{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:PZQHHVVTFTV5Z5SJICPTHSOG3G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fc6b6cef916a41c3a30496d490eb1fc00a6cb0c04e79efe6110829a83ab1e48b","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-16T02:55:02Z","title_canon_sha256":"c5f0efe76b6245513be963f4a1418e8d238301e80815ffd45d5a407bbd5a5eae"},"schema_version":"1.0","source":{"id":"1612.05343","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1612.05343","created_at":"2026-05-18T00:54:52Z"},{"alias_kind":"arxiv_version","alias_value":"1612.05343v1","created_at":"2026-05-18T00:54:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1612.05343","created_at":"2026-05-18T00:54:52Z"},{"alias_kind":"pith_short_12","alias_value":"PZQHHVVTFTV5","created_at":"2026-05-18T12:30:39Z"},{"alias_kind":"pith_short_16","alias_value":"PZQHHVVTFTV5Z5SJ","created_at":"2026-05-18T12:30:39Z"},{"alias_kind":"pith_short_8","alias_value":"PZQHHVVT","created_at":"2026-05-18T12:30:39Z"}],"graph_snapshots":[{"event_id":"sha256:7b84adda9276a9e1125600badd3b52792ba966640873e769d13b936d7cf558d1","target":"graph","created_at":"2026-05-18T00:54:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Despite its widespread use in Android apps, reflection poses graving problems for static security analysis. Currently, string inference is applied to handle reflection, resulting in significantly missed security vulnerabilities. In this paper, we bring forward the ubiquity of incomplete information environments (IIEs) for Android apps, where some critical data-flows are missing during static analysis, and the need for resolving reflective calls under IIEs. We present Ripple, the first IIE-aware static reflection analysis for Android apps that resolves reflective calls more soundly than string ","authors_text":"Jingling Xue, Tian Tan, Yifei Zhang, Yue Li","cross_cats":["cs.SE"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-16T02:55:02Z","title":"Ripple: Reflection Analysis for Android Apps in Incomplete Information Environments"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1612.05343","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d05ddcd3079e7062328828ced3f61ffe13b9b31d914a5d37a7eaf3e8219b07ab","target":"record","created_at":"2026-05-18T00:54:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fc6b6cef916a41c3a30496d490eb1fc00a6cb0c04e79efe6110829a83ab1e48b","cross_cats_sorted":["cs.SE"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2016-12-16T02:55:02Z","title_canon_sha256":"c5f0efe76b6245513be963f4a1418e8d238301e80815ffd45d5a407bbd5a5eae"},"schema_version":"1.0","source":{"id":"1612.05343","kind":"arxiv","version":1}},"canonical_sha256":"7e6073d6b32cebdcf649409f33c9c6d9a5397810b7af3404d04aa1de98863d06","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7e6073d6b32cebdcf649409f33c9c6d9a5397810b7af3404d04aa1de98863d06","first_computed_at":"2026-05-18T00:54:52.018250Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:54:52.018250Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jhLRQbXJ2RzBrNkGhh5BmJHiqvIE28A0qcXTVFjwOKtrzt4iuiZbPjLpKZA3VN/wY8F3jjsKTYUeAvdAO6L9Bw==","signature_status":"signed_v1","signed_at":"2026-05-18T00:54:52.018773Z","signed_message":"canonical_sha256_bytes"},"source_id":"1612.05343","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d05ddcd3079e7062328828ced3f61ffe13b9b31d914a5d37a7eaf3e8219b07ab","sha256:7b84adda9276a9e1125600badd3b52792ba966640873e769d13b936d7cf558d1"],"state_sha256":"7b39f872429fed617ac48ecb8f5da1ee1513342f7a8980c512fd0499951a40d6"}