{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:HJQBJKLCGUISGKYCYQ7NI2EFQ4","short_pith_number":"pith:HJQBJKLC","canonical_record":{"source":{"id":"1802.04633","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-13T14:20:42Z","cross_cats_sorted":[],"title_canon_sha256":"ffd54b9bb04ed90163635d271a3a7eb03834285637919c399b6a88ef4732bc58","abstract_canon_sha256":"dab06ea8163bdb0048b0bddeaa913341baf81c7c39800a594ffd6d9a5d433b98"},"schema_version":"1.0"},"canonical_sha256":"3a6014a9623511232b02c43ed46885873050c86633b5bc1cf951b797b796d3d0","source":{"kind":"arxiv","id":"1802.04633","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.04633","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"arxiv_version","alias_value":"1802.04633v3","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.04633","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"pith_short_12","alias_value":"HJQBJKLCGUIS","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HJQBJKLCGUISGKYC","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HJQBJKLC","created_at":"2026-05-18T12:32:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:HJQBJKLCGUISGKYCYQ7NI2EFQ4","target":"record","payload":{"canonical_record":{"source":{"id":"1802.04633","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-13T14:20:42Z","cross_cats_sorted":[],"title_canon_sha256":"ffd54b9bb04ed90163635d271a3a7eb03834285637919c399b6a88ef4732bc58","abstract_canon_sha256":"dab06ea8163bdb0048b0bddeaa913341baf81c7c39800a594ffd6d9a5d433b98"},"schema_version":"1.0"},"canonical_sha256":"3a6014a9623511232b02c43ed46885873050c86633b5bc1cf951b797b796d3d0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:13:44.886386Z","signature_b64":"kDyzUy3Hcnqsfv6/m2HGj81X6X3lipOm4hr/0Y8fuJYqLly7H2gScuE7DmcYWNz8QSv9sVGD83x+F/qPX+vUBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a6014a9623511232b02c43ed46885873050c86633b5bc1cf951b797b796d3d0","last_reissued_at":"2026-05-18T00:13:44.885709Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:13:44.885709Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1802.04633","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6zTAv5aNdYzSAWXpqTv9mRHqPKdGuwASs02AamqBTXvqpNaea0ZIOSFEw5MAyYz2QbbN0nme8iiX40vsslndBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T02:54:45.812960Z"},"content_sha256":"2e80bf87fcbf4784fa6c3e98870c44078643ccb681799e34c668072b9210731e","schema_version":"1.0","event_id":"sha256:2e80bf87fcbf4784fa6c3e98870c44078643ccb681799e34c668072b9210731e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:HJQBJKLCGUISGKYCYQ7NI2EFQ4","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Benny Pinkas, Carsten Baum, Joseph Keshet, Moustapha Cisse, Yossi Adi","submitted_at":"2018-02-13T14:20:42Z","abstract_excerpt":"Deep Neural Networks have recently gained lots of success after enabling several breakthroughs in notoriously challenging problems. Training these networks is computationally expensive and requires vast amounts of training data. Selling such pre-trained models can, therefore, be a lucrative business model. Unfortunately, once the models are sold they can be easily copied and redistributed. To avoid this, a tracking mechanism to identify models as the intellectual property of a particular vendor is necessary.\n  In this work, we present an approach for watermarking Deep Neural Networks in a blac"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.04633","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:13:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HtOK3aXBJ5uue8b+6S0ZhrW3x+njC65A/K0RPf6+1G/AqjSBuqthN4MnAKF+zr+OJMx/lQk/2hyeihDvYaU8AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T02:54:45.813620Z"},"content_sha256":"a0f91a11544e79ed30d09a29af305cec0b5ab61a77afb2a6a540662c8b67be77","schema_version":"1.0","event_id":"sha256:a0f91a11544e79ed30d09a29af305cec0b5ab61a77afb2a6a540662c8b67be77"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/bundle.json","state_url":"https://pith.science/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T02:54:45Z","