{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2012:ERE56V6GBGZSW27KHMHI2PCGHJ","short_pith_number":"pith:ERE56V6G","canonical_record":{"source":{"id":"1206.6389","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2012-06-27T19:59:59Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"437ae7341825b10adc3f2121652a130fc3831f524f757e091f49e63760bed05f","abstract_canon_sha256":"5a0eeb253bedf9eaf1b961a60b85ce2d06ecaa212256627257327fcd8b496bb9"},"schema_version":"1.0"},"canonical_sha256":"2449df57c609b32b6bea3b0e8d3c463a7ddb735ffa2d59ffa014bb3f56f43ba9","source":{"kind":"arxiv","id":"1206.6389","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1206.6389","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"arxiv_version","alias_value":"1206.6389v3","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1206.6389","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"pith_short_12","alias_value":"ERE56V6GBGZS","created_at":"2026-05-18T12:27:04Z"},{"alias_kind":"pith_short_16","alias_value":"ERE56V6GBGZSW27K","created_at":"2026-05-18T12:27:04Z"},{"alias_kind":"pith_short_8","alias_value":"ERE56V6G","created_at":"2026-05-18T12:27:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2012:ERE56V6GBGZSW27KHMHI2PCGHJ","target":"record","payload":{"canonical_record":{"source":{"id":"1206.6389","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2012-06-27T19:59:59Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"437ae7341825b10adc3f2121652a130fc3831f524f757e091f49e63760bed05f","abstract_canon_sha256":"5a0eeb253bedf9eaf1b961a60b85ce2d06ecaa212256627257327fcd8b496bb9"},"schema_version":"1.0"},"canonical_sha256":"2449df57c609b32b6bea3b0e8d3c463a7ddb735ffa2d59ffa014bb3f56f43ba9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T03:30:02.750340Z","signature_b64":"KW0i1SincejFv0Yvhsb/t93zqMzJwHv4dQNzBOJcMPXKLWLCzCQa7Cll+OqkGPnnT/w4AwFL60N2PnpoLpvPCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2449df57c609b32b6bea3b0e8d3c463a7ddb735ffa2d59ffa014bb3f56f43ba9","last_reissued_at":"2026-05-18T03:30:02.749628Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T03:30:02.749628Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1206.6389","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:30:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wZ9rY4ib0tgizhAyqLEWkyribjUq2DtrIW0KE1ujKefFAemWjzZVQ49ZQxArGulKx+HIrFyHGqOJJMTATPH6Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:53:04.814547Z"},"content_sha256":"1697532cb408354de38fd94934966fcf51ae6d8b060a5ee110aefb2e2564ff93","schema_version":"1.0","event_id":"sha256:1697532cb408354de38fd94934966fcf51ae6d8b060a5ee110aefb2e2564ff93"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2012:ERE56V6GBGZSW27KHMHI2PCGHJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Poisoning Attacks against Support Vector Machines","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Battista Biggio (University of Cagliari), Blaine Nelson (University of Tuebingen), Pavel Laskov (University of Tuebingen)","submitted_at":"2012-06-27T19:59:59Z","abstract_excerpt":"We investigate a family of poisoning attacks against Support Vector Machines (SVM). Such attacks inject specially crafted training data that increases the SVM's test error. Central to the motivation for these attacks is the fact that most learning algorithms assume that their training data comes from a natural or well-behaved distribution. However, this assumption does not generally hold in security-sensitive settings. As we demonstrate, an intelligent adversary can, to some extent, predict the change of the SVM's decision function due to malicious input and use this ability to construct