{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:3GMP7U2LPI42JT6BKGCTWDTKGX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea"},"schema_version":"1.0","source":{"id":"2409.19310","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"arxiv_version","alias_value":"2409.19310v1","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.19310","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_12","alias_value":"3GMP7U2LPI42","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_16","alias_value":"3GMP7U2LPI42JT6B","created_at":"2026-06-02T02:04:04Z"},{"alias_kind":"pith_short_8","alias_value":"3GMP7U2L","created_at":"2026-06-02T02:04:04Z"}],"graph_snapshots":[{"event_id":"sha256:cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65","target":"graph","created_at":"2026-06-02T02:04:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.19310/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The potential for exploitation of AI models has increased due to the rapid advancement of Artificial Intelligence (AI) and the widespread use of platforms like Model Zoo for sharing AI models. Attackers can embed malware within AI models through steganographic techniques, taking advantage of the substantial size of these models to conceal malicious data and use it for nefarious purposes, e.g. Remote Code Execution. Ensuring the security of AI models is a burgeoning area of research essential for safeguarding the multitude of organizations and users relying on AI technologies. This study levera","authors_text":"Daniel Gilkarov, Ran Dubin","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title":"Model X-Ray: Detection of Hidden Malware in AI Model Weights using Few Shot Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.19310","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd","target":"record","created_at":"2026-06-02T02:04:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f3e350de44a8449033465b6f19a35ed328637538706047d0862599853f510ff4","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2024-09-28T10:45:28Z","title_canon_sha256":"c605e0bacc42882488d15694abfcf82346753c6b3d2f617f1b0f73cef71404ea"},"schema_version":"1.0","source":{"id":"2409.19310","kind":"arxiv","version":1}},"canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d998ffd34b7a39a4cfc151853b0e6a35c5229497690e6986421c9231769aeaa4","first_computed_at":"2026-06-02T02:04:04.328600Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-02T02:04:04.328600Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"B8MX4Z069OK55gNuJqVRilqERGsu1v/z50kOtqcV0yqqMWvClxuMueHrXuAPKXLX5O7ovYACopj+k43Ha4ZRCA==","signature_status":"signed_v1","signed_at":"2026-06-02T02:04:04.329008Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.19310","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:88ba438ab0829b73b4c1cb68243942e68cfdbc661257351411b515cc482702fd","sha256:cd323f577df13e068700c5cc30f75301488aa6d88e6ed20db63375518e2e0c65"],"state_sha256":"44b8076928b5f5889ce7025877fdaa5edab5528261dcd13b80ec88890d7f07dd"}