{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HSLY2JSI7XPWCLFESBGU2JEHSX","short_pith_number":"pith:HSLY2JSI","canonical_record":{"source":{"id":"2505.17579","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-23T07:40:34Z","cross_cats_sorted":[],"title_canon_sha256":"ddf97fb9fd07a886c38ecbf58d9bdc72de62c013caaef1ce3015a882a88db9dc","abstract_canon_sha256":"19852be2713dfa7084073074a8694c14d4f55980a84a8fea8bfe4cb38c4c7691"},"schema_version":"1.0"},"canonical_sha256":"3c978d2648fddf612ca4904d4d248795e43be8a27ff2c7923c839761562ebc10","source":{"kind":"arxiv","id":"2505.17579","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.17579","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.17579v3","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.17579","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_12","alias_value":"HSLY2JSI7XPW","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_16","alias_value":"HSLY2JSI7XPWCLFE","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_8","alias_value":"HSLY2JSI","created_at":"2026-07-05T11:45:35Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HSLY2JSI7XPWCLFESBGU2JEHSX","target":"record","payload":{"canonical_record":{"source":{"id":"2505.17579","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-23T07:40:34Z","cross_cats_sorted":[],"title_canon_sha256":"ddf97fb9fd07a886c38ecbf58d9bdc72de62c013caaef1ce3015a882a88db9dc","abstract_canon_sha256":"19852be2713dfa7084073074a8694c14d4f55980a84a8fea8bfe4cb38c4c7691"},"schema_version":"1.0"},"canonical_sha256":"3c978d2648fddf612ca4904d4d248795e43be8a27ff2c7923c839761562ebc10","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:45:35.941123Z","signature_b64":"EiA2A9bmI2ElxtEyeU9WV2um+7qSg1YthywDdAJNbVoXYhaxLwV/y9ASf42ydRV/k/+k6pzwdk+ADR20CQEoCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c978d2648fddf612ca4904d4d248795e43be8a27ff2c7923c839761562ebc10","last_reissued_at":"2026-07-05T11:45:35.940617Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:45:35.940617Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.17579","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"s3qKb/asgjftWKV207RO73xZi5vU2BJDGKLwFDmuw3e1Qb91uPDac7sSqT41tjN0KVPg9tU1z0BzhSPvx9NzDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:52:13.196422Z"},"content_sha256":"5764531ec7f8d3ee1aee38356102217dc7b0c411ca0e070b21146fc4db3c072b","schema_version":"1.0","event_id":"sha256:5764531ec7f8d3ee1aee38356102217dc7b0c411ca0e070b21146fc4db3c072b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HSLY2JSI7XPWCLFESBGU2JEHSX","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Eisuke Koizumi, Masao Sakai, Minoru Kuribayashi, Shuji Isobe, Teruki Sano","submitted_at":"2025-05-23T07:40:34Z","abstract_excerpt":"In this paper, we propose a novel framework for ownership verification of deep neural network (DNN) models for image classification tasks. It allows verification of model identity by both the rightful owner and third party without presenting the original model. We assume a gray-box scenario where an unauthorized user owns a model that is illegally copied from the original model, provides services in a cloud environment, and the user throws images and receives the classification results as a probability distribution of output classes. The framework applies a white-box adversarial attack to alig"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.17579","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.17579/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:45:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bMtKYDjCgNY8rqS40ssLQns1YxZ5GABfFuLnbMBX+X5taygKXJeqsAkFA1XI/diW0bCdoYXVNRGCe+JbUir4Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T17:52:13.196942Z"},"content_sha256":"d820d5314c3ffbf4a34cd4881066276b21cccbac3c975e4675ca8cb6e24cc784","schema_version":"1.0","event_id":"sha256:d820d5314c3ffbf4a34cd4881066276b21cccbac3c975e4675ca8cb6e24cc784"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/bundle.json","state_url":"https://pith.science/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T17:52:13Z","links":{"resolver":"https://pith.science/pith/HSLY2JSI7XPWCLFESBGU2JEHSX","bundle":"https://pith.science/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/bundle.json","state":"https://pith.science/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HSLY2JSI7XPWCLFESBGU2JEHSX/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HSLY2JSI7XPWCLFESBGU2JEHSX","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"19852be2713dfa7084073074a8694c14d4f55980a84a8fea8bfe4cb38c4c7691","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-23T07:40:34Z","title_canon_sha256":"ddf97fb9fd07a886c38ecbf58d9bdc72de62c013caaef1ce3015a882a88db9dc"},"schema_version":"1.0","source":{"id":"2505.17579","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.17579","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"arxiv_version","alias_value":"2505.17579v3","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.17579","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_12","alias_value":"HSLY2JSI7XPW","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_16","alias_value":"HSLY2JSI7XPWCLFE","created_at":"2026-07-05T11:45:35Z"},{"alias_kind":"pith_short_8","alias_value":"HSLY2JSI","created_at":"2026-07-05T11:45:35Z"}],"graph_snapshots":[{"event_id":"sha256:d820d5314c3ffbf4a34cd4881066276b21cccbac3c975e4675ca8cb6e24cc784","target":"graph","created_at":"2026-07-05T11:45:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.17579/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we propose a novel framework for ownership verification of deep neural network (DNN) models for image classification tasks. It allows verification of model identity by both the rightful owner and third party without presenting the original model. We assume a gray-box scenario where an unauthorized user owns a model that is illegally copied from the original model, provides services in a cloud environment, and the user throws images and receives the classification results as a probability distribution of output classes. The framework applies a white-box adversarial attack to alig","authors_text":"Eisuke Koizumi, Masao Sakai, Minoru Kuribayashi, Shuji Isobe, Teruki Sano","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-23T07:40:34Z","title":"Ownership Verification of DNN Models Using White-Box Adversarial Attacks with Specified Probability Manipulation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.17579","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5764531ec7f8d3ee1aee38356102217dc7b0c411ca0e070b21146fc4db3c072b","target":"record","created_at":"2026-07-05T11:45:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"19852be2713dfa7084073074a8694c14d4f55980a84a8fea8bfe4cb38c4c7691","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-05-23T07:40:34Z","title_canon_sha256":"ddf97fb9fd07a886c38ecbf58d9bdc72de62c013caaef1ce3015a882a88db9dc"},"schema_version":"1.0","source":{"id":"2505.17579","kind":"arxiv","version":3}},"canonical_sha256":"3c978d2648fddf612ca4904d4d248795e43be8a27ff2c7923c839761562ebc10","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c978d2648fddf612ca4904d4d248795e43be8a27ff2c7923c839761562ebc10","first_computed_at":"2026-07-05T11:45:35.940617Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:45:35.940617Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"EiA2A9bmI2ElxtEyeU9WV2um+7qSg1YthywDdAJNbVoXYhaxLwV/y9ASf42ydRV/k/+k6pzwdk+ADR20CQEoCw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:45:35.941123Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.17579","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5764531ec7f8d3ee1aee38356102217dc7b0c411ca0e070b21146fc4db3c072b","sha256:d820d5314c3ffbf4a34cd4881066276b21cccbac3c975e4675ca8cb6e24cc784"],"state_sha256":"bee3e3f880b9315b9a201043d489e3e9d2af4ba59a989599e4a369e41795f806"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"InECqWhFtUY3WjClpZfcP9K4LB2HIlr8a+H5vbu/qwPTNoEfpOpz1V4f7H6ks0gnh5UPlV1SHA5oTmDWLNvaCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T17:52:13.201815Z","bundle_sha256":"7894c8e5f0889ceb801c1cd0feaf6c9c259984690402e4a67679dd249229f889"}}