{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:ZIH6FWTAFWFQRUZLMK6MFJKYPC","short_pith_number":"pith:ZIH6FWTA","canonical_record":{"source":{"id":"2507.02177","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-02T22:18:54Z","cross_cats_sorted":[],"title_canon_sha256":"06469cee71ce8958c7c04e1fc909cb9fc00eb6ef1de7cfd466490beb50168408","abstract_canon_sha256":"b0765105913368af8e8a9beba367153bea3aa47824977617cd04e4092cbf9d7a"},"schema_version":"1.0"},"canonical_sha256":"ca0fe2da602d8b08d32b62bcc2a558789bdcc5912e4513c77f889da9f9c8f58b","source":{"kind":"arxiv","id":"2507.02177","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.02177","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"arxiv_version","alias_value":"2507.02177v1","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.02177","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_12","alias_value":"ZIH6FWTAFWFQ","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_16","alias_value":"ZIH6FWTAFWFQRUZL","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_8","alias_value":"ZIH6FWTA","created_at":"2026-07-05T11:31:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:ZIH6FWTAFWFQRUZLMK6MFJKYPC","target":"record","payload":{"canonical_record":{"source":{"id":"2507.02177","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-02T22:18:54Z","cross_cats_sorted":[],"title_canon_sha256":"06469cee71ce8958c7c04e1fc909cb9fc00eb6ef1de7cfd466490beb50168408","abstract_canon_sha256":"b0765105913368af8e8a9beba367153bea3aa47824977617cd04e4092cbf9d7a"},"schema_version":"1.0"},"canonical_sha256":"ca0fe2da602d8b08d32b62bcc2a558789bdcc5912e4513c77f889da9f9c8f58b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:31:13.289941Z","signature_b64":"DD3LgfhrHHyytJhg5ncn4T9NqdB7dvw95cqYT5Nan6BhE4AVUAi13R1QdVQ7HCVyVY03Iz5uR2BPICdh9iDoAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ca0fe2da602d8b08d32b62bcc2a558789bdcc5912e4513c77f889da9f9c8f58b","last_reissued_at":"2026-07-05T11:31:13.289397Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:31:13.289397Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2507.02177","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eeD7O3KynQrHbpW5hBIa8QCT+baxRJriY1nYm/epzhB65hCfex+LVGs/+P6bHTT+BnFX6zof0mG5dLaXJkapAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:33:23.164701Z"},"content_sha256":"4b3a3dafa4ac9f9c80054ddc175ad1d69a645a76572135466c207c9d06479778","schema_version":"1.0","event_id":"sha256:4b3a3dafa4ac9f9c80054ddc175ad1d69a645a76572135466c207c9d06479778"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:ZIH6FWTAFWFQRUZLMK6MFJKYPC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ARMOUR US: Android Runtime Zero-permission Sensor Usage Monitoring from User Space","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Jiancong Cui, Kevin Fu, Tobias Alam, Yan Long, Yuqing Yang, Zhiqiang Lin","submitted_at":"2025-07-02T22:18:54Z","abstract_excerpt":"This work investigates how to monitor access to Android zero-permission sensors which could cause privacy leakage to users. Moreover, monitoring such sensitive access allows security researchers to characterize potential sensor abuse patterns. Zero-permission sensors such as accelerometers have become an indispensable part of Android devices. The critical information they provide has attracted extensive research investigating how data collectors could capture more sensor data to enable both benign and exploitative applications. In contrast, little work has explored how to enable data providers"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.02177","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.02177/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DT4t7N9jaUOaYzf/4tHeBKHl06WMY8cshoDB9GOGLetL2wEnekvEvxysmKwQXyrqp0Kcz4NhB8o193Dsd1moBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T23:33:23.165234Z"},"content_sha256":"0d53418053150c49838231b90483040fa2dc3ba0a47b45217453ba979d2c738c","schema_version":"1.0","event_id":"sha256:0d53418053150c49838231b90483040fa2dc3ba0a47b45217453ba979d2c738c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/bundle.json","state_url":"https://pith.science/