{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2017:K2XI5YRJNRR6JBFJDYMG7QPUNC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"22b51c88f53da152b5f4c0363efd6ac858d5ad1c54c2b260c0a34d961306099f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-15T23:08:20Z","title_canon_sha256":"fe2b29566f46d877dc48a074f698d1bc3253ae66a09eb58a9e7cfdf4f8e4203e"},"schema_version":"1.0","source":{"id":"1707.04795","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1707.04795","created_at":"2026-05-18T00:40:12Z"},{"alias_kind":"arxiv_version","alias_value":"1707.04795v1","created_at":"2026-05-18T00:40:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1707.04795","created_at":"2026-05-18T00:40:12Z"},{"alias_kind":"pith_short_12","alias_value":"K2XI5YRJNRR6","created_at":"2026-05-18T12:31:24Z"},{"alias_kind":"pith_short_16","alias_value":"K2XI5YRJNRR6JBFJ","created_at":"2026-05-18T12:31:24Z"},{"alias_kind":"pith_short_8","alias_value":"K2XI5YRJ","created_at":"2026-05-18T12:31:24Z"}],"graph_snapshots":[{"event_id":"sha256:7a442ef3889ea5de9ae93a0d7517d363155cf2c4353cc912e26e3d6dfd755380","target":"graph","created_at":"2026-05-18T00:40:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Clustering has been well studied for desktop malware analysis as an effective triage method. Conventional similarity-based clustering techniques, however, cannot be immediately applied to Android malware analysis due to the excessive use of third-party libraries in Android application development and the widespread use of repackaging in malware development. We design and implement an Android malware clustering system through iterative mining of malicious payload and checking whether malware samples share the same version of malicious payload. Our system utilizes a hierarchical clustering techn","authors_text":"Jiyong Jang, Xin Hu, Xinming Ou, Yuping Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-15T23:08:20Z","title":"Android Malware Clustering through Malicious Payload Mining"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1707.04795","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b76829de039918ec4254fbc6641e24226dad15ead044b7adda4be68e369b7182","target":"record","created_at":"2026-05-18T00:40:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"22b51c88f53da152b5f4c0363efd6ac858d5ad1c54c2b260c0a34d961306099f","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2017-07-15T23:08:20Z","title_canon_sha256":"fe2b29566f46d877dc48a074f698d1bc3253ae66a09eb58a9e7cfdf4f8e4203e"},"schema_version":"1.0","source":{"id":"1707.04795","kind":"arxiv","version":1}},"canonical_sha256":"56ae8ee2296c63e484a91e186fc1f468b2bcd2cbaba5a62007bc59d80186e023","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"56ae8ee2296c63e484a91e186fc1f468b2bcd2cbaba5a62007bc59d80186e023","first_computed_at":"2026-05-18T00:40:12.229939Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:40:12.229939Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"47Ga6Mb2lHnXxUNXKwUnQDVcd93b7buvkY3MtnE20Rm9GZz4pTSTFFELV5J6S3YGyJZmhLHDOQQUWsHSJzzCBA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:40:12.230626Z","signed_message":"canonical_sha256_bytes"},"source_id":"1707.04795","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b76829de039918ec4254fbc6641e24226dad15ead044b7adda4be68e369b7182","sha256:7a442ef3889ea5de9ae93a0d7517d363155cf2c4353cc912e26e3d6dfd755380"],"state_sha256":"37bb0d3b710a056e616fe0cf1d3b8c0d04c52c36222ed43b4dde5c92b0b1726c"}