{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:6HFWZHWEHGSCR6RXILYA5ER23G","short_pith_number":"pith:6HFWZHWE","canonical_record":{"source":{"id":"2312.14260","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-21T19:21:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"29129d048971939cb3fb6df71cbf2f7ea05fa972e26cdb86e8594230e1645de4","abstract_canon_sha256":"2e745b089840160c0183f57e93c61c7ad66c6ab7c1c3c03db871b68b8f5d380e"},"schema_version":"1.0"},"canonical_sha256":"f1cb6c9ec439a428fa3742f00e923ad9b6666d61f086bbea0a32d863e89a8290","source":{"kind":"arxiv","id":"2312.14260","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.14260","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"arxiv_version","alias_value":"2312.14260v2","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.14260","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_12","alias_value":"6HFWZHWEHGSC","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_16","alias_value":"6HFWZHWEHGSCR6RX","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_8","alias_value":"6HFWZHWE","created_at":"2026-07-05T07:30:58Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:6HFWZHWEHGSCR6RXILYA5ER23G","target":"record","payload":{"canonical_record":{"source":{"id":"2312.14260","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-21T19:21:36Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"29129d048971939cb3fb6df71cbf2f7ea05fa972e26cdb86e8594230e1645de4","abstract_canon_sha256":"2e745b089840160c0183f57e93c61c7ad66c6ab7c1c3c03db871b68b8f5d380e"},"schema_version":"1.0"},"canonical_sha256":"f1cb6c9ec439a428fa3742f00e923ad9b6666d61f086bbea0a32d863e89a8290","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:30:58.508207Z","signature_b64":"NqfGvqIlKPaul9mHGUcxy7Ie8/YCk2SmKmWcXxanFHcXuOZ0Utr5UjWkMGt5Yue0dgiGbtxzYuoJaAAAGwquCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f1cb6c9ec439a428fa3742f00e923ad9b6666d61f086bbea0a32d863e89a8290","last_reissued_at":"2026-07-05T07:30:58.507834Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:30:58.507834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.14260","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pxXF3kJaHuF3ZG25zgOmvn4bP/+qSYPXTzpSHl7ZpNsnSxIojdQfNdUPjB8vSgsU6mAaT0e1yVmloG7Q5oSjBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T18:51:10.082807Z"},"content_sha256":"0a440b4dd45f7da5b6f2da81c917008374c69957d52870251a6e8747e00114e5","schema_version":"1.0","event_id":"sha256:0a440b4dd45f7da5b6f2da81c917008374c69957d52870251a6e8747e00114e5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:6HFWZHWEHGSCR6RXILYA5ER23G","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Giulio Zizzo, Janvi Thakkar, Sergio Maffeis","submitted_at":"2023-12-21T19:21:36Z","abstract_excerpt":"Machine learning models are being used in an increasing number of critical applications; thus, securing their integrity and ownership is critical. Recent studies observed that adversarial training and watermarking have a conflicting interaction. This work introduces a novel framework to integrate adversarial training with watermarking techniques to fortify against evasion attacks and provide confident model verification in case of intellectual property theft. We use adversarial training together with adversarial watermarks to train a robust watermarked model. The key intuition is to use a high"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.14260","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.14260/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:30:58Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mmkhWB6dAETvjxq1dru6vjd1hhNqCgrFJRRPUb52+YVX1dEkcULZfXMu/2lktSRQL1uoky9MaWF4RtR77c4HDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T18:51:10.083315Z"},"content_sha256":"fd23de0182e562c44ba8b44269f2bab7837efbbdc01374af8f8cc7c3e12d75d3","schema_version":"1.0","event_id":"sha256:fd23de0182e562c44ba8b44269f2bab7837efbbdc01374af8f8cc7c3e12d75d3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6HFWZHWEHGSCR6RXILYA5ER23G/bundle.json","state_url":"https://pith.science/pith/6HFWZHWEHGSCR6RXILYA5ER23G/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