{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:5EUHRSGIB7WUNSKB5FAJWL67RG","short_pith_number":"pith:5EUHRSGI","schema_version":"1.0","canonical_sha256":"e92878c8c80fed46c941e9409b2fdf89abbbcd132e52137bf4deef44fb9c543b","source":{"kind":"arxiv","id":"2208.05477","version":1},"attestation_state":"computed","paper":{"title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chih-Ya Shen, Tzu-Yun Chien","submitted_at":"2022-08-10T08:27:26Z","abstract_excerpt":"With the increasing application value of machine learning, the intellectual property (IP) rights of deep neural networks (DNN) are getting more and more attention. With our analysis, most of the existing DNN watermarking methods can resist fine-tuning and pruning attack, but distillation attack. To address these problem, we propose a new DNN watermarking framework, Unified Soft-label Perturbation (USP), having a detector paired with the model to be watermarked, and Customized Soft-label Perturbation (CSP), embedding watermark via adding perturbation into the model output probability distributi"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2208.05477","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-08-10T08:27:26Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"8d56ba7fd97b2771bf8c9941db2ada96cb939ccabf5382beba069295d2262bda","abstract_canon_sha256":"0d6061067031d13d7e9421c4b573ee919b3f4bcaabe94aecde154e906ca16b3b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:47:43.218358Z","signature_b64":"xD+dtFA/+/oZsUrP1JmbAYxmGkQlNxpCf7eIGsHHFiO7Z66lRWkZQFFr+pTw63Jt8jLyfYh5/iHY8CfUOQLGBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e92878c8c80fed46c941e9409b2fdf89abbbcd132e52137bf4deef44fb9c543b","last_reissued_at":"2026-07-05T04:47:43.217911Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:47:43.217911Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Customized Watermarking for Deep Neural Networks via Label Distribution Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chih-Ya Shen, Tzu-Yun Chien","submitted_at":"2022-08-10T08:27:26Z","abstract_excerpt":"With the increasing application value of machine learning, the intellectual property (IP) rights of deep neural networks (DNN) are getting more and more attention. With our analysis, most of the existing DNN watermarking methods can resist fine-tuning and pruning attack, but distillation attack. To address these problem, we propose a new DNN watermarking framework, Unified Soft-label Perturbation (USP), having a detector paired with the model to be watermarked, and Customized Soft-label Perturbation (CSP), embedding watermark via adding perturbation into the model output probability distributi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.05477","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.05477/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2208.05477","created_at":"2026-07-05T04:47:43.217979+00:00"},{"alias_kind":"arxiv_version","alias_value":"2208.05477v1","created_at":"2026-07-05T04:47:43.217979+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.05477","created_at":"2026-07-05T04:47:43.217979+00:00"},{"alias_kind":"pith_short_12","alias_value":"5EUHRSGIB7WU","created_at":"2026-07-05T04:47:43.217979+00:00"},{"alias_kind":"pith_short_16","alias_value":"5EUHRSGIB7WUNSKB","created_at":"2026-07-05T04:47:43.217979+00:00"},{"alias_kind":"pith_short_8","alias_value":"5EUHRSGI","created_at":"2026-07-05T04:47:43.217979+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2505.17579","citing_title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","ref_index":4,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG","json":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG.json","graph_json":"https://pith.science/api/pith-number/5EUHRSGIB7WUNSKB5FAJWL67RG/graph.json","events_json":"https://pith.science/api/pith-number/5EUHRSGIB7WUNSKB5FAJWL67RG/events.json","paper":"https://pith.science/paper/5EUHRSGI"},"agent_actions":{"view_html":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG","download_json":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG.json","view_paper":"https://pith.science/paper/5EUHRSGI","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2208.05477&json=true","fetch_graph":"https://pith.science/api/pith-number/5EUHRSGIB7WUNSKB5FAJWL67RG/graph.json","fetch_events":"https://pith.science/api/pith-number/5EUHRSGIB7WUNSKB5FAJWL67RG/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG/action/timestamp_anchor","attest_storage":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG/action/storage_attestation","attest_author":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG/action/author_attestation","sign_citation":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG/action/citation_signature","submit_replication":"https://pith.science/pith/5EUHRSGIB7WUNSKB5FAJWL67RG/action/replication_record"}},"created_at":"2026-07-05T04:47:43.217979+00:00","updated_at":"2026-07-05T04:47:43.217979+00:00"}