{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:3GMP7U2LPI42JT6BKGCTWDTKGX","short_pith_number":"pith:3GMP7U2L","canonical_record":{"source":{"id":"2409.19310","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea","abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4"},"schema_version":"1.0"},"canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","source":{"kind":"arxiv","id":"2409.19310","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19310v1","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_12","alias_value":"3GMP7U2LPI42","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_16","alias_value":"3GMP7U2LPI42JT6B","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_8","alias_value":"3GMP7U2L","created_at":"2026-06-02T02:04:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:3GMP7U2LPI42JT6BKGCTWDTKGX","target":"record","payload":{"canonical_record":{"source":{"id":"2409.19310","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea","abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4"},"schema_version":"1.0"},"canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-02T02:04:04.329008Z","signature_b64":"B8MX4Z069OK55gNuJqVRilqERGsu1v/z50kOtqcV0yqqMWvClxuMueHrXuAPKXLX5O7ovYACopj+k43Ha4ZRCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","last_reissued_at":"2026-06-02T02:04:04.328600Z","signature_status":"signed_v1","first_computed_at":"2026-06-02T02:04:04.328600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.19310","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T02:04:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cr8/h/Aes/VJv9jDyxRXl8vI2zm+O0xoChNujqGfHZTZdeafugT45t/HmeM1QxceZGN305uEtpWMrxBeNChlCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:39:45.782884Z"},"content_sha256":"88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd","schema_version":"1.0","event_id":"sha256:88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:3GMP7U2LPI42JT6BKGCTWDTKGX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Daniel Gilkarov, Ran Dubin","submitted_at":"2024-09-28T10:45:28Z","abstract_excerpt":"The potential for exploitation of AI models has increased due to the rapid advancement of Artificial Intelligence (AI) and the widespread use of platforms like Model Zoo for sharing AI models. Attackers can embed malware within AI models through steganographic techniques, taking advantage of the substantial size of these models to conceal malicious data and use it for nefarious purposes, e.g. Remote Code Execution. Ensuring the security of AI models is a burgeoning area of research essential for safeguarding the multitude of organizations and users relying on AI technologies. This study levera"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19310","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.19310/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-02T02:04:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GzHCyrZXMRxgdPi4yDUPouMgFGRplht19OoVvMnIaF2p33dPqV/bt1BX12ylOxPRxVYmgK6xYMQD3Q+mvPVZAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T14:39:45.783573Z"},"content_sha256":"cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65","schema_version":"1.0","event_id":"sha256:cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/bundle.json","state_url":"https://pith.science/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T14:39:45Z","links":{"resolver":"https://pith.science/pith/3GMP7U2LPI42JT6BKGCTWDTKGX","bundle":"https://pith.science/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/bundle.json","state":"https://pith.science/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3GMP7U2LPI42JT6BKGCTWDTKGX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3GMP7U2LPI42JT6BKGCTWDTKGX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea"},"schema_version":"1.0","source":{"id":"2409.19310","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19310v1","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_12","alias_value":"3GMP7U2LPI42","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_16","alias_value":"3GMP7U2LPI42JT6B","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_8","alias_value":"3GMP7U2L","created_at":"2026-06-02T02:04:04Z"}],"graph_snapshots":[{"event_id":"sha256:cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65","target":"graph","created_at":"2026-06-02T02:04:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.19310/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The potential for exploitation of AI models has increased due to the rapid advancement of Artificial Intelligence (AI) and the widespread use of platforms like Model Zoo for sharing AI models. Attackers can embed malware within AI models through steganographic techniques, taking advantage of the substantial size of these models to conceal malicious data and use it for nefarious purposes, e.g. Remote Code Execution. Ensuring the security of AI models is a burgeoning area of research essential for safeguarding the multitude of organizations and users relying on AI technologies. This study levera","authors_text":"Daniel Gilkarov, Ran Dubin","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19310","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd","target":"record","created_at":"2026-06-02T02:04:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea"},"schema_version":"1.0","source":{"id":"2409.19310","kind":"arxiv","version":1}},"canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","first_computed_at":"2026-06-02T02:04:04.328600Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-02T02:04:04.328600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B8MX4Z069OK55gNuJqVRilqERGsu1v/z50kOtqcV0yqqMWvClxuMueHrXuAPKXLX5O7ovYACopj+k43Ha4ZRCA==","signature_status":"signed_v1","signed_at":"2026-06-02T02:04:04.329008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.19310","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd","sha256:cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65"],"state_sha256":"44b8076928b5f5889ce7025877fdaa5edab5528261dcd13b80ec88890d7f07dd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NVDGkeiVyiUMq9iNQ4XKOk0VVA5aGt2QizIEhZhFp3DdbKlo7o/sIzbRcydmZoxJBOOpc3YlS7EtQoBoQbIoBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T14:39:45.793064Z","bundle_sha256":"dc143fa21c8654b60431fc74408efd53c5d9515e622f3aa3efc02d9bf5234da0"}}