{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:FQHE2USKX2HAGFTUFH6CCNPUGW","short_pith_number":"pith:FQHE2USK","canonical_record":{"source":{"id":"2211.02885","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2022-11-05T11:34:13Z","cross_cats_sorted":[],"title_canon_sha256":"4dcfe45ad36bdd6854b276316f23ba6f595a19e76097002ceffa0dcb632f9459","abstract_canon_sha256":"35d71f57de080183d3d9ca0f98565ebacacf7bfac7cfe8d6e89f9e94a83ef4b8"},"schema_version":"1.0"},"canonical_sha256":"2c0e4d524abe8e03167429fc2135f435b20618ee89d6c8efad140133d70723e5","source":{"kind":"arxiv","id":"2211.02885","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02885","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02885v1","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02885","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_12","alias_value":"FQHE2USKX2HA","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_16","alias_value":"FQHE2USKX2HAGFTU","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_8","alias_value":"FQHE2USK","created_at":"2026-07-05T05:13:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:FQHE2USKX2HAGFTUFH6CCNPUGW","target":"record","payload":{"canonical_record":{"source":{"id":"2211.02885","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2022-11-05T11:34:13Z","cross_cats_sorted":[],"title_canon_sha256":"4dcfe45ad36bdd6854b276316f23ba6f595a19e76097002ceffa0dcb632f9459","abstract_canon_sha256":"35d71f57de080183d3d9ca0f98565ebacacf7bfac7cfe8d6e89f9e94a83ef4b8"},"schema_version":"1.0"},"canonical_sha256":"2c0e4d524abe8e03167429fc2135f435b20618ee89d6c8efad140133d70723e5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:13:41.629046Z","signature_b64":"8+SEKo3y0nYaTViw+KXhqLgSLpWt3Me5SfVhhhxqN1IsXGT6yygluUR1PDsWfAlE6LwXNtlmEkiOuT7C4Jo3BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2c0e4d524abe8e03167429fc2135f435b20618ee89d6c8efad140133d70723e5","last_reissued_at":"2026-07-05T05:13:41.628593Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:13:41.628593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.02885","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mNnwP8lDWky1Cqk/ULyjkoqVa+W8SBKdW/nKxdKdViCDFCKNe4Zb06k40+0S4Xuw05GfJXGZNGhH80fAIBDEDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T19:26:18.947245Z"},"content_sha256":"348ef19836dd9651b7a99a92ae3965c79fb44a09c24641acff0babdf01c44120","schema_version":"1.0","event_id":"sha256:348ef19836dd9651b7a99a92ae3965c79fb44a09c24641acff0babdf01c44120"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:FQHE2USKX2HAGFTUFH6CCNPUGW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Stateful Detection of Adversarial Reprogramming","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.GT","authors_text":"Ambra Demontis, Battista Biggio, Fabio Roli, Maura Pintor, Xiaoyi Feng, Xiaoyue Jiang, Yang Zheng, Zhaoqiang Xia","submitted_at":"2022-11-05T11:34:13Z","abstract_excerpt":"Adversarial reprogramming allows stealing computational resources by repurposing machine learning models to perform a different task chosen by the attacker. For example, a model trained to recognize images of animals can be reprogrammed to recognize medical images by embedding an adversarial program in the images provided as inputs. This attack can be perpetrated even if the target model is a black box, supposed that the machine-learning model is provided as a service and the attacker can query the model and collect its outputs. So far, no defense has been demonstrated effective in this scenar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02885","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.02885/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mmUb25AVEVmnfq1qeR+O2fvTWPckDS+P3TwSCruK5rthQpS0dnL43Y+SAsXuElRD3UW05pYqDDX1zl+4c0jQAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T19:26:18.947781Z"},"content_sha256":"7b4a6cfc6b406aa22631ce6ca262abe026cb25a17c19ee4fe742da24ca238e59","schema_version":"1.0","event_id":"sha256:7b4a6cfc6b406aa22631ce6ca262abe026cb25a17c19ee4fe742da24ca238e59"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/bundle.json","state_url":"https://pith.science/