{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:F72V7XI3BCB52WAWZ22SDM25PM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ed20b91089cb4189b30859a863a8f609ae77b1fad067650ab39b112ed5b42882","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-24T20:52:24Z","title_canon_sha256":"a0ba884639378cf46ade8b891fec5f2a514039d1f8a278ab38b2f30a3cc9435d"},"schema_version":"1.0","source":{"id":"2006.14042","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.14042","created_at":"2026-07-05T04:30:17Z"},{"alias_kind":"arxiv_version","alias_value":"2006.14042v3","created_at":"2026-07-05T04:30:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.14042","created_at":"2026-07-05T04:30:17Z"},{"alias_kind":"pith_short_12","alias_value":"F72V7XI3BCB5","created_at":"2026-07-05T04:30:17Z"},{"alias_kind":"pith_short_16","alias_value":"F72V7XI3BCB52WAW","created_at":"2026-07-05T04:30:17Z"},{"alias_kind":"pith_short_8","alias_value":"F72V7XI3","created_at":"2026-07-05T04:30:17Z"}],"graph_snapshots":[{"event_id":"sha256:9edd970259b907e2456550b7569f34a0fa647508047d0bbc90c12e11a1cf7e05","target":"graph","created_at":"2026-07-05T04:30:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.14042/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning systems are known to be vulnerable to adversarial examples. In particular, query-based black-box attacks do not require knowledge of the deep learning model, but can compute adversarial examples over the network by submitting queries and inspecting returns. Recent work largely improves the efficiency of those attacks, demonstrating their practicality on today's ML-as-a-service platforms.\n  We propose Blacklight, a new defense against query-based black-box adversarial attacks. The fundamental insight driving our design is that, to compute adversarial examples, these attacks perfor","authors_text":"Ben Y. Zhao, Emily Wenger, Haitao Zheng, Huiying Li, Jiayun Zhang, Shawn Shan","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-24T20:52:24Z","title":"Blacklight: Scalable Defense for Neural Networks against Query-Based Black-Box Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.14042","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a6d3c4ef4f43cdc78eaf6ee91151020d536d45290dedecd37e2382d1d811bbb","target":"record","created_at":"2026-07-05T04:30:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ed20b91089cb4189b30859a863a8f609ae77b1fad067650ab39b112ed5b42882","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-24T20:52:24Z","title_canon_sha256":"a0ba884639378cf46ade8b891fec5f2a514039d1f8a278ab38b2f30a3cc9435d"},"schema_version":"1.0","source":{"id":"2006.14042","kind":"arxiv","version":3}},"canonical_sha256":"2ff55fdd1b0883dd5816ceb521b35d7b191645f047bf660d48741290f07a9581","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2ff55fdd1b0883dd5816ceb521b35d7b191645f047bf660d48741290f07a9581","first_computed_at":"2026-07-05T04:30:17.893546Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:30:17.893546Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/U6veh13jTy5GamYhj4zFq6Gi8Tp3nnsx0hdZGpBT5iaIbWaoGN3IjsJ2HFCqnIXckRdVH7jK995DxjeCu+DDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T04:30:17.893968Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.14042","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a6d3c4ef4f43cdc78eaf6ee91151020d536d45290dedecd37e2382d1d811bbb","sha256:9edd970259b907e2456550b7569f34a0fa647508047d0bbc90c12e11a1cf7e05"],"state_sha256":"7cb068b3a5e0f840d398a9a0a1a3bede242b693439e55cb5fc01d8c584db4c6e"}