{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IU6PIQSJVKL4KTNHXISGTUVPHV","short_pith_number":"pith:IU6PIQSJ","canonical_record":{"source":{"id":"2306.06112","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-01T05:24:00Z","cross_cats_sorted":[],"title_canon_sha256":"f5575622a86844f3dddc6c822d52d709d500810e2e57f306c6240d44544f38c1","abstract_canon_sha256":"6d89778655722c803f027965d2c026be2c229e37d59299d264dd4c16b3e73f51"},"schema_version":"1.0"},"canonical_sha256":"453cf44249aa97c54da7ba2469d2af3d771ac9e4be0998ec8096740ce07d0f51","source":{"kind":"arxiv","id":"2306.06112","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.06112","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"arxiv_version","alias_value":"2306.06112v3","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.06112","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_12","alias_value":"IU6PIQSJVKL4","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_16","alias_value":"IU6PIQSJVKL4KTNH","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_8","alias_value":"IU6PIQSJ","created_at":"2026-07-05T07:50:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IU6PIQSJVKL4KTNHXISGTUVPHV","target":"record","payload":{"canonical_record":{"source":{"id":"2306.06112","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-01T05:24:00Z","cross_cats_sorted":[],"title_canon_sha256":"f5575622a86844f3dddc6c822d52d709d500810e2e57f306c6240d44544f38c1","abstract_canon_sha256":"6d89778655722c803f027965d2c026be2c229e37d59299d264dd4c16b3e73f51"},"schema_version":"1.0"},"canonical_sha256":"453cf44249aa97c54da7ba2469d2af3d771ac9e4be0998ec8096740ce07d0f51","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:50:50.529570Z","signature_b64":"2puisY+tz4r9BX7umvM2seXxxSnkjwwKVddwnSSvRZNiDvKUHU4F5cE9+8c/RwE3nl8dwEDyyhN7+6Md/cxADg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"453cf44249aa97c54da7ba2469d2af3d771ac9e4be0998ec8096740ce07d0f51","last_reissued_at":"2026-07-05T07:50:50.528884Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:50:50.528884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.06112","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GHUO+AwS7xeCvV2xoFuIGpjArjI1cpllHVXzMoFaJsTeHyVyLCd40VBXvyhXsZekka2b2RTPycsz9ElwvcNDBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:09:19.236714Z"},"content_sha256":"5c5dbdd73c2aef6b60d4864a610ee901b11f2ea3c474bc351fd0f83fc4d9b8e4","schema_version":"1.0","event_id":"sha256:5c5dbdd73c2aef6b60d4864a610ee901b11f2ea3c474bc351fd0f83fc4d9b8e4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IU6PIQSJVKL4KTNHXISGTUVPHV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ModelObfuscator: Obfuscating Model Information to Protect Deployed ML-based Systems","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chunyang Chen, Jing Wu, John Grundy, Li Li, Mingyi Zhou, Xiang Gao, Xiao Chen","submitted_at":"2023-06-01T05:24:00Z","abstract_excerpt":"More and more edge devices and mobile apps are leveraging deep learning (DL) capabilities. Deploying such models on devices -- referred to as on-device models -- rather than as remote cloud-hosted services, has gained popularity because it avoids transmitting user data off of the device and achieves high response time. However, on-device models can be easily attacked, as they can be accessed by unpacking corresponding apps and the model is fully exposed to attackers. Recent studies show that attackers can easily generate white-box-like attacks for an on-device model or even inverse its trainin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.06112","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.06112/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:50:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FoZjYkzpbJ3K7cWGRJVYriPwULFt0bl/ybG/qh4MWQvCLb0/aRQLVmdmX2jqrAzabeq7J9OxJLcpPuZpgi4yDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:09:19.237262Z"},"content_sha256":"396a8fbaf922c88d2d16aecbacfda46b76221958525ca370815cfd95db5fec18","schema_version":"1.0","event_id":"sha256:396a8fbaf922c88d2d16aecbacfda46b76221958525ca370815cfd95db5fec18"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/bundle.json","state