{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:AJFM576LRJ3I6VA7VPYSPKZUTD","short_pith_number":"pith:AJFM576L","schema_version":"1.0","canonical_sha256":"024aceffcb8a768f541fabf127ab3498cf67934089b785f42acfc6992a08d2c3","source":{"kind":"arxiv","id":"2205.10686","version":2},"attestation_state":"computed","paper":{"title":"Post-breach Recovery: Protection against White-box Adversarial Examples for Leaked DNN Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ben Y. Zhao, Emily Wenger, Haitao Zheng, Shawn Shan, Wenxin Ding","submitted_at":"2022-05-21T22:31:35Z","abstract_excerpt":"Server breaches are an unfortunate reality on today's Internet. In the context of deep neural network (DNN) models, they are particularly harmful, because a leaked model gives an attacker \"white-box\" access to generate adversarial examples, a threat model that has no practical robust defenses. For practitioners who have invested years and millions into proprietary DNNs, e.g. medical imaging, this seems like an inevitable disaster looming on the horizon.\n  In this paper, we consider the problem of post-breach recovery for DNN models. We propose Neo, a new system that creates new versions of lea"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2205.10686","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2022-05-21T22:31:35Z","cross_cats_sorted":[],"title_canon_sha256":"10dbc66afd34b7b3a60dabc0b888b5e0585d3a48bd01ddeb204dfe7e72d326a4","abstract_canon_sha256":"50f4bfed7b77840462420e8bd7615508e6f2772160e789ae316d1ffdd7b8e20d"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:06:58.371460Z","signature_b64":"yB85RtaH5eR0ebEfkpd2cWThyb5YGHEBkD916XWMMi95OO/elkI44YKI8wz0o0CNw3GovrdDUWga7T/5b8btBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"024aceffcb8a768f541fabf127ab3498cf67934089b785f42acfc6992a08d2c3","last_reissued_at":"2026-07-05T05:06:58.370942Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:06:58.370942Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Post-breach Recovery: Protection against White-box Adversarial Examples for Leaked DNN Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Ben Y. Zhao, Emily Wenger, Haitao Zheng, Shawn Shan, Wenxin Ding","submitted_at":"2022-05-21T22:31:35Z","abstract_excerpt":"Server breaches are an unfortunate reality on today's Internet. In the context of deep neural network (DNN) models, they are particularly harmful, because a leaked model gives an attacker \"white-box\" access to generate adversarial examples, a threat model that has no practical robust defenses. For practitioners who have invested years and millions into proprietary DNNs, e.g. medical imaging, this seems like an inevitable disaster looming on the horizon.\n  In this paper, we consider the problem of post-breach recovery for DNN models. We propose Neo, a new system that creates new versions of lea"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.10686","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.10686/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2205.10686","created_at":"2026-07-05T05:06:58.371010+00:00"},{"alias_kind":"arxiv_version","alias_value":"2205.10686v2","created_at":"2026-07-05T05:06:58.371010+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.10686","created_at":"2026-07-05T05:06:58.371010+00:00"},{"alias_kind":"pith_short_12","alias_value":"AJFM576LRJ3I","created_at":"2026-07-05T05:06:58.371010+00:00"},{"alias_kind":"pith_short_16","alias_value":"AJFM576LRJ3I6VA7","created_at":"2026-07-05T05:06:58.371010+00:00"},{"alias_kind":"pith_short_8","alias_value":"AJFM576L","created_at":"2026-07-05T05:06:58.371010+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD","json":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD.json","graph_json":"https://pith.science/api/pith-number/AJFM576LRJ3I6VA7VPYSPKZUTD/graph.json","events_json":"https://pith.science/api/pith-number/AJFM576LRJ3I6VA7VPYSPKZUTD/events.json","paper":"https://pith.science/paper/AJFM576L"},"agent_actions":{"view_html":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD","download_json":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD.json","view_paper":"https://pith.science/paper/AJFM576L","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2205.10686&json=true","fetch_graph":"https://pith.science/api/pith-number/AJFM576LRJ3I6VA7VPYSPKZUTD/graph.json","fetch_events":"https://pith.science/api/pith-number/AJFM576LRJ3I6VA7VPYSPKZUTD/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD/action/timestamp_anchor","attest_storage":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD/action/storage_attestation","attest_author":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD/action/author_attestation","sign_citation":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD/action/citation_signature","submit_replication":"https://pith.science/pith/AJFM576LRJ3I6VA7VPYSPKZUTD/action/replication_record"}},"created_at":"2026-07-05T05:06:58.371010+00:00","updated_at":"2026-07-05T05:06:58.371010+00:00"}