{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:GQ23TQYOLCLXFII7X24RDVWTVC","short_pith_number":"pith:GQ23TQYO","schema_version":"1.0","canonical_sha256":"3435b9c30e589772a11fbeb911d6d3a898257f8117d8e933c73b54b1c55fa661","source":{"kind":"arxiv","id":"2505.04977","version":2},"attestation_state":"computed","paper":{"title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Brian Choi, Isabelle Choi, Kun Sun, Shu Wang","submitted_at":"2025-05-08T06:30:46Z","abstract_excerpt":"With the widespread deployment of deep neural network (DNN) models, dynamic watermarking techniques are being used to protect the intellectual property of model owners. However, recent studies have shown that existing watermarking schemes are vulnerable to watermark removal and ambiguity attacks. Besides, the vague criteria for determining watermark presence further increase the likelihood of such attacks. In this paper, we propose a secure DNN watermarking scheme named ChainMarks, which generates secure and robust watermarks by introducing a cryptographic chain into the trigger inputs and uti"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2505.04977","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-05-08T06:30:46Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"e340e4ca84cef8c016d49529a761d0cd56768d62a2998016b685cd8515842dc9","abstract_canon_sha256":"0c8f3dc3a8359c6d71c0017bf303a74a5c95ed23cbc0269415d65cd1c202f2f1"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:14:59.304901Z","signature_b64":"nbN9uX+R4l4BRqjyu/OWEYxfrrDqROOwv2cjGARuS6dBE0qhxOTyK1KAFpCUwNV2d3DaUfQl1qggbe0Dan6xBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3435b9c30e589772a11fbeb911d6d3a898257f8117d8e933c73b54b1c55fa661","last_reissued_at":"2026-07-05T11:14:59.304421Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:14:59.304421Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"ChainMarks: Securing DNN Watermark with Cryptographic Chain","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Brian Choi, Isabelle Choi, Kun Sun, Shu Wang","submitted_at":"2025-05-08T06:30:46Z","abstract_excerpt":"With the widespread deployment of deep neural network (DNN) models, dynamic watermarking techniques are being used to protect the intellectual property of model owners. However, recent studies have shown that existing watermarking schemes are vulnerable to watermark removal and ambiguity attacks. Besides, the vague criteria for determining watermark presence further increase the likelihood of such attacks. In this paper, we propose a secure DNN watermarking scheme named ChainMarks, which generates secure and robust watermarks by introducing a cryptographic chain into the trigger inputs and uti"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.04977","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.04977/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2505.04977","created_at":"2026-07-05T11:14:59.304483+00:00"},{"alias_kind":"arxiv_version","alias_value":"2505.04977v2","created_at":"2026-07-05T11:14:59.304483+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.04977","created_at":"2026-07-05T11:14:59.304483+00:00"},{"alias_kind":"pith_short_12","alias_value":"GQ23TQYOLCLX","created_at":"2026-07-05T11:14:59.304483+00:00"},{"alias_kind":"pith_short_16","alias_value":"GQ23TQYOLCLXFII7","created_at":"2026-07-05T11:14:59.304483+00:00"},{"alias_kind":"pith_short_8","alias_value":"GQ23TQYO","created_at":"2026-07-05T11:14:59.304483+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC","json":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC.json","graph_json":"https://pith.science/api/pith-number/GQ23TQYOLCLXFII7X24RDVWTVC/graph.json","events_json":"https://pith.science/api/pith-number/GQ23TQYOLCLXFII7X24RDVWTVC/events.json","paper":"https://pith.science/paper/GQ23TQYO"},"agent_actions":{"view_html":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC","download_json":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC.json","view_paper":"https://pith.science/paper/GQ23TQYO","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2505.04977&json=true","fetch_graph":"https://pith.science/api/pith-number/GQ23TQYOLCLXFII7X24RDVWTVC/graph.json","fetch_events":"https://pith.science/api/pith-number/GQ23TQYOLCLXFII7X24RDVWTVC/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC/action/timestamp_anchor","attest_storage":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC/action/storage_attestation","attest_author":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC/action/author_attestation","sign_citation":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC/action/citation_signature","submit_replication":"https://pith.science/pith/GQ23TQYOLCLXFII7X24RDVWTVC/action/replication_record"}},"created_at":"2026-07-05T11:14:59.304483+00:00","updated_at":"2026-07-05T11:14:59.304483+00:00"}