{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:7EEOPPTRPQ6ZHGQZBPZAAUXJ4T","short_pith_number":"pith:7EEOPPTR","canonical_record":{"source":{"id":"2305.10036","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-17T08:28:54Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"233eea780887cf492eb37cf78322fdbd6d66d4a4180b3e3abf5b018d4070c705","abstract_canon_sha256":"e2db2fee785fd1bf78aa5111cf7ff402316ff0c5d866a9a4f33bbec8e2ca5fde"},"schema_version":"1.0"},"canonical_sha256":"f908e7be717c3d939a190bf20052e9e4dc943b79a1c362884643e850f21ef70c","source":{"kind":"arxiv","id":"2305.10036","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10036","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10036v3","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10036","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_12","alias_value":"7EEOPPTRPQ6Z","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_16","alias_value":"7EEOPPTRPQ6ZHGQZ","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_8","alias_value":"7EEOPPTR","created_at":"2026-07-05T06:16:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:7EEOPPTRPQ6ZHGQZBPZAAUXJ4T","target":"record","payload":{"canonical_record":{"source":{"id":"2305.10036","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-17T08:28:54Z","cross_cats_sorted":["cs.CY"],"title_canon_sha256":"233eea780887cf492eb37cf78322fdbd6d66d4a4180b3e3abf5b018d4070c705","abstract_canon_sha256":"e2db2fee785fd1bf78aa5111cf7ff402316ff0c5d866a9a4f33bbec8e2ca5fde"},"schema_version":"1.0"},"canonical_sha256":"f908e7be717c3d939a190bf20052e9e4dc943b79a1c362884643e850f21ef70c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:16:50.415466Z","signature_b64":"BezjsFXOdFBekdEdxSQKRmMOsxi+Axrec2WxUMpiCD7AcHIpGk34hobpb41O0RObvOHKR4XN7R9oElUmPjHhCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f908e7be717c3d939a190bf20052e9e4dc943b79a1c362884643e850f21ef70c","last_reissued_at":"2026-07-05T06:16:50.415020Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:16:50.415020Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.10036","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dvDOX5eOcMqcCJrUAtBCBqRzPjWErFjqRkVD52pZGaIO7a8yLEjQe1Wdu4ZsrAKOHlGEv1bc2bCWYe3ZH//OCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:07:31.356269Z"},"content_sha256":"f35fba369b27e05f685f046bb5108e689318fb96f23241de8bc63c5307ce2df3","schema_version":"1.0","event_id":"sha256:f35fba369b27e05f685f046bb5108e689318fb96f23241de8bc63c5307ce2df3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:7EEOPPTRPQ6ZHGQZBPZAAUXJ4T","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CY"],"primary_cat":"cs.CL","authors_text":"Binxing Jiao, Bin Zhu, Fangzhao Wu, Guangzhong Sun, Jingwei Yi, Lingjuan Lyu, Shangxi Wu, Tong Xu, Wenjun Peng, Xing Xie","submitted_at":"2023-05-17T08:28:54Z","abstract_excerpt":"Large language models (LLMs) have demonstrated powerful capabilities in both text understanding and generation. Companies have begun to offer Embedding as a Service (EaaS) based on these LLMs, which can benefit various natural language processing (NLP) tasks for customers. However, previous studies have shown that EaaS is vulnerable to model extraction attacks, which can cause significant losses for the owners of LLMs, as training these models is extremely expensive. To protect the copyright of LLMs for EaaS, we propose an Embedding Watermark method called EmbMarker that implants backdoors on "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10036","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.10036/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:16:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7JktxfDcHZsdLCAPmQbT6TBIvAbSgRqEupBWIgheACKpnVntn15MjDkH1o7mCbuuuHVjgJjlVQF5WcAXM4Z5AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T17:07:31.357074Z"},"content_sha256":"9d60b95c65e9bacab7aeb178059b55104f0f80539889dcecfb389163e6eae92e","schema_version":"1.0","event_id":"sha256:9d60b95c65e9bacab7aeb178059b55104f0f80539889dcecfb389163e6eae92e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/bundle.json","state_url":"https://pith.science/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T17:07:31Z","links":{"resolver":"https