{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:BIEIMZCXPQJIVKQVEVIGBKRFHT","short_pith_number":"pith:BIEIMZCX","canonical_record":{"source":{"id":"2502.15020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:14:53Z","cross_cats_sorted":[],"title_canon_sha256":"02231c8b5809b2a9d5bc594edd9adac8ad0633f0b4a1d50ea0deaee7d75f1db6","abstract_canon_sha256":"e78090a110cbe2904f17ad7ce15dd1c86ba60be2a0ea11a718fb6f8226d52cbd"},"schema_version":"1.0"},"canonical_sha256":"0a088664577c128aaa15255060aa253cef24c8f58f0bc34fee71b44682a9b509","source":{"kind":"arxiv","id":"2502.15020","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15020","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15020v1","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15020","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"BIEIMZCXPQJI","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"BIEIMZCXPQJIVKQV","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"BIEIMZCX","created_at":"2026-07-05T10:17:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:BIEIMZCXPQJIVKQVEVIGBKRFHT","target":"record","payload":{"canonical_record":{"source":{"id":"2502.15020","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:14:53Z","cross_cats_sorted":[],"title_canon_sha256":"02231c8b5809b2a9d5bc594edd9adac8ad0633f0b4a1d50ea0deaee7d75f1db6","abstract_canon_sha256":"e78090a110cbe2904f17ad7ce15dd1c86ba60be2a0ea11a718fb6f8226d52cbd"},"schema_version":"1.0"},"canonical_sha256":"0a088664577c128aaa15255060aa253cef24c8f58f0bc34fee71b44682a9b509","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:17:38.285161Z","signature_b64":"F/bX9RLryso7LsMkPbBFHIp81bxEenKkSKwTjowZkZijjqnX+y/krV/USv02QOXqScbfFHF95ZKqqkv3TaDYDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0a088664577c128aaa15255060aa253cef24c8f58f0bc34fee71b44682a9b509","last_reissued_at":"2026-07-05T10:17:38.284658Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:17:38.284658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.15020","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DebNRh9yQ0e9HdgzC3UAIrw36zdMiHuk1ivs7XSkHzy8pPoRuLLbDm8yZNd02HDyFuNql5wZGkEhluzzADmMCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T02:41:56.844306Z"},"content_sha256":"b7a7d1eac103d8f9405b6010757b87047f48a13c816f2b84788f484ef65b75f3","schema_version":"1.0","event_id":"sha256:b7a7d1eac103d8f9405b6010757b87047f48a13c816f2b84788f484ef65b75f3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:BIEIMZCXPQJIVKQVEVIGBKRFHT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MACPruning: Dynamic Operation Pruning to Mitigate Side-Channel DNN Model Extraction","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Aidong Adam Ding, Cheng Gongye, Davis Ranney, Ruyi Ding, Yunsi Fei","submitted_at":"2025-02-20T20:14:53Z","abstract_excerpt":"As deep learning gains popularity, edge IoT devices have seen proliferating deployment of pre-trained Deep Neural Network (DNN) models. These DNNs represent valuable intellectual property and face significant confidentiality threats from side-channel analysis (SCA), particularly non-invasive Differential Electromagnetic (EM) Analysis (DEMA), which retrieves individual model parameters from EM traces collected during model inference. Traditional SCA mitigation methods, such as masking and shuffling, can still be applied to DNN inference, but will incur significant performance degradation due to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15020","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.15020/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:17:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QCKrRFtxp5Avegd0yNlb8KGny2mZCqT7DmqCfvhJnPL0yZVACFCC6tGckY1luMuPbTYLT3PUF+moBLCyBMRSAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-17T02:41:56.844701Z"},"content_sha256":"a5027d8d9bbaa8ce8cf4a9693ea3b09276fd36a4ed8b7bdbf41a478db5acddc8","schema_version":"1.0","event_id":"sha256:a5027d8d9bbaa8ce8cf4a9693ea3b09276fd36a4ed8b7bdbf41a478db5acddc8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/bundle.json","state_url":"https://pith.science/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