{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:DUNXFLW3IRNSYEOOQV2IFPGAOJ","short_pith_number":"pith:DUNXFLW3","canonical_record":{"source":{"id":"2312.04035","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-07T04:38:01Z","cross_cats_sorted":[],"title_canon_sha256":"1efab358d37c02c24028db7bbf7b3806bf797e2625b5050dc68cff06722bc3e4","abstract_canon_sha256":"4bfc32224fc4c57ab497d159dc691811c60ac9ac014b3645fa405c417ddc648d"},"schema_version":"1.0"},"canonical_sha256":"1d1b72aedb445b2c11ce857482bcc0726ff7f6dafc2dbcfc544fa4a5fe4f8445","source":{"kind":"arxiv","id":"2312.04035","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04035","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04035v1","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04035","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_12","alias_value":"DUNXFLW3IRNS","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_16","alias_value":"DUNXFLW3IRNSYEOO","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_8","alias_value":"DUNXFLW3","created_at":"2026-07-05T07:21:18Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:DUNXFLW3IRNSYEOOQV2IFPGAOJ","target":"record","payload":{"canonical_record":{"source":{"id":"2312.04035","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-07T04:38:01Z","cross_cats_sorted":[],"title_canon_sha256":"1efab358d37c02c24028db7bbf7b3806bf797e2625b5050dc68cff06722bc3e4","abstract_canon_sha256":"4bfc32224fc4c57ab497d159dc691811c60ac9ac014b3645fa405c417ddc648d"},"schema_version":"1.0"},"canonical_sha256":"1d1b72aedb445b2c11ce857482bcc0726ff7f6dafc2dbcfc544fa4a5fe4f8445","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:21:18.496646Z","signature_b64":"P5D3ymzsBRRFsRjf/fGGhD5j2U8u9qV4USJyWuB0rnGEOlOdTOixHf6uuGUwqk10qV6hLGM6VCzq7HdvjVraCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d1b72aedb445b2c11ce857482bcc0726ff7f6dafc2dbcfc544fa4a5fe4f8445","last_reissued_at":"2026-07-05T07:21:18.496187Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:21:18.496187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.04035","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BPk6Ys7gp5uNwFcqbSkQZ5f7cYH3rOGU9lheFGL8+tw6wEdmepvozaDJIjObHG8p1JCmf0H+lAmHyJyNywoPDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:13:30.203066Z"},"content_sha256":"baa13cf2dbf59c73c1c3f2ab02db7d9c2645a3cb479e90a9e375383ae2d0e28e","schema_version":"1.0","event_id":"sha256:baa13cf2dbf59c73c1c3f2ab02db7d9c2645a3cb479e90a9e375383ae2d0e28e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:DUNXFLW3IRNSYEOOQV2IFPGAOJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Defense against ML-based Power Side-channel Attacks on DNN Accelerators with Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chip Hong Chang, Tianwei Zhang, Xiaobei Yan","submitted_at":"2023-12-07T04:38:01Z","abstract_excerpt":"Artificial Intelligence (AI) hardware accelerators have been widely adopted to enhance the efficiency of deep learning applications. However, they also raise security concerns regarding their vulnerability to power side-channel attacks (SCA). In these attacks, the adversary exploits unintended communication channels to infer sensitive information processed by the accelerator, posing significant privacy and copyright risks to the models. Advanced machine learning algorithms are further employed to facilitate the side-channel analysis and exacerbate the privacy issue of AI accelerators. Traditio"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04035","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.04035/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:21:18Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"om+jXlX8JEZjHl58dDIckn4h/UOlfR31g/ABToBpXz58od5ZjfOIquSrMN0dj/a0XWa8DKXL+MWnrAYqJsSgCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T23:13:30.204126Z"},"content_sha256":"f55b79f419a430bd61aa2850e5f2c5cc706e232ed33a71d64b3e98062184afac","schema_version":"1.0","event_id":"sha256:f55b79f419a430bd61aa2850e5f2c5cc706e232ed33a71d64b3e98062184afac"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/bundle.json","state_url":"https://pith.science/