{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:5LYWPOS7T2N7CDON6FQJMALY7L","short_pith_number":"pith:5LYWPOS7","canonical_record":{"source":{"id":"2506.18870","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T17:38:48Z","cross_cats_sorted":[],"title_canon_sha256":"2770ecd9c585e8a2c9df774138b1bb4e6e64c075b6143c984c89a05027a5e85a","abstract_canon_sha256":"686010141f5582a09a11c1ed218f22c5aef726428dbb5298fc6d8be38ec56f24"},"schema_version":"1.0"},"canonical_sha256":"eaf167ba5f9e9bf10dcdf160960178fac33932cf1779966e033daaf2edcd5cc7","source":{"kind":"arxiv","id":"2506.18870","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18870","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18870v1","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18870","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_12","alias_value":"5LYWPOS7T2N7","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_16","alias_value":"5LYWPOS7T2N7CDON","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_8","alias_value":"5LYWPOS7","created_at":"2026-07-05T11:25:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:5LYWPOS7T2N7CDON6FQJMALY7L","target":"record","payload":{"canonical_record":{"source":{"id":"2506.18870","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T17:38:48Z","cross_cats_sorted":[],"title_canon_sha256":"2770ecd9c585e8a2c9df774138b1bb4e6e64c075b6143c984c89a05027a5e85a","abstract_canon_sha256":"686010141f5582a09a11c1ed218f22c5aef726428dbb5298fc6d8be38ec56f24"},"schema_version":"1.0"},"canonical_sha256":"eaf167ba5f9e9bf10dcdf160960178fac33932cf1779966e033daaf2edcd5cc7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:25:57.303184Z","signature_b64":"K0mKX65U5c03Qft3nZBOJE/MMP/W+MA3zFo3dIPDZQ0Ka17AioKmLBSm6iHgUftzFxx1f7RQ5XowwwS8Szg2DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eaf167ba5f9e9bf10dcdf160960178fac33932cf1779966e033daaf2edcd5cc7","last_reissued_at":"2026-07-05T11:25:57.302787Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:25:57.302787Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.18870","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:25:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jOIw1JaoQjVHXuSJMyEs5HFgePgVnNJ4oNStcV4nB0MDaju9IP+cZYlVdbk3o4hiZMsx7JPZH9PaKLQSOxUXDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:26:19.849449Z"},"content_sha256":"32df16bdc535a0e2de7e54acb70cb22155d488e3c464795f65e72b44a5abe9a8","schema_version":"1.0","event_id":"sha256:32df16bdc535a0e2de7e54acb70cb22155d488e3c464795f65e72b44a5abe9a8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:5LYWPOS7T2N7CDON6FQJMALY7L","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Amplifying Machine Learning Attacks Through Strategic Compositions","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Hai Huang, Michael Backes, Yang Zhang, Yugeng Liu, Zheng Li","submitted_at":"2025-06-23T17:38:48Z","abstract_excerpt":"Machine learning (ML) models are proving to be vulnerable to a variety of attacks that allow the adversary to learn sensitive information, cause mispredictions, and more. While these attacks have been extensively studied, current research predominantly focuses on analyzing each attack type individually. In practice, however, adversaries may employ multiple attack strategies simultaneously rather than relying on a single approach. This prompts a crucial yet underexplored question: When the adversary has multiple attacks at their disposal, are they able to mount or amplify the effect of one atta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18870","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.18870/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:25:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gQ9PKSghCOtQ/BJS8MtzPkiDl11L43w22mNzE7ftcARb1kjLn59ut+ReRTQzuuTJKKmADvM4kCTTGlBul9mCAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T05:26:19.849825Z"},"content_sha256":"90bd16f0ae32ec54023ea26a1a77a07fcd1a0f56c538afc35916e8a7f91d082a","schema_version":"1.0","event_id":"sha256:90bd16f0ae32ec54023ea26a1a77a07fcd1a0f56c538afc35916e8a7f91d082a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5LYWPOS7T2N7CDON6FQJMALY7L/bundle.json","state_url":"https://pith.