malic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1206.6389","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T03:30:02Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1295lzfXeHoP5faP0ADvrgCZ3aIfJP2jIJu8tWXYKivF41GCbQC5/q3iccULcBuuVWtg66pQMASqx+rv425TAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T22:53:04.815264Z"},"content_sha256":"ef11ad176774be47c7168a14e7754f1a49bf2920ef363a90591ebac0df7261b0","schema_version":"1.0","event_id":"sha256:ef11ad176774be47c7168a14e7754f1a49bf2920ef363a90591ebac0df7261b0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/bundle.json","state_url":"https://pith.science/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T22:53:04Z","links":{"resolver":"https://pith.science/pith/ERE56V6GBGZSW27KHMHI2PCGHJ","bundle":"https://pith.science/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/bundle.json","state":"https://pith.science/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ERE56V6GBGZSW27KHMHI2PCGHJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2012:ERE56V6GBGZSW27KHMHI2PCGHJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5a0eeb253bedf9eaf1b961a60b85ce2d06ecaa212256627257327fcd8b496bb9","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2012-06-27T19:59:59Z","title_canon_sha256":"437ae7341825b10adc3f2121652a130fc3831f524f757e091f49e63760bed05f"},"schema_version":"1.0","source":{"id":"1206.6389","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1206.6389","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"arxiv_version","alias_value":"1206.6389v3","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1206.6389","created_at":"2026-05-18T03:30:02Z"},{"alias_kind":"pith_short_12","alias_value":"ERE56V6GBGZS","created_at":"2026-05-18T12:27:04Z"},{"alias_kind":"pith_short_16","alias_value":"ERE56V6GBGZSW27K","created_at":"2026-05-18T12:27:04Z"},{"alias_kind":"pith_short_8","alias_value":"ERE56V6G","created_at":"2026-05-18T12:27:04Z"}],"graph_snapshots":[{"event_id":"sha256:ef11ad176774be47c7168a14e7754f1a49bf2920ef363a90591ebac0df7261b0","target":"graph","created_at":"2026-05-18T03:30:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We investigate a family of poisoning attacks against Support Vector Machines (SVM). Such attacks inject specially crafted training data that increases the SVM's test error. Central to the motivation for these attacks is the fact that most learning algorithms assume that their training data comes from a natural or well-behaved distribution. However, this assumption does not generally hold in security-sensitive settings. As we demonstrate, an intelligent adversary can, to some extent, predict the change of the SVM's decision function due to malicious input and use this ability to construct malic","authors_text":"Battista Biggio (University of Cagliari), Blaine Nelson (University of Tuebingen), Pavel Laskov (University of Tuebingen)","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2012-06-27T19:59:59Z","title":"Poisoning Attacks against Support Vector Machines"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1206.6389","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:1697532cb408354de38fd94934966fcf51ae6d8b060a5ee110aefb2e2564ff93","target":"record","created_at":"2026-05-18T03:30:02Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5a0eeb253bedf9eaf1b961a60b85ce2d06ecaa212256627257327fcd8b496bb9","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2012-06-27T19:59:59Z","title_canon_sha256":"437ae7341825b10adc3f2121652a130fc3831f524f757e091f49e63760bed05f"},"schema_version":"1.0","source":{"id":"1206.6389","kind":"arxiv","version":3}},"canonical_sha256":"2449df57c609b32b6bea3b0e8d3c463a7ddb735ffa2d59ffa014bb3f56f43ba9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2449df57c609b32b6bea3b0e8d3c463a7ddb735ffa2d59ffa014bb3f56f43ba9","first_computed_at":"2026-05-18T03:30:02.749628Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T03:30:02.749628Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KW0i1SincejFv0Yvhsb/t93zqMzJwHv4dQNzBOJcMPXKLWLCzCQa7Cll+OqkGPnnT/w4AwFL60N2PnpoLpvPCw==","signature_status":"signed_v1","signed_at":"2026-05-18T03:30:02.750340Z","signed_message":"canonical_sha256_bytes"},"source_id":"1206.6389","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:1697532cb408354de38fd94934966fcf51ae6d8b060a5ee110aefb2e2564ff93","sha256:ef11ad176774be47c7168a14e7754f1a49bf2920ef363a90591ebac0df7261b0"],"state_sha256":"fb1122a17a2e48fd528b2747f183470b7e7321fbb8cc195782baa2dc7da33a80"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OUhty483Yp/SEttgg+kitNyBltGGMXFtMSoW/7lYGVetFiGIgFfA4mVW6JFADYKilATpXvL5UHxTzHpJF+ZqDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T22:53:04.819002Z","bundle_sha256":"ba22134a310660d539ab5d035281a5c7325b696e7f2d0a2c13c75ff1773adb2c"}}