{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:2VCRDXQISNEIUS6OD73AJWASOV","short_pith_number":"pith:2VCRDXQI","canonical_record":{"source":{"id":"2405.20641","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","cross_cats_sorted":[],"title_canon_sha256":"4ee05e65a7fa8f620928f24196e0c05897123ab965083e7814eec3139f6fe741","abstract_canon_sha256":"576c30f4d52259597d2a40d358bcbe879dea3cd76d346b0395972e3cc0ae6cc8"},"schema_version":"1.0"},"canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","source":{"kind":"arxiv","id":"2405.20641","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20641","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20641v2","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20641","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_12","alias_value":"2VCRDXQISNEI","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_16","alias_value":"2VCRDXQISNEIUS6O","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_8","alias_value":"2VCRDXQI","created_at":"2026-07-05T09:21:26Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:2VCRDXQISNEIUS6OD73AJWASOV","target":"record","payload":{"canonical_record":{"source":{"id":"2405.20641","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","cross_cats_sorted":[],"title_canon_sha256":"4ee05e65a7fa8f620928f24196e0c05897123ab965083e7814eec3139f6fe741","abstract_canon_sha256":"576c30f4d52259597d2a40d358bcbe879dea3cd76d346b0395972e3cc0ae6cc8"},"schema_version":"1.0"},"canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:21:26.926992Z","signature_b64":"6LfBUgr6j3gyWRYb0jhpM+MLckofh9Yy/rsz3COLkcCHMT+iMRxm9uKRJF6kxXKHkTVzTGIYOaIZXfaO28DODg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","last_reissued_at":"2026-07-05T09:21:26.926452Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:21:26.926452Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.20641","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Prm36ZMg2jW7ZuPxLbSNKDqGmm2q/TAy3H+RNfGEb9JR6SaUvHesno70sqJfj2yr7Ov1M4VJklPxNVquYipICw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T20:30:00.981211Z"},"content_sha256":"82b793147a9707444131bd1063ba0117809c4bb23433c0e0f2ee0ec019039bab","schema_version":"1.0","event_id":"sha256:82b793147a9707444131bd1063ba0117809c4bb23433c0e0f2ee0ec019039bab"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:2VCRDXQISNEIUS6OD73AJWASOV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ding Li, Haomin Jia, Shaofei Li, Xiangqun Chen, Yao Guo, Ziqi Zhang","submitted_at":"2024-05-31T06:56:54Z","abstract_excerpt":"Query-based black-box attacks have emerged as a significant threat to machine learning systems, where adversaries can manipulate the input queries to generate adversarial examples that can cause misclassification of the model. To counter these attacks, researchers have proposed Stateful Defense Models (SDMs) for detecting adversarial query sequences and rejecting queries that are \"similar\" to the history queries. Existing state-of-the-art (SOTA) SDMs (e.g., BlackLight and PIHA) have shown great effectiveness in defending against these attacks. However, recent studies have shown that they are v"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20641","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.20641/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:21:26Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YzVfF7PnvCufvl6BjJ+aSkQ18xrd9qJNlvS1MZ9nKgbRea7itkZrpUtBEiRzVb/Zamh4MyS4jqB5ZMcmPuyjAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T20:30:00.981595Z"},"content_sha256":"4adcfbc6c16137ecda8933aa57a64a1e2215e60b6e5d3d94dceaed5d52d2f915","schema_version":"1.0","event_id":"sha256:4adcfbc6c16137ecda8933aa57a64a1e2215e60b6e5d3d94dceaed5d52d2f915"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/bundle.json","state_url":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2VCRDXQISNEIUS6OD73AJWASOV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T20:30:00Z","links":{"resolver":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV","bundle":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/bundle.json","state":"https://pith.science/pith/2VCRDXQISNEIUS6OD73AJWASOV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2VCRDXQISNEIUS6OD73AJWASOV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:2VCRDXQISNEIUS6OD73AJWASOV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"576c30f4d52259597d2a40d358bcbe879dea3cd76d346b0395972e3cc0ae6cc8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","title_canon_sha256":"4ee05e65a7fa8f620928f24196e0c05897123ab965083e7814eec3139f6fe741"},"schema_version":"1.0","source":{"id":"2405.20641","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.20641","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"arxiv_version","alias_value":"2405.20641v2","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.20641","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_12","alias_value":"2VCRDXQISNEI","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_16","alias_value":"2VCRDXQISNEIUS6O","created_at":"2026-07-05T09:21:26Z"},{"alias_kind":"pith_short_8","alias_value":"2VCRDXQI","created_at":"2026-07-05T09:21:26Z"}],"graph_snapshots":[{"event_id":"sha256:4adcfbc6c16137ecda8933aa57a64a1e2215e60b6e5d3d94dceaed5d52d2f915","target":"graph","created_at":"2026-07-05T09:21:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.20641/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Query-based black-box attacks have emerged as a significant threat to machine learning systems, where adversaries can manipulate the input queries to generate adversarial examples that can cause misclassification of the model. To counter these attacks, researchers have proposed Stateful Defense Models (SDMs) for detecting adversarial query sequences and rejecting queries that are \"similar\" to the history queries. Existing state-of-the-art (SOTA) SDMs (e.g., BlackLight and PIHA) have shown great effectiveness in defending against these attacks. However, recent studies have shown that they are v","authors_text":"Ding Li, Haomin Jia, Shaofei Li, Xiangqun Chen, Yao Guo, Ziqi Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","title":"Query Provenance Analysis: Efficient and Robust Defense against Query-based Black-box Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.20641","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:82b793147a9707444131bd1063ba0117809c4bb23433c0e0f2ee0ec019039bab","target":"record","created_at":"2026-07-05T09:21:26Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"576c30f4d52259597d2a40d358bcbe879dea3cd76d346b0395972e3cc0ae6cc8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-31T06:56:54Z","title_canon_sha256":"4ee05e65a7fa8f620928f24196e0c05897123ab965083e7814eec3139f6fe741"},"schema_version":"1.0","source":{"id":"2405.20641","kind":"arxiv","version":2}},"canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d54511de0893488a4bce1ff604d812755e34a6914c5d8479deffa17da2c8aae0","first_computed_at":"2026-07-05T09:21:26.926452Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:21:26.926452Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6LfBUgr6j3gyWRYb0jhpM+MLckofh9Yy/rsz3COLkcCHMT+iMRxm9uKRJF6kxXKHkTVzTGIYOaIZXfaO28DODg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:21:26.926992Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.20641","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:82b793147a9707444131bd1063ba0117809c4bb23433c0e0f2ee0ec019039bab","sha256:4adcfbc6c16137ecda8933aa57a64a1e2215e60b6e5d3d94dceaed5d52d2f915"],"state_sha256":"22e12a5d1497cf8006fe21957898538fa267566491a10aca9f1ad0a5a4bbf832"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5cgBFjn4C+ylq9ZYvoxXssR03v+L+drIe3TMSByDRIMz6U2l9fI2hDXR3ceOAS3sRA0jqFZrCwdYmhRhCougAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T20:30:00.984181Z","bundle_sha256":"a3744d6a90785c0b1e69fcc1bcac43d51089764483985f3e1cbece8db90e9e02"}}