{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:HWWVPSEWQ33N6NNUQLOO66ZM6J","short_pith_number":"pith:HWWVPSEW","canonical_record":{"source":{"id":"2209.09024","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-16T15:39:06Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a4588ffb35dbb6a6f5d5b614a2bb32500f3d7e5340bdff29a102dd1d442f7a77","abstract_canon_sha256":"6f656a0a61385ea7f060c20647f8fc483f0bed1b1d78c2fa7b9d4a12ff0f7281"},"schema_version":"1.0"},"canonical_sha256":"3dad57c89686f6df35b482dcef7b2cf25b3478af2b2a457a72d4842d47f636a9","source":{"kind":"arxiv","id":"2209.09024","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.09024","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"arxiv_version","alias_value":"2209.09024v3","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.09024","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_12","alias_value":"HWWVPSEWQ33N","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"HWWVPSEWQ33N6NNU","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"HWWVPSEW","created_at":"2026-07-05T05:32:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:HWWVPSEWQ33N6NNUQLOO66ZM6J","target":"record","payload":{"canonical_record":{"source":{"id":"2209.09024","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-16T15:39:06Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"a4588ffb35dbb6a6f5d5b614a2bb32500f3d7e5340bdff29a102dd1d442f7a77","abstract_canon_sha256":"6f656a0a61385ea7f060c20647f8fc483f0bed1b1d78c2fa7b9d4a12ff0f7281"},"schema_version":"1.0"},"canonical_sha256":"3dad57c89686f6df35b482dcef7b2cf25b3478af2b2a457a72d4842d47f636a9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:32:56.665606Z","signature_b64":"XPKYOdKjFU4Se1ZiLwEIPAydazZye2cLnvCf+ZfChff0JXTMaqMI3nnIN7PWeNjgziDKKk7QrN+LvDwBl903Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3dad57c89686f6df35b482dcef7b2cf25b3478af2b2a457a72d4842d47f636a9","last_reissued_at":"2026-07-05T05:32:56.665050Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:32:56.665050Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2209.09024","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:32:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"jas3alWLRQMN7011+LiZf76NCnDZNrP3coWGpEx1Rs60fejP3GrXFZ7UJFpAriT17vwWK7cZoVG2tfXvDo71Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:12:05.884799Z"},"content_sha256":"36376c2cf754a72562bef6545c0ce683adf3ac0384d4ccc1d9d652eed88073c5","schema_version":"1.0","event_id":"sha256:36376c2cf754a72562bef6545c0ce683adf3ac0384d4ccc1d9d652eed88073c5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:HWWVPSEWQ33N6NNUQLOO66ZM6J","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Dataset Inference for Self-Supervised Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Adam Dziedzic, Franziska Boenisch, Haonan Duan, Jonas Guan, Muhammad Ahmad Kaleem, Nicolas Papernot, Nikita Dhawan, Yannis Cattan","submitted_at":"2022-09-16T15:39:06Z","abstract_excerpt":"Self-supervised models are increasingly prevalent in machine learning (ML) since they reduce the need for expensively labeled data. Because of their versatility in downstream applications, they are increasingly used as a service exposed via public APIs. At the same time, these encoder models are particularly vulnerable to model stealing attacks due to the high dimensionality of vector representations they output. Yet, encoders remain undefended: existing mitigation strategies for stealing attacks focus on supervised learning. We introduce a new dataset inference defense, which uses the private"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.09024","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2209.09024/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:32:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"mfhEm9tij1swdk4cvxS3JzqFh9GZSB5UmXeQtMDZDhDsfEtMcGT2EB12jpaMNpSoMvgBPEnbTdfNtjXKHPUnDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:12:05.885314Z"},"content_sha256":"ee66ad9d9fbe4a824a6b29c89c2bd426e13cbb8a177515bd5d79003444653df0","schema_version":"1.0","event_id":"sha256:ee66ad9d9fbe4a824a6b29c89c2bd426e13cbb8a177515bd5d79003444653df0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/bundle.json","state_url":"https