{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:KCMVU3UENJVRQ7UHLOOUIVMEQQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c"},"schema_version":"1.0","source":{"id":"2002.05646","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"arxiv_version","alias_value":"2002.05646v3","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.05646","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_12","alias_value":"KCMVU3UENJVR","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_16","alias_value":"KCMVU3UENJVRQ7UH","created_at":"2026-07-05T02:24:28Z"},{"alias_kind":"pith_short_8","alias_value":"KCMVU3UE","created_at":"2026-07-05T02:24:28Z"}],"graph_snapshots":[{"event_id":"sha256:60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c","target":"graph","created_at":"2026-07-05T02:24:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.05646/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Based on interviews with 28 organizations, we found that industry practitioners are not equipped with tactical and strategic tools to protect, detect and respond to attacks on their Machine Learning (ML) systems. We leverage the insights from the interviews and we enumerate the gaps in perspective in securing machine learning systems when viewed in the context of traditional software security development. We write this paper from the perspective of two personas: developers/ML engineers and security incident responders who are tasked with securing ML systems as they are designed, developed and ","authors_text":"Andi Comissoneru, Andrew Marshall, John Lambert, Magnus Nystr\\\"om, Mario Goertzel, Matt Swann, Ram Shankar Siva Kumar, Sharon Xia","cross_cats":["cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title":"Adversarial Machine Learning -- Industry Perspectives"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.05646","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d","target":"record","created_at":"2026-07-05T02:24:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a475347e270e26e4e5707e97c1be7207f38a3f1aacf772d827d995d25cbbdeb5","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CY","submitted_at":"2020-02-04T02:28:34Z","title_canon_sha256":"3c68f2f120d1a001656bea243163a2ebb60cf73f45d785cfc4dcf37e2f16939c"},"schema_version":"1.0","source":{"id":"2002.05646","kind":"arxiv","version":3}},"canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"50995a6e846a6b187e875b9d44558484211d0aafe234da1c6f0bf628ea425a8f","first_computed_at":"2026-07-05T02:24:28.469260Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:24:28.469260Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"MN47jQnsoQ7veKDL1dgCKfx8XJQV7ZbS5pHG3b0nZq065dvIgcgSboSaMoRHv2ws3NgsltrYtX6yoZzEewlyCA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:24:28.469624Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.05646","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e538440e35d7ba728df5cbadcb7f1f8b15d9ab9e41b56d9739edb5331f35804d","sha256:60bcee4bd25230a6c2fc4977bccdd48f84a201b85335b03cb24f9f1a3a6b413c"],"state_sha256":"b4fc7de1a78a04c99f339979db7a8f67e4543d4ef82057f5c7436b499efb2bc7"}