recording every call to sensitive APIs. Later, one can use this information to (a) prevent calls to other sensitive APIs (those not previously recorded) or (b) run the dynamic analysis tools again in a different version of the app -- in order to identify possible malicious behavior. Although the use of dynamic analysis for mining Android sandboxes has been empirically investigated before, little is known about the potential benefits of combining static analysis with the mini","authors_text":"Francisco Handrick da Costa, Ingrid Lorraine da Silva, Ismael Medeiros, Jo\\~ao Victor da Silva, Krishna Narasimhan, M\\'arcio Ribeiro, Rodrigo Bonif\\'acio, Thales Menezes","cross_cats":["cs.SE"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-09-14T12:08:59Z","title":"Exploring the Use of Static and Dynamic Analysis to Improve the Performance of the Mining Sandbox Approach for Android Malware Identification"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.06613","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d6f1083f70d15d89c8416dfec572fedab629aa9e3588c54ace7c397f8d2c37aa","target":"record","created_at":"2026-07-05T03:14:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"15fca0ed8a32e2422bbe0ca6c6d8e6c98e323fa957b83c9002a7f8166b80f52a","cross_cats_sorted":["cs.SE"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-09-14T12:08:59Z","title_canon_sha256":"0337f20a5fb91d1dc690a07f56dbaf7292482c1c7fc6b3f11666e1ab38cbd3df"},"schema_version":"1.0","source":{"id":"2109.06613","kind":"arxiv","version":1}},"canonical_sha256":"a220839eb09fb174e712050de6b7df4f5c16108f1804d7358a39f78b2d6b1e29","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a220839eb09fb174e712050de6b7df4f5c16108f1804d7358a39f78b2d6b1e29","first_computed_at":"2026-07-05T03:14:28.633269Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:14:28.633269Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lKYDgFOOQaJ9gXBna8Td6Jx1hX2oPqLoZ8+EBtlqy4dxJMRodqJjCt68ZpHEenSKcR7hCfW8WXqByEcCPVhkAw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:14:28.633773Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.06613","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d6f1083f70d15d89c8416dfec572fedab629aa9e3588c54ace7c397f8d2c37aa","sha256:9a5e76b6bd711386333c70e953dbb4c14f3304ee452c4c21fd9d057981a322fe"],"state_sha256":"a3c3d5ee8ca032cd62efbaf8fb15a6ede595281f9dad07ce18659910ce3c9d1c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/MATZfJWS38bFYtj6oS3r8pcGOE1paHY5HFN9NhqpOR+Rz9iJJj9c4lfXtvHZj3oXJ+n6/K9Uy++SQv8FKDfCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T09:42:13.873394Z","bundle_sha256":"5ee7a48d290b277b12d50c021e4a8eb1df159ac764b2c337b675e95d09ff6826"}}