6HFWZHWEHGSCR6RXILYA5ER23G/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T18:51:10Z","links":{"resolver":"https://pith.science/pith/6HFWZHWEHGSCR6RXILYA5ER23G","bundle":"https://pith.science/pith/6HFWZHWEHGSCR6RXILYA5ER23G/bundle.json","state":"https://pith.science/pith/6HFWZHWEHGSCR6RXILYA5ER23G/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6HFWZHWEHGSCR6RXILYA5ER23G/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:6HFWZHWEHGSCR6RXILYA5ER23G","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e745b089840160c0183f57e93c61c7ad66c6ab7c1c3c03db871b68b8f5d380e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-21T19:21:36Z","title_canon_sha256":"29129d048971939cb3fb6df71cbf2f7ea05fa972e26cdb86e8594230e1645de4"},"schema_version":"1.0","source":{"id":"2312.14260","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.14260","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"arxiv_version","alias_value":"2312.14260v2","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.14260","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_12","alias_value":"6HFWZHWEHGSC","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_16","alias_value":"6HFWZHWEHGSCR6RX","created_at":"2026-07-05T07:30:58Z"},{"alias_kind":"pith_short_8","alias_value":"6HFWZHWE","created_at":"2026-07-05T07:30:58Z"}],"graph_snapshots":[{"event_id":"sha256:fd23de0182e562c44ba8b44269f2bab7837efbbdc01374af8f8cc7c3e12d75d3","target":"graph","created_at":"2026-07-05T07:30:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.14260/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning models are being used in an increasing number of critical applications; thus, securing their integrity and ownership is critical. Recent studies observed that adversarial training and watermarking have a conflicting interaction. This work introduces a novel framework to integrate adversarial training with watermarking techniques to fortify against evasion attacks and provide confident model verification in case of intellectual property theft. We use adversarial training together with adversarial watermarks to train a robust watermarked model. The key intuition is to use a high","authors_text":"Giulio Zizzo, Janvi Thakkar, Sergio Maffeis","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-21T19:21:36Z","title":"Elevating Defenses: Bridging Adversarial Training and Watermarking for Model Resilience"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.14260","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0a440b4dd45f7da5b6f2da81c917008374c69957d52870251a6e8747e00114e5","target":"record","created_at":"2026-07-05T07:30:58Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e745b089840160c0183f57e93c61c7ad66c6ab7c1c3c03db871b68b8f5d380e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2023-12-21T19:21:36Z","title_canon_sha256":"29129d048971939cb3fb6df71cbf2f7ea05fa972e26cdb86e8594230e1645de4"},"schema_version":"1.0","source":{"id":"2312.14260","kind":"arxiv","version":2}},"canonical_sha256":"f1cb6c9ec439a428fa3742f00e923ad9b6666d61f086bbea0a32d863e89a8290","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f1cb6c9ec439a428fa3742f00e923ad9b6666d61f086bbea0a32d863e89a8290","first_computed_at":"2026-07-05T07:30:58.507834Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:30:58.507834Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NqfGvqIlKPaul9mHGUcxy7Ie8/YCk2SmKmWcXxanFHcXuOZ0Utr5UjWkMGt5Yue0dgiGbtxzYuoJaAAAGwquCg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:30:58.508207Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.14260","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0a440b4dd45f7da5b6f2da81c917008374c69957d52870251a6e8747e00114e5","sha256:fd23de0182e562c44ba8b44269f2bab7837efbbdc01374af8f8cc7c3e12d75d3"],"state_sha256":"4251d564266e0305919fb59ecfec90ff24018a3ee43aabb8e4e2644224f6e0fa"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xGb7+jGE4zwHcelq3DqcDnCyQ0+GZOKZk6SI525Vde/7WZFHkonNpC2mEeDherC30oaT1I0+2aiHeUZzZKOUDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T18:51:10.087820Z","bundle_sha256":"dd10f78b8e4f2a9f053a1169fef0db973d6c63d91f3e99486c400169211013b7"}}