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T23:33:23Z","links":{"resolver":"https://pith.science/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC","bundle":"https://pith.science/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/bundle.json","state":"https://pith.science/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ZIH6FWTAFWFQRUZLMK6MFJKYPC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:ZIH6FWTAFWFQRUZLMK6MFJKYPC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b0765105913368af8e8a9beba367153bea3aa47824977617cd04e4092cbf9d7a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-02T22:18:54Z","title_canon_sha256":"06469cee71ce8958c7c04e1fc909cb9fc00eb6ef1de7cfd466490beb50168408"},"schema_version":"1.0","source":{"id":"2507.02177","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2507.02177","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"arxiv_version","alias_value":"2507.02177v1","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.02177","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_12","alias_value":"ZIH6FWTAFWFQ","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_16","alias_value":"ZIH6FWTAFWFQRUZL","created_at":"2026-07-05T11:31:13Z"},{"alias_kind":"pith_short_8","alias_value":"ZIH6FWTA","created_at":"2026-07-05T11:31:13Z"}],"graph_snapshots":[{"event_id":"sha256:0d53418053150c49838231b90483040fa2dc3ba0a47b45217453ba979d2c738c","target":"graph","created_at":"2026-07-05T11:31:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2507.02177/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This work investigates how to monitor access to Android zero-permission sensors which could cause privacy leakage to users. Moreover, monitoring such sensitive access allows security researchers to characterize potential sensor abuse patterns. Zero-permission sensors such as accelerometers have become an indispensable part of Android devices. The critical information they provide has attracted extensive research investigating how data collectors could capture more sensor data to enable both benign and exploitative applications. In contrast, little work has explored how to enable data providers","authors_text":"Jiancong Cui, Kevin Fu, Tobias Alam, Yan Long, Yuqing Yang, Zhiqiang Lin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-02T22:18:54Z","title":"ARMOUR US: Android Runtime Zero-permission Sensor Usage Monitoring from User Space"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.02177","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4b3a3dafa4ac9f9c80054ddc175ad1d69a645a76572135466c207c9d06479778","target":"record","created_at":"2026-07-05T11:31:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b0765105913368af8e8a9beba367153bea3aa47824977617cd04e4092cbf9d7a","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-07-02T22:18:54Z","title_canon_sha256":"06469cee71ce8958c7c04e1fc909cb9fc00eb6ef1de7cfd466490beb50168408"},"schema_version":"1.0","source":{"id":"2507.02177","kind":"arxiv","version":1}},"canonical_sha256":"ca0fe2da602d8b08d32b62bcc2a558789bdcc5912e4513c77f889da9f9c8f58b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ca0fe2da602d8b08d32b62bcc2a558789bdcc5912e4513c77f889da9f9c8f58b","first_computed_at":"2026-07-05T11:31:13.289397Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:31:13.289397Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"DD3LgfhrHHyytJhg5ncn4T9NqdB7dvw95cqYT5Nan6BhE4AVUAi13R1QdVQ7HCVyVY03Iz5uR2BPICdh9iDoAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:31:13.289941Z","signed_message":"canonical_sha256_bytes"},"source_id":"2507.02177","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4b3a3dafa4ac9f9c80054ddc175ad1d69a645a76572135466c207c9d06479778","sha256:0d53418053150c49838231b90483040fa2dc3ba0a47b45217453ba979d2c738c"],"state_sha256":"5cede0d738c78525986a22c48f9224a3440d03fa0100aad620f2632607408f6e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dSnJJvUS4yOgtB5BBXoRSiGwjuR5fs1RhHM4GMVn8T+W56HhT1APZD16GurlA64oWlaTz/Rb2myfImZtRyeSAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T23:33:23.171569Z","bundle_sha256":"fa6efe091c51b9060924a467691afe7141a5b270322bd5d114c8fcac7549e196"}}