{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:DOK7WY6JJG4LXUPNC4KWG5X3IH","short_pith_number":"pith:DOK7WY6J","canonical_record":{"source":{"id":"2211.12005","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-22T04:54:20Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"9068c13d1e241e7bf5c6fc297870685a6a12200351971f049a765d1abab7a4ec","abstract_canon_sha256":"332b5591f54f52cb28f824ddbfaebdad127724b00b0f9d7385c8f280ea6b6b58"},"schema_version":"1.0"},"canonical_sha256":"1b95fb63c949b8bbd1ed17156376fb41d34c148701ec0c8ee1e83bf86d2315d8","source":{"kind":"arxiv","id":"2211.12005","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.12005","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"arxiv_version","alias_value":"2211.12005v3","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.12005","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_12","alias_value":"DOK7WY6JJG4L","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_16","alias_value":"DOK7WY6JJG4LXUPN","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_8","alias_value":"DOK7WY6J","created_at":"2026-07-05T06:00:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:DOK7WY6JJG4LXUPNC4KWG5X3IH","target":"record","payload":{"canonical_record":{"source":{"id":"2211.12005","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-22T04:54:20Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"9068c13d1e241e7bf5c6fc297870685a6a12200351971f049a765d1abab7a4ec","abstract_canon_sha256":"332b5591f54f52cb28f824ddbfaebdad127724b00b0f9d7385c8f280ea6b6b58"},"schema_version":"1.0"},"canonical_sha256":"1b95fb63c949b8bbd1ed17156376fb41d34c148701ec0c8ee1e83bf86d2315d8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:00:14.606588Z","signature_b64":"EbQ2+t9pkOlwvV9TOaRpywN5q9BdpBG2P9ofnDAQjrFY4xjMkHUjgWwYqugckngmeG/BaXHWfnME7Yp21aWLCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1b95fb63c949b8bbd1ed17156376fb41d34c148701ec0c8ee1e83bf86d2315d8","last_reissued_at":"2026-07-05T06:00:14.606071Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:00:14.606071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.12005","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:00:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ngeb8YxgCaGNNwd2+XPJz741DYRhukZCjy2OW03E3ZkmsjNpAPvLiQFCMxmniPAvcMzmDou06wmQyYVLzsDqDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:24:06.452040Z"},"content_sha256":"73dac5df7e52077bcb4902ff59a616ebe47aaf73317bb9d93772606aa409b33c","schema_version":"1.0","event_id":"sha256:73dac5df7e52077bcb4902ff59a616ebe47aaf73317bb9d93772606aa409b33c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:DOK7WY6JJG4LXUPNC4KWG5X3IH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Geng Yuan, Minghai Qin, Sizhe Chen, Xiaolin Huang, Xinwen Cheng, Yanzhi Wang, Yifan Gong","submitted_at":"2022-11-22T04:54:20Z","abstract_excerpt":"As data becomes increasingly vital, a company would be very cautious about releasing data, because the competitors could use it to train high-performance models, thereby posing a tremendous threat to the company's commercial competence. To prevent training good models on the data, we could add imperceptible perturbations to it. Since such perturbations aim at hurting the entire training process, they should reflect the vulnerability of DNN training, rather than that of a single model. Based on this new idea, we seek perturbed examples that are always unrecognized (never correctly classified) i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.12005","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.12005/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:00:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HgEgXYn+KS0lYR2HG82GGlhxykydtby7jyeeRm2EpYWhCqkPhrI1wOzg3rEKdWixL4Xw6RW7hh3wg9jOQKahBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T02:24:06.452676Z"},"content_sha256":"65884101e6ee94169979d2155f44b4513f84e4f2285f3df38cdf302a98862f4b","schema_version":"1.0","event_id":"sha256:65884101e6ee94169979d2155f44b4513f84e4f2285f3df38cdf302a98862f4b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/bundle.json","state_url":"https://pith.science/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T02:24:06Z","links":{"resolver":"https://pith.science/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH","bundle":"https://pith.science/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/bundle.json","state":"https://pith.science/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DOK7WY6JJG4LXUPNC4KWG5X3IH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:DOK7WY6JJG4LXUPNC4KWG5X3IH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"332b5591f54f52cb28f824ddbfaebdad127724b00b0f9d7385c8f280ea6b6b58","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-22T04:54:20Z","title_canon_sha256":"9068c13d1e241e7bf5c6fc297870685a6a12200351971f049a765d1abab7a4ec"},"schema_version":"1.0","source":{"id":"2211.12005","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.12005","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"arxiv_version","alias_value":"2211.12005v3","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.12005","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_12","alias_value":"DOK7WY6JJG4L","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_16","alias_value":"DOK7WY6JJG4LXUPN","created_at":"2026-07-05T06:00:14Z"},{"alias_kind":"pith_short_8","alias_value":"DOK7WY6J","created_at":"2026-07-05T06:00:14Z"}],"graph_snapshots":[{"event_id":"sha256:65884101e6ee94169979d2155f44b4513f84e4f2285f3df38cdf302a98862f4b","target":"graph","created_at":"2026-07-05T06:00:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.12005/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As data becomes increasingly vital, a company would be very cautious about releasing data, because the competitors could use it to train high-performance models, thereby posing a tremendous threat to the company's commercial competence. To prevent training good models on the data, we could add imperceptible perturbations to it. Since such perturbations aim at hurting the entire training process, they should reflect the vulnerability of DNN training, rather than that of a single model. Based on this new idea, we seek perturbed examples that are always unrecognized (never correctly classified) i","authors_text":"Geng Yuan, Minghai Qin, Sizhe Chen, Xiaolin Huang, Xinwen Cheng, Yanzhi Wang, Yifan Gong","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-22T04:54:20Z","title":"Self-Ensemble Protection: Training Checkpoints Are Good Data Protectors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.12005","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:73dac5df7e52077bcb4902ff59a616ebe47aaf73317bb9d93772606aa409b33c","target":"record","created_at":"2026-07-05T06:00:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"332b5591f54f52cb28f824ddbfaebdad127724b00b0f9d7385c8f280ea6b6b58","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-11-22T04:54:20Z","title_canon_sha256":"9068c13d1e241e7bf5c6fc297870685a6a12200351971f049a765d1abab7a4ec"},"schema_version":"1.0","source":{"id":"2211.12005","kind":"arxiv","version":3}},"canonical_sha256":"1b95fb63c949b8bbd1ed17156376fb41d34c148701ec0c8ee1e83bf86d2315d8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1b95fb63c949b8bbd1ed17156376fb41d34c148701ec0c8ee1e83bf86d2315d8","first_computed_at":"2026-07-05T06:00:14.606071Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:00:14.606071Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EbQ2+t9pkOlwvV9TOaRpywN5q9BdpBG2P9ofnDAQjrFY4xjMkHUjgWwYqugckngmeG/BaXHWfnME7Yp21aWLCA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:00:14.606588Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.12005","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:73dac5df7e52077bcb4902ff59a616ebe47aaf73317bb9d93772606aa409b33c","sha256:65884101e6ee94169979d2155f44b4513f84e4f2285f3df38cdf302a98862f4b"],"state_sha256":"5b1c6a750fc2e667a58b264d737f3834b90dbde619e1c88a206416ca4a8fc019"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AFFOSx1DfvSBTwnqIhzcTNd9pyy3Fa5vxw3figRCtHFIKz816XOUPzcItyPL6yH84xjnbznvnpzpFHYEDL+5DQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T02:24:06.458236Z","bundle_sha256":"9a2e69258b1c373d06962c00da779e128cc08780aebbf0a94a67658ebd8a6f3d"}}