{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:7NHW3RPBKPXV6GFK26V5274DYH","short_pith_number":"pith:7NHW3RPB","canonical_record":{"source":{"id":"2309.06223","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T13:42:20Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8e312147456dfc4f81a0d1eca115b55a6f4ef5e14d931b6b7f4c609eadce9630","abstract_canon_sha256":"f646d9152f9737469eb93eeaa929db98004728e02c7cabee9df1250310d2e42b"},"schema_version":"1.0"},"canonical_sha256":"fb4f6dc5e153ef5f18aad7abdd7f83c1fad2d00b10e346febdb8240ce5c608cb","source":{"kind":"arxiv","id":"2309.06223","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06223","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06223v3","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06223","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_12","alias_value":"7NHW3RPBKPXV","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_16","alias_value":"7NHW3RPBKPXV6GFK","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_8","alias_value":"7NHW3RPB","created_at":"2026-07-05T09:23:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:7NHW3RPBKPXV6GFK26V5274DYH","target":"record","payload":{"canonical_record":{"source":{"id":"2309.06223","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T13:42:20Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8e312147456dfc4f81a0d1eca115b55a6f4ef5e14d931b6b7f4c609eadce9630","abstract_canon_sha256":"f646d9152f9737469eb93eeaa929db98004728e02c7cabee9df1250310d2e42b"},"schema_version":"1.0"},"canonical_sha256":"fb4f6dc5e153ef5f18aad7abdd7f83c1fad2d00b10e346febdb8240ce5c608cb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:23:00.142727Z","signature_b64":"3oaNk8kenrFRCaKyuf7kTpbe4O5CewgAudKtxcGQ5rfSeB3wtDH6IC4BI1K5Wke2s5cdUcFznPDyCBCJlMQYAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb4f6dc5e153ef5f18aad7abdd7f83c1fad2d00b10e346febdb8240ce5c608cb","last_reissued_at":"2026-07-05T09:23:00.142331Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:23:00.142331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.06223","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"G2xkQ9NACTOi2vMp2Yq6Zp3X+/LgCd+dVj/d1QUkJFjYxhhDCKKEhMTJIED1knrwYaK3shyRw6K2qHQtlpENCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:23:11.248841Z"},"content_sha256":"fac0650141d926a74368d49c61a75e59312125d268e47f80a4b9f39e87934fa9","schema_version":"1.0","event_id":"sha256:fac0650141d926a74368d49c61a75e59312125d268e47f80a4b9f39e87934fa9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:7NHW3RPBKPXV6GFK26V5274DYH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executables","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"(2) Huawei Technologies), Shuai Wang (1) ((1) The Hong Kong University of Science, Sihang Hu (2), Technology, Tianxiang Li (2), Yanzuo Chen (1), Yuanyuan Yuan (1), Zhibo Liu (1)","submitted_at":"2023-09-12T13:42:20Z","abstract_excerpt":"Bit-flip attacks (BFAs) can manipulate deep neural networks (DNNs). For high-level DNN models running on deep learning (DL) frameworks like PyTorch, extensive BFAs have been used to flip bits in model weights and shown effective. Defenses have also been proposed to guard model weights. However, DNNs are increasingly compiled into DNN executables by DL compilers to leverage hardware primitives. These executables manifest distinct computation paradigms; existing research fails to accurately capture and expose the BFA surfaces on DNN executables.\n  To this end, we launch the first systematic stud"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06223","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.06223/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:23:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y9BT8EsE55HjOTf4kcbmaMLU+mMO/rp0c7W7iMnRXUCa71Ir52ltlSPjZjHd/TRxXakG2YrEod6qH8ySI2uDBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T08:23:11.249340Z"},"content_sha256":"f5f1fa8b65372d8cae70f145ebcdf231f51a1f99ce0d6eaf92378039cca3a7e8","schema_version":"1.0","event_id":"sha256:f5f1fa8b65372d8cae70f145ebcdf231f51a1f99ce0d6eaf92378039cca3a7e8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7NHW3RPBKPXV6GFK26V5274DYH/bundle.json","state_url":"https://pith.science/pith/7NHW3RPBKPXV6GFK26V5274DYH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