_url":"https://pith.science/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:09:19Z","links":{"resolver":"https://pith.science/pith/IU6PIQSJVKL4KTNHXISGTUVPHV","bundle":"https://pith.science/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/bundle.json","state":"https://pith.science/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IU6PIQSJVKL4KTNHXISGTUVPHV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IU6PIQSJVKL4KTNHXISGTUVPHV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6d89778655722c803f027965d2c026be2c229e37d59299d264dd4c16b3e73f51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-01T05:24:00Z","title_canon_sha256":"f5575622a86844f3dddc6c822d52d709d500810e2e57f306c6240d44544f38c1"},"schema_version":"1.0","source":{"id":"2306.06112","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.06112","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"arxiv_version","alias_value":"2306.06112v3","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.06112","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_12","alias_value":"IU6PIQSJVKL4","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_16","alias_value":"IU6PIQSJVKL4KTNH","created_at":"2026-07-05T07:50:50Z"},{"alias_kind":"pith_short_8","alias_value":"IU6PIQSJ","created_at":"2026-07-05T07:50:50Z"}],"graph_snapshots":[{"event_id":"sha256:396a8fbaf922c88d2d16aecbacfda46b76221958525ca370815cfd95db5fec18","target":"graph","created_at":"2026-07-05T07:50:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.06112/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"More and more edge devices and mobile apps are leveraging deep learning (DL) capabilities. Deploying such models on devices -- referred to as on-device models -- rather than as remote cloud-hosted services, has gained popularity because it avoids transmitting user data off of the device and achieves high response time. However, on-device models can be easily attacked, as they can be accessed by unpacking corresponding apps and the model is fully exposed to attackers. Recent studies show that attackers can easily generate white-box-like attacks for an on-device model or even inverse its trainin","authors_text":"Chunyang Chen, Jing Wu, John Grundy, Li Li, Mingyi Zhou, Xiang Gao, Xiao Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-01T05:24:00Z","title":"ModelObfuscator: Obfuscating Model Information to Protect Deployed ML-based Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.06112","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5c5dbdd73c2aef6b60d4864a610ee901b11f2ea3c474bc351fd0f83fc4d9b8e4","target":"record","created_at":"2026-07-05T07:50:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6d89778655722c803f027965d2c026be2c229e37d59299d264dd4c16b3e73f51","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-06-01T05:24:00Z","title_canon_sha256":"f5575622a86844f3dddc6c822d52d709d500810e2e57f306c6240d44544f38c1"},"schema_version":"1.0","source":{"id":"2306.06112","kind":"arxiv","version":3}},"canonical_sha256":"453cf44249aa97c54da7ba2469d2af3d771ac9e4be0998ec8096740ce07d0f51","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"453cf44249aa97c54da7ba2469d2af3d771ac9e4be0998ec8096740ce07d0f51","first_computed_at":"2026-07-05T07:50:50.528884Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:50:50.528884Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"2puisY+tz4r9BX7umvM2seXxxSnkjwwKVddwnSSvRZNiDvKUHU4F5cE9+8c/RwE3nl8dwEDyyhN7+6Md/cxADg==","signature_status":"signed_v1","signed_at":"2026-07-05T07:50:50.529570Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.06112","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5c5dbdd73c2aef6b60d4864a610ee901b11f2ea3c474bc351fd0f83fc4d9b8e4","sha256:396a8fbaf922c88d2d16aecbacfda46b76221958525ca370815cfd95db5fec18"],"state_sha256":"b038cc7d1858a67955ad956ff4c76f11bfc0171db9b973c86c11738bf7502456"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nSO1RKL25u70z2Izr4vMk1ojqVIter3/P29YruXRJ/x1cm1OthRuygMxZ/jmaI5/Z7J7aDK6RJ5BUxZTEM1BCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:09:19.243149Z","bundle_sha256":"513be71d223c8ba5a327c1b0380ca45ba048c82e9bee5bbc25e3efb53061e215"}}