{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AKSUD4U6UEKXJBGKCHOKRB5BVN","short_pith_number":"pith:AKSUD4U6","canonical_record":{"source":{"id":"2508.21654","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-29T14:16:19Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d69af8a85fbddc4c1dd2f760e2b225024364bf1270057751867309b5ce7979c4","abstract_canon_sha256":"475ad64b37c486435ce379410cf63a238d82214adc59f3c0931acc137ea1c884"},"schema_version":"1.0"},"canonical_sha256":"02a541f29ea1157484ca11dca887a1ab7366c526ccabb3ab3696286179a1460b","source":{"kind":"arxiv","id":"2508.21654","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21654","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21654v1","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21654","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_12","alias_value":"AKSUD4U6UEKX","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_16","alias_value":"AKSUD4U6UEKXJBGK","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_8","alias_value":"AKSUD4U6","created_at":"2026-07-05T12:01:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AKSUD4U6UEKXJBGKCHOKRB5BVN","target":"record","payload":{"canonical_record":{"source":{"id":"2508.21654","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-29T14:16:19Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"d69af8a85fbddc4c1dd2f760e2b225024364bf1270057751867309b5ce7979c4","abstract_canon_sha256":"475ad64b37c486435ce379410cf63a238d82214adc59f3c0931acc137ea1c884"},"schema_version":"1.0"},"canonical_sha256":"02a541f29ea1157484ca11dca887a1ab7366c526ccabb3ab3696286179a1460b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:01:47.413240Z","signature_b64":"GqVma2ZraxjEy8uyEzTd06GYhoCENywPf1xWxxr8xbg/7v5YrjhIQilb34AyUR5HrkI49Gx51YHhtCWHhQehCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"02a541f29ea1157484ca11dca887a1ab7366c526ccabb3ab3696286179a1460b","last_reissued_at":"2026-07-05T12:01:47.412737Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:01:47.412737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2508.21654","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Fp8IbY8uFgA/i30HzYXK+kzPUwpPsYnk0XTppowCeFFJK8BEiF0kL4gzV60SoFKiKdXhAD7RUGje9CcEPozFDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T09:23:40.864523Z"},"content_sha256":"1205a8f849efbf2572ffd17c583048a58b94be1cb56abed3ac1a097ee8a88601","schema_version":"1.0","event_id":"sha256:1205a8f849efbf2572ffd17c583048a58b94be1cb56abed3ac1a097ee8a88601"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AKSUD4U6UEKXJBGKCHOKRB5BVN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Andreas Rauber, Daryna Oliynyk, Kathrin Grosse, Rudolf Mayer","submitted_at":"2025-08-29T14:16:19Z","abstract_excerpt":"Model stealing attacks endanger the confidentiality of machine learning models offered as a service. Although these models are kept secret, a malicious party can query a model to label data samples and train their own substitute model, violating intellectual property. While novel attacks in the field are continually being published, their design and evaluations are not standardised, making it challenging to compare prior works and assess progress in the field. This paper is the first to address this gap by providing recommendations for designing and evaluating model stealing attacks. To this e"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21654","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2508.21654/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T12:01:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5gPMw+X8sNZqPl9Dc28NNNAoCT0I5veGYwDS4r99KOAxp/1I5SUN+hlUBF4i7tbqilAV7vodljrJ3Gpt0I9aAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T09:23:40.864920Z"},"content_sha256":"5e681d31f9f28f212d5d972480e6deea69aaaee9868e8ae2c1e0f27dee2a280d","schema_version":"1.0","event_id":"sha256:5e681d31f9f28f212d5d972480e6deea69aaaee9868e8ae2c1e0f27dee2a280d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/bundle.json","state_url":"https://pith.science/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T09:23:40Z","links":{"resolver":"https://pith.science/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN","bundle":"https://pith.science/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/bundle.json","state":"https://pith.science/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AKSUD4U6UEKXJBGKCHOKRB5BVN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AKSUD4U6UEKXJBGKCHOKRB5BVN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"475ad64b37c486435ce379410cf63a238d82214adc59f3c0931acc137ea1c884","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-29T14:16:19Z","title_canon_sha256":"d69af8a85fbddc4c1dd2f760e2b225024364bf1270057751867309b5ce7979c4"},"schema_version":"1.0","source":{"id":"2508.21654","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2508.21654","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"arxiv_version","alias_value":"2508.21654v1","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2508.21654","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_12","alias_value":"AKSUD4U6UEKX","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_16","alias_value":"AKSUD4U6UEKXJBGK","created_at":"2026-07-05T12:01:47Z"},{"alias_kind":"pith_short_8","alias_value":"AKSUD4U6","created_at":"2026-07-05T12:01:47Z"}],"graph_snapshots":[{"event_id":"sha256:5e681d31f9f28f212d5d972480e6deea69aaaee9868e8ae2c1e0f27dee2a280d","target":"graph","created_at":"2026-07-05T12:01:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2508.21654/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model stealing attacks endanger the confidentiality of machine learning models offered as a service. Although these models are kept secret, a malicious party can query a model to label data samples and train their own substitute model, violating intellectual property. While novel attacks in the field are continually being published, their design and evaluations are not standardised, making it challenging to compare prior works and assess progress in the field. This paper is the first to address this gap by providing recommendations for designing and evaluating model stealing attacks. To this e","authors_text":"Andreas Rauber, Daryna Oliynyk, Kathrin Grosse, Rudolf Mayer","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-29T14:16:19Z","title":"I Stolenly Swear That I Am Up to (No) Good: Design and Evaluation of Model Stealing Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2508.21654","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1205a8f849efbf2572ffd17c583048a58b94be1cb56abed3ac1a097ee8a88601","target":"record","created_at":"2026-07-05T12:01:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"475ad64b37c486435ce379410cf63a238d82214adc59f3c0931acc137ea1c884","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-08-29T14:16:19Z","title_canon_sha256":"d69af8a85fbddc4c1dd2f760e2b225024364bf1270057751867309b5ce7979c4"},"schema_version":"1.0","source":{"id":"2508.21654","kind":"arxiv","version":1}},"canonical_sha256":"02a541f29ea1157484ca11dca887a1ab7366c526ccabb3ab3696286179a1460b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"02a541f29ea1157484ca11dca887a1ab7366c526ccabb3ab3696286179a1460b","first_computed_at":"2026-07-05T12:01:47.412737Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T12:01:47.412737Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GqVma2ZraxjEy8uyEzTd06GYhoCENywPf1xWxxr8xbg/7v5YrjhIQilb34AyUR5HrkI49Gx51YHhtCWHhQehCw==","signature_status":"signed_v1","signed_at":"2026-07-05T12:01:47.413240Z","signed_message":"canonical_sha256_bytes"},"source_id":"2508.21654","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1205a8f849efbf2572ffd17c583048a58b94be1cb56abed3ac1a097ee8a88601","sha256:5e681d31f9f28f212d5d972480e6deea69aaaee9868e8ae2c1e0f27dee2a280d"],"state_sha256":"1ec07d215ba5280bc82236af40a1d10f18d8665df440b78bdad9a8b3324d2e2a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OtooWxDwJtv/msZ8LwSPrWO2TLIo9WDBlO93R1xo68+G3+89mXaoOUlrxkUGEekL647p0EfKOQoURISeQJfpAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T09:23:40.870008Z","bundle_sha256":"b7e6ad2890d0a291926f8e4675439d698ee275999c21277e1f28f73737a9d626"}}