://pith.science/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T","bundle":"https://pith.science/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/bundle.json","state":"https://pith.science/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7EEOPPTRPQ6ZHGQZBPZAAUXJ4T/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:7EEOPPTRPQ6ZHGQZBPZAAUXJ4T","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e2db2fee785fd1bf78aa5111cf7ff402316ff0c5d866a9a4f33bbec8e2ca5fde","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-17T08:28:54Z","title_canon_sha256":"233eea780887cf492eb37cf78322fdbd6d66d4a4180b3e3abf5b018d4070c705"},"schema_version":"1.0","source":{"id":"2305.10036","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.10036","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"arxiv_version","alias_value":"2305.10036v3","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.10036","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_12","alias_value":"7EEOPPTRPQ6Z","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_16","alias_value":"7EEOPPTRPQ6ZHGQZ","created_at":"2026-07-05T06:16:50Z"},{"alias_kind":"pith_short_8","alias_value":"7EEOPPTR","created_at":"2026-07-05T06:16:50Z"}],"graph_snapshots":[{"event_id":"sha256:9d60b95c65e9bacab7aeb178059b55104f0f80539889dcecfb389163e6eae92e","target":"graph","created_at":"2026-07-05T06:16:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.10036/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large language models (LLMs) have demonstrated powerful capabilities in both text understanding and generation. Companies have begun to offer Embedding as a Service (EaaS) based on these LLMs, which can benefit various natural language processing (NLP) tasks for customers. However, previous studies have shown that EaaS is vulnerable to model extraction attacks, which can cause significant losses for the owners of LLMs, as training these models is extremely expensive. To protect the copyright of LLMs for EaaS, we propose an Embedding Watermark method called EmbMarker that implants backdoors on ","authors_text":"Binxing Jiao, Bin Zhu, Fangzhao Wu, Guangzhong Sun, Jingwei Yi, Lingjuan Lyu, Shangxi Wu, Tong Xu, Wenjun Peng, Xing Xie","cross_cats":["cs.CY"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-17T08:28:54Z","title":"Are You Copying My Model? Protecting the Copyright of Large Language Models for EaaS via Backdoor Watermark"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.10036","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f35fba369b27e05f685f046bb5108e689318fb96f23241de8bc63c5307ce2df3","target":"record","created_at":"2026-07-05T06:16:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e2db2fee785fd1bf78aa5111cf7ff402316ff0c5d866a9a4f33bbec8e2ca5fde","cross_cats_sorted":["cs.CY"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2023-05-17T08:28:54Z","title_canon_sha256":"233eea780887cf492eb37cf78322fdbd6d66d4a4180b3e3abf5b018d4070c705"},"schema_version":"1.0","source":{"id":"2305.10036","kind":"arxiv","version":3}},"canonical_sha256":"f908e7be717c3d939a190bf20052e9e4dc943b79a1c362884643e850f21ef70c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f908e7be717c3d939a190bf20052e9e4dc943b79a1c362884643e850f21ef70c","first_computed_at":"2026-07-05T06:16:50.415020Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:16:50.415020Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"BezjsFXOdFBekdEdxSQKRmMOsxi+Axrec2WxUMpiCD7AcHIpGk34hobpb41O0RObvOHKR4XN7R9oElUmPjHhCw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:16:50.415466Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.10036","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f35fba369b27e05f685f046bb5108e689318fb96f23241de8bc63c5307ce2df3","sha256:9d60b95c65e9bacab7aeb178059b55104f0f80539889dcecfb389163e6eae92e"],"state_sha256":"5b31dda78f80d1c098cdc316cf138d9c362103504dbc1bcbe4e317b438310f5f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kw5NuJAUSzCmOTwqHHZny4mMuxVhsB3D1Qfb9CVzMbGZPWNvMsTXbuQczDD4nbw9JDFQRk7gcFGqTO2mbiCrCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T17:07:31.360744Z","bundle_sha256":"1e6dd14c4b21501a6eb2bcdb58062842a750ae233f9d2b6a00e6f0b317f131c1"}}