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T19:26:18Z","links":{"resolver":"https://pith.science/pith/FQHE2USKX2HAGFTUFH6CCNPUGW","bundle":"https://pith.science/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/bundle.json","state":"https://pith.science/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FQHE2USKX2HAGFTUFH6CCNPUGW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:FQHE2USKX2HAGFTUFH6CCNPUGW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"35d71f57de080183d3d9ca0f98565ebacacf7bfac7cfe8d6e89f9e94a83ef4b8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2022-11-05T11:34:13Z","title_canon_sha256":"4dcfe45ad36bdd6854b276316f23ba6f595a19e76097002ceffa0dcb632f9459"},"schema_version":"1.0","source":{"id":"2211.02885","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.02885","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"arxiv_version","alias_value":"2211.02885v1","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.02885","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_12","alias_value":"FQHE2USKX2HA","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_16","alias_value":"FQHE2USKX2HAGFTU","created_at":"2026-07-05T05:13:41Z"},{"alias_kind":"pith_short_8","alias_value":"FQHE2USK","created_at":"2026-07-05T05:13:41Z"}],"graph_snapshots":[{"event_id":"sha256:7b4a6cfc6b406aa22631ce6ca262abe026cb25a17c19ee4fe742da24ca238e59","target":"graph","created_at":"2026-07-05T05:13:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.02885/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial reprogramming allows stealing computational resources by repurposing machine learning models to perform a different task chosen by the attacker. For example, a model trained to recognize images of animals can be reprogrammed to recognize medical images by embedding an adversarial program in the images provided as inputs. This attack can be perpetrated even if the target model is a black box, supposed that the machine-learning model is provided as a service and the attacker can query the model and collect its outputs. So far, no defense has been demonstrated effective in this scenar","authors_text":"Ambra Demontis, Battista Biggio, Fabio Roli, Maura Pintor, Xiaoyi Feng, Xiaoyue Jiang, Yang Zheng, Zhaoqiang Xia","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2022-11-05T11:34:13Z","title":"Stateful Detection of Adversarial Reprogramming"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.02885","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:348ef19836dd9651b7a99a92ae3965c79fb44a09c24641acff0babdf01c44120","target":"record","created_at":"2026-07-05T05:13:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"35d71f57de080183d3d9ca0f98565ebacacf7bfac7cfe8d6e89f9e94a83ef4b8","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.GT","submitted_at":"2022-11-05T11:34:13Z","title_canon_sha256":"4dcfe45ad36bdd6854b276316f23ba6f595a19e76097002ceffa0dcb632f9459"},"schema_version":"1.0","source":{"id":"2211.02885","kind":"arxiv","version":1}},"canonical_sha256":"2c0e4d524abe8e03167429fc2135f435b20618ee89d6c8efad140133d70723e5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2c0e4d524abe8e03167429fc2135f435b20618ee89d6c8efad140133d70723e5","first_computed_at":"2026-07-05T05:13:41.628593Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:13:41.628593Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8+SEKo3y0nYaTViw+KXhqLgSLpWt3Me5SfVhhhxqN1IsXGT6yygluUR1PDsWfAlE6LwXNtlmEkiOuT7C4Jo3BA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:13:41.629046Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.02885","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:348ef19836dd9651b7a99a92ae3965c79fb44a09c24641acff0babdf01c44120","sha256:7b4a6cfc6b406aa22631ce6ca262abe026cb25a17c19ee4fe742da24ca238e59"],"state_sha256":"4098238f3bb257eaa7edf4a610051a29b1693404ba4fab4ca03e70a9c1ff76be"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BjRRepKN3U5XKrgnfOmH7CjoqjC6mnMboXqxUFWVlUpNxYX3NnKtNqkTeLBC8ehderShByGXSvkpzk/rcKYZBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T19:26:18.951928Z","bundle_sha256":"c88a63dd4641202a515a959c1e2c2b130bb364c154e0ad8fdd529d2073e4b73f"}}