{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:A6Q6OP3OVZ5C6RXRCRBELAXY6B","short_pith_number":"pith:A6Q6OP3O","schema_version":"1.0","canonical_sha256":"07a1e73f6eae7a2f46f114424582f8f040adc00ff672de25192658822ff882f5","source":{"kind":"arxiv","id":"1903.03916","version":1},"attestation_state":"computed","paper":{"title":"Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AR"],"primary_cat":"cs.CR","authors_text":"Chang Liu, Lei Deng, Ling Liang, Shuangchen Li, Timothy Sherwood, Xinfeng Xie, Xing Hu, Yuan Xie, Yufei Ding, Yu Ji","submitted_at":"2019-03-10T03:58:18Z","abstract_excerpt":"As neural networks continue their reach into nearly every aspect of software operations, the details of those networks become an increasingly sensitive subject. Even those that deploy neural networks embedded in physical devices may wish to keep the inner working of their designs hidden -- either to protect their intellectual property or as a form of protection from adversarial inputs. The specific problem we address is how, through heavy system stack, given noisy and imperfect memory traces, one might reconstruct the neural network architecture including the set of layers employed, their conn"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1903.03916","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-03-10T03:58:18Z","cross_cats_sorted":["cs.AR"],"title_canon_sha256":"05d0e16e45a6dd28a0c1afbe5546d6ab2d74a29344b89b11b40d1ba32727c6ec","abstract_canon_sha256":"f5a2ea2c1f3fd62e9978b149e25264d73fb6febc0426f4fe5c2485c969d68070"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:11:39.552427Z","signature_b64":"JKkMKmWof+PcmSd50WJlO4Mnd0cxW8W2LFikGz6H3WWStjSP9LyiVPkYNbNZzDumYZAg8x+Ry0vna0/dX1UOBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"07a1e73f6eae7a2f46f114424582f8f040adc00ff672de25192658822ff882f5","last_reissued_at":"2026-07-05T01:11:39.552000Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:11:39.552000Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Neural Network Model Extraction Attacks in Edge Devices by Hearing Architectural Hints","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AR"],"primary_cat":"cs.CR","authors_text":"Chang Liu, Lei Deng, Ling Liang, Shuangchen Li, Timothy Sherwood, Xinfeng Xie, Xing Hu, Yuan Xie, Yufei Ding, Yu Ji","submitted_at":"2019-03-10T03:58:18Z","abstract_excerpt":"As neural networks continue their reach into nearly every aspect of software operations, the details of those networks become an increasingly sensitive subject. Even those that deploy neural networks embedded in physical devices may wish to keep the inner working of their designs hidden -- either to protect their intellectual property or as a form of protection from adversarial inputs. The specific problem we address is how, through heavy system stack, given noisy and imperfect memory traces, one might reconstruct the neural network architecture including the set of layers employed, their conn"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.03916","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1903.03916/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1903.03916","created_at":"2026-07-05T01:11:39.552057+00:00"},{"alias_kind":"arxiv_version","alias_value":"1903.03916v1","created_at":"2026-07-05T01:11:39.552057+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.03916","created_at":"2026-07-05T01:11:39.552057+00:00"},{"alias_kind":"pith_short_12","alias_value":"A6Q6OP3OVZ5C","created_at":"2026-07-05T01:11:39.552057+00:00"},{"alias_kind":"pith_short_16","alias_value":"A6Q6OP3OVZ5C6RXR","created_at":"2026-07-05T01:11:39.552057+00:00"},{"alias_kind":"pith_short_8","alias_value":"A6Q6OP3O","created_at":"2026-07-05T01:11:39.552057+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B","json":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B.json","graph_json":"https://pith.science/api/pith-number/A6Q6OP3OVZ5C6RXRCRBELAXY6B/graph.json","events_json":"https://pith.science/api/pith-number/A6Q6OP3OVZ5C6RXRCRBELAXY6B/events.json","paper":"https://pith.science/paper/A6Q6OP3O"},"agent_actions":{"view_html":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B","download_json":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B.json","view_paper":"https://pith.science/paper/A6Q6OP3O","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1903.03916&json=true","fetch_graph":"https://pith.science/api/pith-number/A6Q6OP3OVZ5C6RXRCRBELAXY6B/graph.json","fetch_events":"https://pith.science/api/pith-number/A6Q6OP3OVZ5C6RXRCRBELAXY6B/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B/action/timestamp_anchor","attest_storage":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B/action/storage_attestation","attest_author":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B/action/author_attestation","sign_citation":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B/action/citation_signature","submit_replication":"https://pith.science/pith/A6Q6OP3OVZ5C6RXRCRBELAXY6B/action/replication_record"}},"created_at":"2026-07-05T01:11:39.552057+00:00","updated_at":"2026-07-05T01:11:39.552057+00:00"}