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T23:13:30Z","links":{"resolver":"https://pith.science/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ","bundle":"https://pith.science/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/bundle.json","state":"https://pith.science/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DUNXFLW3IRNSYEOOQV2IFPGAOJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:DUNXFLW3IRNSYEOOQV2IFPGAOJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4bfc32224fc4c57ab497d159dc691811c60ac9ac014b3645fa405c417ddc648d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-07T04:38:01Z","title_canon_sha256":"1efab358d37c02c24028db7bbf7b3806bf797e2625b5050dc68cff06722bc3e4"},"schema_version":"1.0","source":{"id":"2312.04035","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.04035","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"arxiv_version","alias_value":"2312.04035v1","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.04035","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_12","alias_value":"DUNXFLW3IRNS","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_16","alias_value":"DUNXFLW3IRNSYEOO","created_at":"2026-07-05T07:21:18Z"},{"alias_kind":"pith_short_8","alias_value":"DUNXFLW3","created_at":"2026-07-05T07:21:18Z"}],"graph_snapshots":[{"event_id":"sha256:f55b79f419a430bd61aa2850e5f2c5cc706e232ed33a71d64b3e98062184afac","target":"graph","created_at":"2026-07-05T07:21:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.04035/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Artificial Intelligence (AI) hardware accelerators have been widely adopted to enhance the efficiency of deep learning applications. However, they also raise security concerns regarding their vulnerability to power side-channel attacks (SCA). In these attacks, the adversary exploits unintended communication channels to infer sensitive information processed by the accelerator, posing significant privacy and copyright risks to the models. Advanced machine learning algorithms are further employed to facilitate the side-channel analysis and exacerbate the privacy issue of AI accelerators. Traditio","authors_text":"Chip Hong Chang, Tianwei Zhang, Xiaobei Yan","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-07T04:38:01Z","title":"Defense against ML-based Power Side-channel Attacks on DNN Accelerators with Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.04035","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:baa13cf2dbf59c73c1c3f2ab02db7d9c2645a3cb479e90a9e375383ae2d0e28e","target":"record","created_at":"2026-07-05T07:21:18Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4bfc32224fc4c57ab497d159dc691811c60ac9ac014b3645fa405c417ddc648d","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-12-07T04:38:01Z","title_canon_sha256":"1efab358d37c02c24028db7bbf7b3806bf797e2625b5050dc68cff06722bc3e4"},"schema_version":"1.0","source":{"id":"2312.04035","kind":"arxiv","version":1}},"canonical_sha256":"1d1b72aedb445b2c11ce857482bcc0726ff7f6dafc2dbcfc544fa4a5fe4f8445","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1d1b72aedb445b2c11ce857482bcc0726ff7f6dafc2dbcfc544fa4a5fe4f8445","first_computed_at":"2026-07-05T07:21:18.496187Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:21:18.496187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P5D3ymzsBRRFsRjf/fGGhD5j2U8u9qV4USJyWuB0rnGEOlOdTOixHf6uuGUwqk10qV6hLGM6VCzq7HdvjVraCA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:21:18.496646Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.04035","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:baa13cf2dbf59c73c1c3f2ab02db7d9c2645a3cb479e90a9e375383ae2d0e28e","sha256:f55b79f419a430bd61aa2850e5f2c5cc706e232ed33a71d64b3e98062184afac"],"state_sha256":"503b8b321dbd0fdabfd311e61d09cd1766ca940490d8f7129460a6cc14007beb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"o4Us0VOAxYlnxvuvRYE1sg3X4QR05GZE1CfC63GJ4sLPAMI70nF4C+4CiIEuSS6XXh5ODh/D2TtJtEUYsbe9Cg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T23:13:30.215825Z","bundle_sha256":"c9d0fcab8fdd4a3a614616f58823d2fb2d89cd6867653bcbe6d3ae4a62a89eb1"}}