{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:HQY667GOFQNXBK6ENTCOSKQ5KZ","short_pith_number":"pith:HQY667GO","canonical_record":{"source":{"id":"1811.01134","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-03T00:25:50Z","cross_cats_sorted":[],"title_canon_sha256":"2dbbc66c6d03af0068ab432bc0bff9f96da04689f0a751c996fe14c97377873b","abstract_canon_sha256":"d482b27d140485b92788678e54432e026111926111d49ee60bfe0c390fe36f54"},"schema_version":"1.0"},"canonical_sha256":"3c31ef7cce2c1b70abc46cc4e92a1d5643382cc419daccb40fde98d5c00022be","source":{"kind":"arxiv","id":"1811.01134","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.01134","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"arxiv_version","alias_value":"1811.01134v1","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.01134","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"pith_short_12","alias_value":"HQY667GOFQNX","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HQY667GOFQNXBK6E","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HQY667GO","created_at":"2026-05-18T12:32:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:HQY667GOFQNXBK6ENTCOSKQ5KZ","target":"record","payload":{"canonical_record":{"source":{"id":"1811.01134","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-03T00:25:50Z","cross_cats_sorted":[],"title_canon_sha256":"2dbbc66c6d03af0068ab432bc0bff9f96da04689f0a751c996fe14c97377873b","abstract_canon_sha256":"d482b27d140485b92788678e54432e026111926111d49ee60bfe0c390fe36f54"},"schema_version":"1.0"},"canonical_sha256":"3c31ef7cce2c1b70abc46cc4e92a1d5643382cc419daccb40fde98d5c00022be","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:01:35.286937Z","signature_b64":"bepjU0TYOKixL1fS1HzhgaA5DC2F3udebWBt8SLiH77cVRKlUiylLd8JFuiYp9gVyJZ6YiyHjvcQcWD3anveAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c31ef7cce2c1b70abc46cc4e92a1d5643382cc419daccb40fde98d5c00022be","last_reissued_at":"2026-05-18T00:01:35.286209Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:01:35.286209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1811.01134","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:01:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aCkLUjoPlbl4L4HdsuMctskHRRAHVA/WtEENcBsABrJCUvA19zxmbkEmsUFO4ieUeOzKD0I7BuN2acvri3tzAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:00.386297Z"},"content_sha256":"e7d4d578a5a788e2881df4e49322c7dde1ad0e1bc1b3dab860263daf823011c4","schema_version":"1.0","event_id":"sha256:e7d4d578a5a788e2881df4e49322c7dde1ad0e1bc1b3dab860263daf823011c4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:HQY667GOFQNXBK6ENTCOSKQ5KZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Marauder's Map of Security and Privacy in Machine Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Nicolas Papernot","submitted_at":"2018-11-03T00:25:50Z","abstract_excerpt":"There is growing recognition that machine learning (ML) exposes new security and privacy vulnerabilities in software systems, yet the technical community's understanding of the nature and extent of these vulnerabilities remains limited but expanding. In this talk, we explore the threat model space of ML algorithms through the lens of Saltzer and Schroeder's principles for the design of secure computer systems. This characterization of the threat space prompts an investigation of current and future research directions. We structure our discussion around three of these directions, which we belie"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.01134","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:01:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jMpZP5TWCDX7SMZ6Gha6fTs3mLe+F8ecnkV58xKmVlzLbz7aLr+mVh0FpGKcLJWuArxXiIqTMQ+N2MaSeWQXCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:39:00.387049Z"},"content_sha256":"7f93ca7698e621a2fb558f4839157a41ab912562402e4cee2a1d45d91ce28612","schema_version":"1.0","event_id":"sha256:7f93ca7698e621a2fb558f4839157a41ab912562402e4cee2a1d45d91ce28612"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/bundle.json","state_url":"https://pith.science/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:39:00Z","links":{"resolver":"https://pith.science/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ","bundle":"https://pith.science/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/bundle.json","state":"https://pith.science/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HQY667GOFQNXBK6ENTCOSKQ5KZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:HQY667GOFQNXBK6ENTCOSKQ5KZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d482b27d140485b92788678e54432e026111926111d49ee60bfe0c390fe36f54","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-03T00:25:50Z","title_canon_sha256":"2dbbc66c6d03af0068ab432bc0bff9f96da04689f0a751c996fe14c97377873b"},"schema_version":"1.0","source":{"id":"1811.01134","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1811.01134","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"arxiv_version","alias_value":"1811.01134v1","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1811.01134","created_at":"2026-05-18T00:01:35Z"},{"alias_kind":"pith_short_12","alias_value":"HQY667GOFQNX","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"HQY667GOFQNXBK6E","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"HQY667GO","created_at":"2026-05-18T12:32:28Z"}],"graph_snapshots":[{"event_id":"sha256:7f93ca7698e621a2fb558f4839157a41ab912562402e4cee2a1d45d91ce28612","target":"graph","created_at":"2026-05-18T00:01:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"There is growing recognition that machine learning (ML) exposes new security and privacy vulnerabilities in software systems, yet the technical community's understanding of the nature and extent of these vulnerabilities remains limited but expanding. In this talk, we explore the threat model space of ML algorithms through the lens of Saltzer and Schroeder's principles for the design of secure computer systems. This characterization of the threat space prompts an investigation of current and future research directions. We structure our discussion around three of these directions, which we belie","authors_text":"Nicolas Papernot","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-03T00:25:50Z","title":"A Marauder's Map of Security and Privacy in Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1811.01134","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e7d4d578a5a788e2881df4e49322c7dde1ad0e1bc1b3dab860263daf823011c4","target":"record","created_at":"2026-05-18T00:01:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d482b27d140485b92788678e54432e026111926111d49ee60bfe0c390fe36f54","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-11-03T00:25:50Z","title_canon_sha256":"2dbbc66c6d03af0068ab432bc0bff9f96da04689f0a751c996fe14c97377873b"},"schema_version":"1.0","source":{"id":"1811.01134","kind":"arxiv","version":1}},"canonical_sha256":"3c31ef7cce2c1b70abc46cc4e92a1d5643382cc419daccb40fde98d5c00022be","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c31ef7cce2c1b70abc46cc4e92a1d5643382cc419daccb40fde98d5c00022be","first_computed_at":"2026-05-18T00:01:35.286209Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:01:35.286209Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bepjU0TYOKixL1fS1HzhgaA5DC2F3udebWBt8SLiH77cVRKlUiylLd8JFuiYp9gVyJZ6YiyHjvcQcWD3anveAg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:01:35.286937Z","signed_message":"canonical_sha256_bytes"},"source_id":"1811.01134","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e7d4d578a5a788e2881df4e49322c7dde1ad0e1bc1b3dab860263daf823011c4","sha256:7f93ca7698e621a2fb558f4839157a41ab912562402e4cee2a1d45d91ce28612"],"state_sha256":"3c1017b759f06fc80a383b29df9554f920f4f49f98b714ac9de2fb117fe062ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j4RNuC4crv6Ro3fDDmC2kDfEFcJDDHyB4WjKNfKxbiLiDAYTGNHQRBOaHwRqErinQGaCW/k/JI58+JsX9yaUDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:39:00.391779Z","bundle_sha256":"64867a730e630adeb050bbebf9503b70ef601b4ae7d5a458b9c09c02d00b2e4d"}}