{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:4TMHAHLFYHWNRNV2CRP6ESI4DV","short_pith_number":"pith:4TMHAHLF","canonical_record":{"source":{"id":"2404.11121","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-17T07:08:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8e2725fb63e805cb4ae0db352520528b4b6e4067278f8deb1e706e718acf0c3d","abstract_canon_sha256":"6300c5ebf702e8fb8080b4ca67a282821b0dfacb0a7fa62e407fa805f022b988"},"schema_version":"1.0"},"canonical_sha256":"e4d8701d65c1ecd8b6ba145fe2491c1d5bb5a1a3efbcb1bcca5b99cb34a085e6","source":{"kind":"arxiv","id":"2404.11121","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.11121","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"arxiv_version","alias_value":"2404.11121v2","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.11121","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_12","alias_value":"4TMHAHLFYHWN","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_16","alias_value":"4TMHAHLFYHWNRNV2","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_8","alias_value":"4TMHAHLF","created_at":"2026-07-05T09:38:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:4TMHAHLFYHWNRNV2CRP6ESI4DV","target":"record","payload":{"canonical_record":{"source":{"id":"2404.11121","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-17T07:08:45Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8e2725fb63e805cb4ae0db352520528b4b6e4067278f8deb1e706e718acf0c3d","abstract_canon_sha256":"6300c5ebf702e8fb8080b4ca67a282821b0dfacb0a7fa62e407fa805f022b988"},"schema_version":"1.0"},"canonical_sha256":"e4d8701d65c1ecd8b6ba145fe2491c1d5bb5a1a3efbcb1bcca5b99cb34a085e6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:38:25.608360Z","signature_b64":"PGMf/QdcurYlPeXQ2mdP6fb9w1A/yFP7L/Pt4t5FkVQlKz5kkwRfx4Do6v59LaeXMEI68G3F9BNto7EvnZCQCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e4d8701d65c1ecd8b6ba145fe2491c1d5bb5a1a3efbcb1bcca5b99cb34a085e6","last_reissued_at":"2026-07-05T09:38:25.607762Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:38:25.607762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.11121","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WuFl3T/gPh0tOYFAP3yDD8gr6ta6woRZu/JDDD0hBKJKdv13DbX2NgEqxzC0gJkezn7bxxxgKLHd/zn8obAPAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:05:01.836858Z"},"content_sha256":"27c2e1a0ee44d67513d534cb9de3df1fd91da9f5bc2a2edfddf98b962afc3082","schema_version":"1.0","event_id":"sha256:27c2e1a0ee44d67513d534cb9de3df1fd91da9f5bc2a2edfddf98b962afc3082"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:4TMHAHLFYHWNRNV2CRP6ESI4DV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jianwei Yin, Qinfeng Li, Tianyu Du, Xuhong Zhang, Yangfan Xie, ZhengHan Qin, Zhiqiang Shen","submitted_at":"2024-04-17T07:08:45Z","abstract_excerpt":"Proprietary large language models (LLMs) have been widely applied in various scenarios. Additionally, deploying LLMs on edge devices is trending for efficiency and privacy reasons. However, edge deployment of proprietary LLMs introduces new security challenges: edge-deployed models are exposed as white-box accessible to users, enabling adversaries to conduct effective model stealing (MS) attacks. Unfortunately, existing defense mechanisms fail to provide effective protection. Specifically, we identify four critical protection properties that existing methods fail to simultaneously satisfy: (1)"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.11121","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.11121/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:38:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OvJMcsaHEkmbJQioWa5XE21weQyqZLXNP2u5ebm5GdDkH8IInrSRIflbqNj5MDr2JCj6dBHw5FkZu3zB7OaTAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T02:05:01.837781Z"},"content_sha256":"10746f302db674b844bb4c23f2a297c272d23b496e05e65360e78d4a9897aab3","schema_version":"1.0","event_id":"sha256:10746f302db674b844bb4c23f2a297c272d23b496e05e65360e78d4a9897aab3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/bundle.json","state_url":"https://pith.science/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T02:05:01Z","links":{"resolver":"https://pith.science/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV","bundle":"https://pith.science/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/bundle.json","state":"https://pith.science/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4TMHAHLFYHWNRNV2CRP6ESI4DV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:4TMHAHLFYHWNRNV2CRP6ESI4DV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6300c5ebf702e8fb8080b4ca67a282821b0dfacb0a7fa62e407fa805f022b988","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-17T07:08:45Z","title_canon_sha256":"8e2725fb63e805cb4ae0db352520528b4b6e4067278f8deb1e706e718acf0c3d"},"schema_version":"1.0","source":{"id":"2404.11121","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.11121","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"arxiv_version","alias_value":"2404.11121v2","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.11121","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_12","alias_value":"4TMHAHLFYHWN","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_16","alias_value":"4TMHAHLFYHWNRNV2","created_at":"2026-07-05T09:38:25Z"},{"alias_kind":"pith_short_8","alias_value":"4TMHAHLF","created_at":"2026-07-05T09:38:25Z"}],"graph_snapshots":[{"event_id":"sha256:10746f302db674b844bb4c23f2a297c272d23b496e05e65360e78d4a9897aab3","target":"graph","created_at":"2026-07-05T09:38:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.11121/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Proprietary large language models (LLMs) have been widely applied in various scenarios. Additionally, deploying LLMs on edge devices is trending for efficiency and privacy reasons. However, edge deployment of proprietary LLMs introduces new security challenges: edge-deployed models are exposed as white-box accessible to users, enabling adversaries to conduct effective model stealing (MS) attacks. Unfortunately, existing defense mechanisms fail to provide effective protection. Specifically, we identify four critical protection properties that existing methods fail to simultaneously satisfy: (1)","authors_text":"Jianwei Yin, Qinfeng Li, Tianyu Du, Xuhong Zhang, Yangfan Xie, ZhengHan Qin, Zhiqiang Shen","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-17T07:08:45Z","title":"TransLinkGuard: Safeguarding Transformer Models Against Model Stealing in Edge Deployment"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.11121","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:27c2e1a0ee44d67513d534cb9de3df1fd91da9f5bc2a2edfddf98b962afc3082","target":"record","created_at":"2026-07-05T09:38:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6300c5ebf702e8fb8080b4ca67a282821b0dfacb0a7fa62e407fa805f022b988","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-04-17T07:08:45Z","title_canon_sha256":"8e2725fb63e805cb4ae0db352520528b4b6e4067278f8deb1e706e718acf0c3d"},"schema_version":"1.0","source":{"id":"2404.11121","kind":"arxiv","version":2}},"canonical_sha256":"e4d8701d65c1ecd8b6ba145fe2491c1d5bb5a1a3efbcb1bcca5b99cb34a085e6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e4d8701d65c1ecd8b6ba145fe2491c1d5bb5a1a3efbcb1bcca5b99cb34a085e6","first_computed_at":"2026-07-05T09:38:25.607762Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:38:25.607762Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PGMf/QdcurYlPeXQ2mdP6fb9w1A/yFP7L/Pt4t5FkVQlKz5kkwRfx4Do6v59LaeXMEI68G3F9BNto7EvnZCQCA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:38:25.608360Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.11121","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:27c2e1a0ee44d67513d534cb9de3df1fd91da9f5bc2a2edfddf98b962afc3082","sha256:10746f302db674b844bb4c23f2a297c272d23b496e05e65360e78d4a9897aab3"],"state_sha256":"1db07947406b23be41dd893061712b6221b10628257f816d9f004bf27c986dad"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rV+9d7OEHK2URQXkj1xiyMiJMyDtwj/aOZtKfwUCtjmCvNquJ3UImBh6CpcCD9vDajihLrnCnHGLA9bEEYphAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T02:05:01.912742Z","bundle_sha256":"859ce90d2fa6bc2262694c5269fb4d67ce503b62526767ea3c9b71da0937221c"}}