science/pith/5LYWPOS7T2N7CDON6FQJMALY7L/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5LYWPOS7T2N7CDON6FQJMALY7L/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T05:26:19Z","links":{"resolver":"https://pith.science/pith/5LYWPOS7T2N7CDON6FQJMALY7L","bundle":"https://pith.science/pith/5LYWPOS7T2N7CDON6FQJMALY7L/bundle.json","state":"https://pith.science/pith/5LYWPOS7T2N7CDON6FQJMALY7L/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5LYWPOS7T2N7CDON6FQJMALY7L/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:5LYWPOS7T2N7CDON6FQJMALY7L","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"686010141f5582a09a11c1ed218f22c5aef726428dbb5298fc6d8be38ec56f24","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T17:38:48Z","title_canon_sha256":"2770ecd9c585e8a2c9df774138b1bb4e6e64c075b6143c984c89a05027a5e85a"},"schema_version":"1.0","source":{"id":"2506.18870","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18870","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18870v1","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18870","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_12","alias_value":"5LYWPOS7T2N7","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_16","alias_value":"5LYWPOS7T2N7CDON","created_at":"2026-07-05T11:25:57Z"},{"alias_kind":"pith_short_8","alias_value":"5LYWPOS7","created_at":"2026-07-05T11:25:57Z"}],"graph_snapshots":[{"event_id":"sha256:90bd16f0ae32ec54023ea26a1a77a07fcd1a0f56c538afc35916e8a7f91d082a","target":"graph","created_at":"2026-07-05T11:25:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.18870/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning (ML) models are proving to be vulnerable to a variety of attacks that allow the adversary to learn sensitive information, cause mispredictions, and more. While these attacks have been extensively studied, current research predominantly focuses on analyzing each attack type individually. In practice, however, adversaries may employ multiple attack strategies simultaneously rather than relying on a single approach. This prompts a crucial yet underexplored question: When the adversary has multiple attacks at their disposal, are they able to mount or amplify the effect of one atta","authors_text":"Hai Huang, Michael Backes, Yang Zhang, Yugeng Liu, Zheng Li","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T17:38:48Z","title":"Amplifying Machine Learning Attacks Through Strategic Compositions"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18870","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:32df16bdc535a0e2de7e54acb70cb22155d488e3c464795f65e72b44a5abe9a8","target":"record","created_at":"2026-07-05T11:25:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"686010141f5582a09a11c1ed218f22c5aef726428dbb5298fc6d8be38ec56f24","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-23T17:38:48Z","title_canon_sha256":"2770ecd9c585e8a2c9df774138b1bb4e6e64c075b6143c984c89a05027a5e85a"},"schema_version":"1.0","source":{"id":"2506.18870","kind":"arxiv","version":1}},"canonical_sha256":"eaf167ba5f9e9bf10dcdf160960178fac33932cf1779966e033daaf2edcd5cc7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eaf167ba5f9e9bf10dcdf160960178fac33932cf1779966e033daaf2edcd5cc7","first_computed_at":"2026-07-05T11:25:57.302787Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:25:57.302787Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"K0mKX65U5c03Qft3nZBOJE/MMP/W+MA3zFo3dIPDZQ0Ka17AioKmLBSm6iHgUftzFxx1f7RQ5XowwwS8Szg2DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:25:57.303184Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.18870","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:32df16bdc535a0e2de7e54acb70cb22155d488e3c464795f65e72b44a5abe9a8","sha256:90bd16f0ae32ec54023ea26a1a77a07fcd1a0f56c538afc35916e8a7f91d082a"],"state_sha256":"31d7a8dfeb4b91c0d2b4d0e382caa513230c84c81720c930fccf99214d4c5f8c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"x2+HG3ecIHvh8WyZBxq7NYbj1Bgqah8fTftavwtRfX8hTKADX7xQdTAOD8MaqitolCSuENDYs5yxmHROzfj7DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T05:26:19.852071Z","bundle_sha256":"05bd44058d7d6c542a9cefa8a99c2bc4b71f19dc56e2242d345680ee5d7b49ba"}}