7NHW3RPBKPXV6GFK26V5274DYH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T08:23:11Z","links":{"resolver":"https://pith.science/pith/7NHW3RPBKPXV6GFK26V5274DYH","bundle":"https://pith.science/pith/7NHW3RPBKPXV6GFK26V5274DYH/bundle.json","state":"https://pith.science/pith/7NHW3RPBKPXV6GFK26V5274DYH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7NHW3RPBKPXV6GFK26V5274DYH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:7NHW3RPBKPXV6GFK26V5274DYH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f646d9152f9737469eb93eeaa929db98004728e02c7cabee9df1250310d2e42b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T13:42:20Z","title_canon_sha256":"8e312147456dfc4f81a0d1eca115b55a6f4ef5e14d931b6b7f4c609eadce9630"},"schema_version":"1.0","source":{"id":"2309.06223","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.06223","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"arxiv_version","alias_value":"2309.06223v3","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.06223","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_12","alias_value":"7NHW3RPBKPXV","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_16","alias_value":"7NHW3RPBKPXV6GFK","created_at":"2026-07-05T09:23:00Z"},{"alias_kind":"pith_short_8","alias_value":"7NHW3RPB","created_at":"2026-07-05T09:23:00Z"}],"graph_snapshots":[{"event_id":"sha256:f5f1fa8b65372d8cae70f145ebcdf231f51a1f99ce0d6eaf92378039cca3a7e8","target":"graph","created_at":"2026-07-05T09:23:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.06223/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Bit-flip attacks (BFAs) can manipulate deep neural networks (DNNs). For high-level DNN models running on deep learning (DL) frameworks like PyTorch, extensive BFAs have been used to flip bits in model weights and shown effective. Defenses have also been proposed to guard model weights. However, DNNs are increasingly compiled into DNN executables by DL compilers to leverage hardware primitives. These executables manifest distinct computation paradigms; existing research fails to accurately capture and expose the BFA surfaces on DNN executables.\n  To this end, we launch the first systematic stud","authors_text":"(2) Huawei Technologies), Shuai Wang (1) ((1) The Hong Kong University of Science, Sihang Hu (2), Technology, Tianxiang Li (2), Yanzuo Chen (1), Yuanyuan Yuan (1), Zhibo Liu (1)","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T13:42:20Z","title":"Compiled Models, Built-In Exploits: Uncovering Pervasive Bit-Flip Attack Surfaces in DNN Executables"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.06223","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fac0650141d926a74368d49c61a75e59312125d268e47f80a4b9f39e87934fa9","target":"record","created_at":"2026-07-05T09:23:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f646d9152f9737469eb93eeaa929db98004728e02c7cabee9df1250310d2e42b","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-09-12T13:42:20Z","title_canon_sha256":"8e312147456dfc4f81a0d1eca115b55a6f4ef5e14d931b6b7f4c609eadce9630"},"schema_version":"1.0","source":{"id":"2309.06223","kind":"arxiv","version":3}},"canonical_sha256":"fb4f6dc5e153ef5f18aad7abdd7f83c1fad2d00b10e346febdb8240ce5c608cb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb4f6dc5e153ef5f18aad7abdd7f83c1fad2d00b10e346febdb8240ce5c608cb","first_computed_at":"2026-07-05T09:23:00.142331Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:23:00.142331Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3oaNk8kenrFRCaKyuf7kTpbe4O5CewgAudKtxcGQ5rfSeB3wtDH6IC4BI1K5Wke2s5cdUcFznPDyCBCJlMQYAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:23:00.142727Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.06223","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fac0650141d926a74368d49c61a75e59312125d268e47f80a4b9f39e87934fa9","sha256:f5f1fa8b65372d8cae70f145ebcdf231f51a1f99ce0d6eaf92378039cca3a7e8"],"state_sha256":"75ed6401ed25c31e28ce3efb2bc665700f860ae6d3d2fe381db59061291e774c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ve/pxqyUQ+JlttMo9JD7tFgK9s3YhX3FM4MmN5M4Qq+XXvJzT/eDAkHz8DuXLkF01jbrMIOCGqsfePnhQEjnCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T08:23:11.254257Z","bundle_sha256":"32b0b0a02060ef17480b7178bda61a3e54fc58b0b9db9807d8ef197a90ad8700"}}