://pith.science/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:12:05Z","links":{"resolver":"https://pith.science/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J","bundle":"https://pith.science/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/bundle.json","state":"https://pith.science/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HWWVPSEWQ33N6NNUQLOO66ZM6J/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:HWWVPSEWQ33N6NNUQLOO66ZM6J","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6f656a0a61385ea7f060c20647f8fc483f0bed1b1d78c2fa7b9d4a12ff0f7281","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-16T15:39:06Z","title_canon_sha256":"a4588ffb35dbb6a6f5d5b614a2bb32500f3d7e5340bdff29a102dd1d442f7a77"},"schema_version":"1.0","source":{"id":"2209.09024","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2209.09024","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"arxiv_version","alias_value":"2209.09024v3","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2209.09024","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_12","alias_value":"HWWVPSEWQ33N","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_16","alias_value":"HWWVPSEWQ33N6NNU","created_at":"2026-07-05T05:32:56Z"},{"alias_kind":"pith_short_8","alias_value":"HWWVPSEW","created_at":"2026-07-05T05:32:56Z"}],"graph_snapshots":[{"event_id":"sha256:ee66ad9d9fbe4a824a6b29c89c2bd426e13cbb8a177515bd5d79003444653df0","target":"graph","created_at":"2026-07-05T05:32:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2209.09024/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Self-supervised models are increasingly prevalent in machine learning (ML) since they reduce the need for expensively labeled data. Because of their versatility in downstream applications, they are increasingly used as a service exposed via public APIs. At the same time, these encoder models are particularly vulnerable to model stealing attacks due to the high dimensionality of vector representations they output. Yet, encoders remain undefended: existing mitigation strategies for stealing attacks focus on supervised learning. We introduce a new dataset inference defense, which uses the private","authors_text":"Adam Dziedzic, Franziska Boenisch, Haonan Duan, Jonas Guan, Muhammad Ahmad Kaleem, Nicolas Papernot, Nikita Dhawan, Yannis Cattan","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-16T15:39:06Z","title":"Dataset Inference for Self-Supervised Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2209.09024","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:36376c2cf754a72562bef6545c0ce683adf3ac0384d4ccc1d9d652eed88073c5","target":"record","created_at":"2026-07-05T05:32:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6f656a0a61385ea7f060c20647f8fc483f0bed1b1d78c2fa7b9d4a12ff0f7281","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2022-09-16T15:39:06Z","title_canon_sha256":"a4588ffb35dbb6a6f5d5b614a2bb32500f3d7e5340bdff29a102dd1d442f7a77"},"schema_version":"1.0","source":{"id":"2209.09024","kind":"arxiv","version":3}},"canonical_sha256":"3dad57c89686f6df35b482dcef7b2cf25b3478af2b2a457a72d4842d47f636a9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3dad57c89686f6df35b482dcef7b2cf25b3478af2b2a457a72d4842d47f636a9","first_computed_at":"2026-07-05T05:32:56.665050Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:32:56.665050Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"XPKYOdKjFU4Se1ZiLwEIPAydazZye2cLnvCf+ZfChff0JXTMaqMI3nnIN7PWeNjgziDKKk7QrN+LvDwBl903Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:32:56.665606Z","signed_message":"canonical_sha256_bytes"},"source_id":"2209.09024","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:36376c2cf754a72562bef6545c0ce683adf3ac0384d4ccc1d9d652eed88073c5","sha256:ee66ad9d9fbe4a824a6b29c89c2bd426e13cbb8a177515bd5d79003444653df0"],"state_sha256":"8539c626c9caecbd0110212ad5f3975a903d496eb91333c4d054e7afcf7c66b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vNfCGPCycYuXn3k77Nuh8Za0csu0bgyUuw1z49wXYgnW9JPYoIeRhHdq01YoN+mIbyyHQ3F7fz1/ywwGqunUDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:12:05.890705Z","bundle_sha256":"3e8b73023ece07a3e30e2699f89a01bb29545e4026056559ebbfe7ae5150ba4a"}}