{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5IYZ2FXUVOBZCJJQ5YUULRVRAH","short_pith_number":"pith:5IYZ2FXU","canonical_record":{"source":{"id":"2403.18580","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T13:59:21Z","cross_cats_sorted":[],"title_canon_sha256":"cbcb3c62a001a43a354b01330f7e2494afb001ced60765abd9bedb907857f755","abstract_canon_sha256":"29c3bdffdbcf860715399221f9e33aeac792d7247b0e3a851d11a5b5167f630b"},"schema_version":"1.0"},"canonical_sha256":"ea319d16f4ab83912530ee2945c6b101e8f1df2a3347968fdfd07034379a3eda","source":{"kind":"arxiv","id":"2403.18580","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18580","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18580v1","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18580","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_12","alias_value":"5IYZ2FXUVOBZ","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_16","alias_value":"5IYZ2FXUVOBZCJJQ","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_8","alias_value":"5IYZ2FXU","created_at":"2026-07-05T08:01:24Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5IYZ2FXUVOBZCJJQ5YUULRVRAH","target":"record","payload":{"canonical_record":{"source":{"id":"2403.18580","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T13:59:21Z","cross_cats_sorted":[],"title_canon_sha256":"cbcb3c62a001a43a354b01330f7e2494afb001ced60765abd9bedb907857f755","abstract_canon_sha256":"29c3bdffdbcf860715399221f9e33aeac792d7247b0e3a851d11a5b5167f630b"},"schema_version":"1.0"},"canonical_sha256":"ea319d16f4ab83912530ee2945c6b101e8f1df2a3347968fdfd07034379a3eda","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:01:24.638685Z","signature_b64":"zLIHkNv38Ty1ZRYM95lMSc7DZy4zSxy03zWBaE+1GUfCi1cyqRCWh1JRTWrgPLOEcgv4dCXZdnNwWCgS4BTCDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ea319d16f4ab83912530ee2945c6b101e8f1df2a3347968fdfd07034379a3eda","last_reissued_at":"2026-07-05T08:01:24.638148Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:01:24.638148Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.18580","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i6/2+HVb1asxYcweHf1pfMXJgWlAJ2RkrGMJzE7D9os5s4LECDWk6g3Q0ROvG18/H8yDtlTtAIKo0tWJlTMxAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:59:35.091375Z"},"content_sha256":"1ccab6a575153459467fd5f7b9b1623eb9724e130ea5ccd5996211d3971256da","schema_version":"1.0","event_id":"sha256:1ccab6a575153459467fd5f7b9b1623eb9724e130ea5ccd5996211d3971256da"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5IYZ2FXUVOBZCJJQ5YUULRVRAH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MisGUIDE : Defense Against Data-Free Deep Learning Model Extraction","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Mahendra Gurve, Sankar Behera, Satyadev Ahlawat, Yamuna Prasad","submitted_at":"2024-03-27T13:59:21Z","abstract_excerpt":"The rise of Machine Learning as a Service (MLaaS) has led to the widespread deployment of machine learning models trained on diverse datasets. These models are employed for predictive services through APIs, raising concerns about the security and confidentiality of the models due to emerging vulnerabilities in prediction APIs. Of particular concern are model cloning attacks, where individuals with limited data and no knowledge of the training dataset manage to replicate a victim model's functionality through black-box query access. This commonly entails generating adversarial queries to query "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18580","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.18580/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:24Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vf2cc4W/lBMUmxaWlPlK4/kw1SK8TrEn7LJirkJwhLfeAV9vTW3EPtL6M1zuNPrMyWEELynpQD1GewG6N56OBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T07:59:35.091888Z"},"content_sha256":"ed1e0d4868f67dfd3bfe0b1c8118f1796a169e171ad4296942f1560d3210411e","schema_version":"1.0","event_id":"sha256:ed1e0d4868f67dfd3bfe0b1c8118f1796a169e171ad4296942f1560d3210411e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/bundle.json","state_url":"https://pith.science/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T07:59:35Z","links":{"resolver":"https://pith.science/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH","bundle":"https://pith.science/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/bundle.json","state":"https://pith.science/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5IYZ2FXUVOBZCJJQ5YUULRVRAH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5IYZ2FXUVOBZCJJQ5YUULRVRAH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"29c3bdffdbcf860715399221f9e33aeac792d7247b0e3a851d11a5b5167f630b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T13:59:21Z","title_canon_sha256":"cbcb3c62a001a43a354b01330f7e2494afb001ced60765abd9bedb907857f755"},"schema_version":"1.0","source":{"id":"2403.18580","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.18580","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"arxiv_version","alias_value":"2403.18580v1","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.18580","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_12","alias_value":"5IYZ2FXUVOBZ","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_16","alias_value":"5IYZ2FXUVOBZCJJQ","created_at":"2026-07-05T08:01:24Z"},{"alias_kind":"pith_short_8","alias_value":"5IYZ2FXU","created_at":"2026-07-05T08:01:24Z"}],"graph_snapshots":[{"event_id":"sha256:ed1e0d4868f67dfd3bfe0b1c8118f1796a169e171ad4296942f1560d3210411e","target":"graph","created_at":"2026-07-05T08:01:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.18580/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The rise of Machine Learning as a Service (MLaaS) has led to the widespread deployment of machine learning models trained on diverse datasets. These models are employed for predictive services through APIs, raising concerns about the security and confidentiality of the models due to emerging vulnerabilities in prediction APIs. Of particular concern are model cloning attacks, where individuals with limited data and no knowledge of the training dataset manage to replicate a victim model's functionality through black-box query access. This commonly entails generating adversarial queries to query ","authors_text":"Mahendra Gurve, Sankar Behera, Satyadev Ahlawat, Yamuna Prasad","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T13:59:21Z","title":"MisGUIDE : Defense Against Data-Free Deep Learning Model Extraction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.18580","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1ccab6a575153459467fd5f7b9b1623eb9724e130ea5ccd5996211d3971256da","target":"record","created_at":"2026-07-05T08:01:24Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"29c3bdffdbcf860715399221f9e33aeac792d7247b0e3a851d11a5b5167f630b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-27T13:59:21Z","title_canon_sha256":"cbcb3c62a001a43a354b01330f7e2494afb001ced60765abd9bedb907857f755"},"schema_version":"1.0","source":{"id":"2403.18580","kind":"arxiv","version":1}},"canonical_sha256":"ea319d16f4ab83912530ee2945c6b101e8f1df2a3347968fdfd07034379a3eda","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ea319d16f4ab83912530ee2945c6b101e8f1df2a3347968fdfd07034379a3eda","first_computed_at":"2026-07-05T08:01:24.638148Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:01:24.638148Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zLIHkNv38Ty1ZRYM95lMSc7DZy4zSxy03zWBaE+1GUfCi1cyqRCWh1JRTWrgPLOEcgv4dCXZdnNwWCgS4BTCDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:01:24.638685Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.18580","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1ccab6a575153459467fd5f7b9b1623eb9724e130ea5ccd5996211d3971256da","sha256:ed1e0d4868f67dfd3bfe0b1c8118f1796a169e171ad4296942f1560d3210411e"],"state_sha256":"f0c31c122bf29c0ff9b2a0620c1258d916daf686d6e19c2c347751c6078cb312"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0dgHUlyfSs38MRZBvUQecdEkHHRC2Q4XHdM4ThR48SU0GjFah9l55k7AxxE0nEreg9fbUFW1VfVd3oFVb1oJCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T07:59:35.095675Z","bundle_sha256":"b291d4209229077a64012b1c58676d6f0c386ee784f9057f1d64e8089f37d30b"}}