-17T02:41:56Z","links":{"resolver":"https://pith.science/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT","bundle":"https://pith.science/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/bundle.json","state":"https://pith.science/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BIEIMZCXPQJIVKQVEVIGBKRFHT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:BIEIMZCXPQJIVKQVEVIGBKRFHT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e78090a110cbe2904f17ad7ce15dd1c86ba60be2a0ea11a718fb6f8226d52cbd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:14:53Z","title_canon_sha256":"02231c8b5809b2a9d5bc594edd9adac8ad0633f0b4a1d50ea0deaee7d75f1db6"},"schema_version":"1.0","source":{"id":"2502.15020","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.15020","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"arxiv_version","alias_value":"2502.15020v1","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.15020","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_12","alias_value":"BIEIMZCXPQJI","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_16","alias_value":"BIEIMZCXPQJIVKQV","created_at":"2026-07-05T10:17:38Z"},{"alias_kind":"pith_short_8","alias_value":"BIEIMZCX","created_at":"2026-07-05T10:17:38Z"}],"graph_snapshots":[{"event_id":"sha256:a5027d8d9bbaa8ce8cf4a9693ea3b09276fd36a4ed8b7bdbf41a478db5acddc8","target":"graph","created_at":"2026-07-05T10:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.15020/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As deep learning gains popularity, edge IoT devices have seen proliferating deployment of pre-trained Deep Neural Network (DNN) models. These DNNs represent valuable intellectual property and face significant confidentiality threats from side-channel analysis (SCA), particularly non-invasive Differential Electromagnetic (EM) Analysis (DEMA), which retrieves individual model parameters from EM traces collected during model inference. Traditional SCA mitigation methods, such as masking and shuffling, can still be applied to DNN inference, but will incur significant performance degradation due to","authors_text":"Aidong Adam Ding, Cheng Gongye, Davis Ranney, Ruyi Ding, Yunsi Fei","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:14:53Z","title":"MACPruning: Dynamic Operation Pruning to Mitigate Side-Channel DNN Model Extraction"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.15020","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b7a7d1eac103d8f9405b6010757b87047f48a13c816f2b84788f484ef65b75f3","target":"record","created_at":"2026-07-05T10:17:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e78090a110cbe2904f17ad7ce15dd1c86ba60be2a0ea11a718fb6f8226d52cbd","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-20T20:14:53Z","title_canon_sha256":"02231c8b5809b2a9d5bc594edd9adac8ad0633f0b4a1d50ea0deaee7d75f1db6"},"schema_version":"1.0","source":{"id":"2502.15020","kind":"arxiv","version":1}},"canonical_sha256":"0a088664577c128aaa15255060aa253cef24c8f58f0bc34fee71b44682a9b509","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0a088664577c128aaa15255060aa253cef24c8f58f0bc34fee71b44682a9b509","first_computed_at":"2026-07-05T10:17:38.284658Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:17:38.284658Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"F/bX9RLryso7LsMkPbBFHIp81bxEenKkSKwTjowZkZijjqnX+y/krV/USv02QOXqScbfFHF95ZKqqkv3TaDYDw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:17:38.285161Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.15020","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b7a7d1eac103d8f9405b6010757b87047f48a13c816f2b84788f484ef65b75f3","sha256:a5027d8d9bbaa8ce8cf4a9693ea3b09276fd36a4ed8b7bdbf41a478db5acddc8"],"state_sha256":"a6eb7e59488e928779bdec043d5a74d7a0f9c84517126ea3b62fbe6f91d8a71f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wDtLXhT247pnUqT+CezGc6t0N83ilwzkZqyzMrqoNFAN8BSo1u9zGgvrzNZPpjMNzLA7jtEMIdkfXypsb8ueCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-17T02:41:56.846849Z","bundle_sha256":"bf77ca99aa978a1fce9de036c7b99e94736270ed18635efbd421fa358ba9157d"}}