links":{"resolver":"https://pith.science/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4","bundle":"https://pith.science/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/bundle.json","state":"https://pith.science/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HJQBJKLCGUISGKYCYQ7NI2EFQ4/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:HJQBJKLCGUISGKYCYQ7NI2EFQ4","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dab06ea8163bdb0048b0bddeaa913341baf81c7c39800a594ffd6d9a5d433b98","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-13T14:20:42Z","title_canon_sha256":"ffd54b9bb04ed90163635d271a3a7eb03834285637919c399b6a88ef4732bc58"},"schema_version":"1.0","source":{"id":"1802.04633","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1802.04633","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"arxiv_version","alias_value":"1802.04633v3","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1802.04633","created_at":"2026-05-18T00:13:44Z"},{"alias_kind":"pith_short_12","alias_value":"HJQBJKLCGUIS","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HJQBJKLCGUISGKYC","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HJQBJKLC","created_at":"2026-05-18T12:32:28Z"}],"graph_snapshots":[{"event_id":"sha256:a0f91a11544e79ed30d09a29af305cec0b5ab61a77afb2a6a540662c8b67be77","target":"graph","created_at":"2026-05-18T00:13:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep Neural Networks have recently gained lots of success after enabling several breakthroughs in notoriously challenging problems. Training these networks is computationally expensive and requires vast amounts of training data. Selling such pre-trained models can, therefore, be a lucrative business model. Unfortunately, once the models are sold they can be easily copied and redistributed. To avoid this, a tracking mechanism to identify models as the intellectual property of a particular vendor is necessary.\n  In this work, we present an approach for watermarking Deep Neural Networks in a blac","authors_text":"Benny Pinkas, Carsten Baum, Joseph Keshet, Moustapha Cisse, Yossi Adi","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-13T14:20:42Z","title":"Turning Your Weakness Into a Strength: Watermarking Deep Neural Networks by Backdooring"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1802.04633","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2e80bf87fcbf4784fa6c3e98870c44078643ccb681799e34c668072b9210731e","target":"record","created_at":"2026-05-18T00:13:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dab06ea8163bdb0048b0bddeaa913341baf81c7c39800a594ffd6d9a5d433b98","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-02-13T14:20:42Z","title_canon_sha256":"ffd54b9bb04ed90163635d271a3a7eb03834285637919c399b6a88ef4732bc58"},"schema_version":"1.0","source":{"id":"1802.04633","kind":"arxiv","version":3}},"canonical_sha256":"3a6014a9623511232b02c43ed46885873050c86633b5bc1cf951b797b796d3d0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3a6014a9623511232b02c43ed46885873050c86633b5bc1cf951b797b796d3d0","first_computed_at":"2026-05-18T00:13:44.885709Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:13:44.885709Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kDyzUy3Hcnqsfv6/m2HGj81X6X3lipOm4hr/0Y8fuJYqLly7H2gScuE7DmcYWNz8QSv9sVGD83x+F/qPX+vUBQ==","signature_status":"signed_v1","signed_at":"2026-05-18T00:13:44.886386Z","signed_message":"canonical_sha256_bytes"},"source_id":"1802.04633","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2e80bf87fcbf4784fa6c3e98870c44078643ccb681799e34c668072b9210731e","sha256:a0f91a11544e79ed30d09a29af305cec0b5ab61a77afb2a6a540662c8b67be77"],"state_sha256":"e481e4c73a1f1acb1b070c5959177881af6f6184c53ad1f00785c969889e99c5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/zz5+vUlaJl5bgFqu6wXSATcatoDd0AHmMOJiDcUmG8fDMgrmo8Tta3B8cM7/8PSjxYe8SF00rqD0ig0MONeBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T02:54:45.817018Z","bundle_sha256":"ae920ddf83c08ea5ae4dcf78aea2af0798f700a058dab5aea48537b4965e99f1"}}