{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:KGLIQGBG2G4SDGRCKZD2YPSKDC","short_pith_number":"pith:KGLIQGBG","schema_version":"1.0","canonical_sha256":"5196881826d1b9219a225647ac3e4a18914fa7fd25c8fc35c1807da8704bc147","source":{"kind":"arxiv","id":"2411.13047","version":2},"attestation_state":"computed","paper":{"title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Ikuya Morikawa, Satoru Koda","submitted_at":"2024-11-20T05:40:20Z","abstract_excerpt":"Deep neural networks (DNNs) deployed in a cloud often allow users to query models via the APIs. However, these APIs expose the models to model extraction attacks (MEAs). In this attack, the attacker attempts to duplicate the target model by abusing the responses from the API. Backdoor-based DNN watermarking is known as a promising defense against MEAs, wherein the defender injects a backdoor into extracted models via API responses. The backdoor is used as a watermark of the model; if a suspicious model has the watermark (i.e., backdoor), it is verified as an extracted model. This work focuses "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2411.13047","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-11-20T05:40:20Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"a5977f98502488a7c376c93e36925aff378f33986c6a540df697d671311a52b4","abstract_canon_sha256":"98301ec990c3e56003ac823a368429a869007b7f04d177c35c6704a8f2faf8f7"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:26:45.051387Z","signature_b64":"ZyvXFWXuagpf9QtMSPEY+6Ukx+6/gNfsUSDDco2iplRj2iPS3Bs3lKxsrRTguhDe4YlwknmNoWY73S0g1scrBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5196881826d1b9219a225647ac3e4a18914fa7fd25c8fc35c1807da8704bc147","last_reissued_at":"2026-07-05T11:26:45.050926Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:26:45.050926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.CR","authors_text":"Ikuya Morikawa, Satoru Koda","submitted_at":"2024-11-20T05:40:20Z","abstract_excerpt":"Deep neural networks (DNNs) deployed in a cloud often allow users to query models via the APIs. However, these APIs expose the models to model extraction attacks (MEAs). In this attack, the attacker attempts to duplicate the target model by abusing the responses from the API. Backdoor-based DNN watermarking is known as a promising defense against MEAs, wherein the defender injects a backdoor into extracted models via API responses. The backdoor is used as a watermark of the model; if a suspicious model has the watermark (i.e., backdoor), it is verified as an extracted model. This work focuses "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2411.13047","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2411.13047/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2411.13047","created_at":"2026-07-05T11:26:45.050982+00:00"},{"alias_kind":"arxiv_version","alias_value":"2411.13047v2","created_at":"2026-07-05T11:26:45.050982+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2411.13047","created_at":"2026-07-05T11:26:45.050982+00:00"},{"alias_kind":"pith_short_12","alias_value":"KGLIQGBG2G4S","created_at":"2026-07-05T11:26:45.050982+00:00"},{"alias_kind":"pith_short_16","alias_value":"KGLIQGBG2G4SDGRC","created_at":"2026-07-05T11:26:45.050982+00:00"},{"alias_kind":"pith_short_8","alias_value":"KGLIQGBG","created_at":"2026-07-05T11:26:45.050982+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC","json":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC.json","graph_json":"https://pith.science/api/pith-number/KGLIQGBG2G4SDGRCKZD2YPSKDC/graph.json","events_json":"https://pith.science/api/pith-number/KGLIQGBG2G4SDGRCKZD2YPSKDC/events.json","paper":"https://pith.science/paper/KGLIQGBG"},"agent_actions":{"view_html":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC","download_json":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC.json","view_paper":"https://pith.science/paper/KGLIQGBG","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2411.13047&json=true","fetch_graph":"https://pith.science/api/pith-number/KGLIQGBG2G4SDGRCKZD2YPSKDC/graph.json","fetch_events":"https://pith.science/api/pith-number/KGLIQGBG2G4SDGRCKZD2YPSKDC/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC/action/timestamp_anchor","attest_storage":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC/action/storage_attestation","attest_author":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC/action/author_attestation","sign_citation":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC/action/citation_signature","submit_replication":"https://pith.science/pith/KGLIQGBG2G4SDGRCKZD2YPSKDC/action/replication_record"}},"created_at":"2026-07-05T11:26:45.050982+00:00","updated_at":"2026-07-05T11:26:45.050982+00:00"}