{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:KCMVU3UENJVRQ7UHLOOUIVMEQQ","short_pith_number":"pith:KCMVU3UE","canonical_record":{"source":{"id":"2002.05646","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c","abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5"},"schema_version":"1.0"},"canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","source":{"kind":"arxiv","id":"2002.05646","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"arxiv_version","alias_value":"2002.05646v3","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_12","alias_value":"KCMVU3UENJVR","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_16","alias_value":"KCMVU3UENJVRQ7UH","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_8","alias_value":"KCMVU3UE","created_at":"2026-07-05T02:24:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:KCMVU3UENJVRQ7UHLOOUIVMEQQ","target":"record","payload":{"canonical_record":{"source":{"id":"2002.05646","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c","abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5"},"schema_version":"1.0"},"canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:24:28.469624Z","signature_b64":"MN47jQnsoQ7veKDL1dgCKfx8XJQV7ZbS5pHG3b0nZq065dvIgcgSboSaMoRHv2ws3NgsltrYtX6yoZzEewlyCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","last_reissued_at":"2026-07-05T02:24:28.469260Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:24:28.469260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.05646","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:24:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rHRz/LpF4Pvrbrx5OK3SWPqIjt9yLT2VCVUDGwc48YTgnh0EkIrt2I9A8TCyQtJDsviW9B124xkGGav7AMtmDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T03:03:03.097861Z"},"content_sha256":"e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d","schema_version":"1.0","event_id":"sha256:e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:KCMVU3UENJVRQ7UHLOOUIVMEQQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Machine Learning -- Industry Perspectives","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CY","authors_text":"Andi Comissoneru, Andrew Marshall, John Lambert, Magnus Nystr\\\"om, Mario Goertzel, Matt Swann, Ram Shankar Siva Kumar, Sharon Xia","submitted_at":"2020-02-04T02:28:34Z","abstract_excerpt":"Based on interviews with 28 organizations, we found that industry practitioners are not equipped with tactical and strategic tools to protect, detect and respond to attacks on their Machine Learning (ML) systems. We leverage the insights from the interviews and we enumerate the gaps in perspective in securing machine learning systems when viewed in the context of traditional software security development. We write this paper from the perspective of two personas: developers/ML engineers and security incident responders who are tasked with securing ML systems as they are designed, developed and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.05646","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.05646/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:24:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"v5AW6XBrrfBILXWfoaGS+DWcV/DbrPqgQHpUbd69Ej7dhZOPbcwOJL8ztJTf/vQy2Qg0kG4JylETQfXw9alBCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T03:03:03.098505Z"},"content_sha256":"60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c","schema_version":"1.0","event_id":"sha256:60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/bundle.json","state_url":"https://pith.science/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T03:03:03Z","links":{"resolver":"https://pith.science/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ","bundle":"https://pith.science/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/bundle.json","state":"https://pith.science/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KCMVU3UENJVRQ7UHLOOUIVMEQQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KCMVU3UENJVRQ7UHLOOUIVMEQQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c"},"schema_version":"1.0","source":{"id":"2002.05646","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"arxiv_version","alias_value":"2002.05646v3","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_12","alias_value":"KCMVU3UENJVR","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_16","alias_value":"KCMVU3UENJVRQ7UH","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_8","alias_value":"KCMVU3UE","created_at":"2026-07-05T02:24:28Z"}],"graph_snapshots":[{"event_id":"sha256:60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c","target":"graph","created_at":"2026-07-05T02:24:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.05646/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Based on interviews with 28 organizations, we found that industry practitioners are not equipped with tactical and strategic tools to protect, detect and respond to attacks on their Machine Learning (ML) systems. We leverage the insights from the interviews and we enumerate the gaps in perspective in securing machine learning systems when viewed in the context of traditional software security development. We write this paper from the perspective of two personas: developers/ML engineers and security incident responders who are tasked with securing ML systems as they are designed, developed and ","authors_text":"Andi Comissoneru, Andrew Marshall, John Lambert, Magnus Nystr\\\"om, Mario Goertzel, Matt Swann, Ram Shankar Siva Kumar, Sharon Xia","cross_cats":["cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title":"Adversarial Machine Learning -- Industry Perspectives"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.05646","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d","target":"record","created_at":"2026-07-05T02:24:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c"},"schema_version":"1.0","source":{"id":"2002.05646","kind":"arxiv","version":3}},"canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","first_computed_at":"2026-07-05T02:24:28.469260Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:24:28.469260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MN47jQnsoQ7veKDL1dgCKfx8XJQV7ZbS5pHG3b0nZq065dvIgcgSboSaMoRHv2ws3NgsltrYtX6yoZzEewlyCA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:24:28.469624Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.05646","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d","sha256:60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c"],"state_sha256":"b4fc7de1a78a04c99f339979db7a8f67e4543d4ef82057f5c7436b499efb2bc7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KQ1XzyVVCHozge7QUS5/eW6o1ljcsGL+9spun6HGf9UkK+6uH8bh5DpfFBKXm0NVjpUCC+I/GVq/4uXIMPpZBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T03:03:03.103625Z","bundle_sha256":"f17eaa327586071319eef2d4da21a5ea59f33cbc37cb833f4230b25344dc2379"}}