{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:2VCRDXQISNEIUS6OD73AJWASOV","short_pith_number":"pith:2VCRDXQI","schema_version":"1.0","canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","source":{"kind":"arxiv","id":"2405.20641","version":2},"attestation_state":"computed","paper":{"title":"Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ding Li, Haomin Jia, Shaofei Li, Xiangqun Chen, Yao Guo, Ziqi Zhang","submitted_at":"2024-05-31T06:56:54Z","abstract_excerpt":"Query-based black-box attacks have emerged as a significant threat to machine learning systems, where adversaries can manipulate the input queries to generate adversarial examples that can cause misclassification of the model. To counter these attacks, researchers have proposed Stateful Defense Models (SDMs) for detecting adversarial query sequences and rejecting queries that are \"similar\" to the history queries. Existing state-of-the-art (SOTA) SDMs (e.g., BlackLight and PIHA) have shown great effectiveness in defending against these attacks. However, recent studies have shown that they are v"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2405.20641","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","cross_cats_sorted":[],"title_canon_sha256":"4ee05e65a7fa8f620928f24196e0c05897123ab965083e7814eec3139f6fe741","abstract_canon_sha256":"576c30f4d52259597d2a40d358bcbe879dea3cd76d346b0395972e3cc0ae6cc8"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:21:26.926992Z","signature_b64":"6LfBUgr6j3gyWRYb0jhpM+MLckofh9Yy/rsz3COLkcCHMT+iMRxm9uKRJF6kxXKHkTVzTGIYOaIZXfaO28DODg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","last_reissued_at":"2026-07-05T09:21:26.926452Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:21:26.926452Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ding Li, Haomin Jia, Shaofei Li, Xiangqun Chen, Yao Guo, Ziqi Zhang","submitted_at":"2024-05-31T06:56:54Z","abstract_excerpt":"Query-based black-box attacks have emerged as a significant threat to machine learning systems, where adversaries can manipulate the input queries to generate adversarial examples that can cause misclassification of the model. To counter these attacks, researchers have proposed Stateful Defense Models (SDMs) for detecting adversarial query sequences and rejecting queries that are \"similar\" to the history queries. Existing state-of-the-art (SOTA) SDMs (e.g., BlackLight and PIHA) have shown great effectiveness in defending against these attacks. However, recent studies have shown that they are v"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20641","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.20641/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2405.20641","created_at":"2026-07-05T09:21:26.926515+00:00"},{"alias_kind":"arxiv_version","alias_value":"2405.20641v2","created_at":"2026-07-05T09:21:26.926515+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20641","created_at":"2026-07-05T09:21:26.926515+00:00"},{"alias_kind":"pith_short_12","alias_value":"2VCRDXQISNEI","created_at":"2026-07-05T09:21:26.926515+00:00"},{"alias_kind":"pith_short_16","alias_value":"2VCRDXQISNEIUS6O","created_at":"2026-07-05T09:21:26.926515+00:00"},{"alias_kind":"pith_short_8","alias_value":"2VCRDXQI","created_at":"2026-07-05T09:21:26.926515+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV","json":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV.json","graph_json":"https://pith.science/api/pith-number/2VCRDXQISNEIUS6OD73AJWASOV/graph.json","events_json":"https://pith.science/api/pith-number/2VCRDXQISNEIUS6OD73AJWASOV/events.json","paper":"https://pith.science/paper/2VCRDXQI"},"agent_actions":{"view_html":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV","download_json":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV.json","view_paper":"https://pith.science/paper/2VCRDXQI","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2405.20641&json=true","fetch_graph":"https://pith.science/api/pith-number/2VCRDXQISNEIUS6OD73AJWASOV/graph.json","fetch_events":"https://pith.science/api/pith-number/2VCRDXQISNEIUS6OD73AJWASOV/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/action/timestamp_anchor","attest_storage":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/action/storage_attestation","attest_author":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/action/author_attestation","sign_citation":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/action/citation_signature","submit_replication":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/action/replication_record"}},"created_at":"2026-07-05T09:21:26.926515+00:00","updated_at":"2026-07-05T09:21:26.926515+00:00"}