{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:KRM33ZTEVFSANPYPOYS55QPDTO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"96b84d2c40e66373ca55ecb366528c85fc1c6b1fcc6dd28220844958781569e3","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2022-10-07T04:14:35Z","title_canon_sha256":"6b49ad1f533397f10177ddb6305107352ff1f653fbb2e423a1b9de5e41f9a801"},"schema_version":"1.0","source":{"id":"2210.03312","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.03312","created_at":"2026-07-05T05:09:22Z"},{"alias_kind":"arxiv_version","alias_value":"2210.03312v2","created_at":"2026-07-05T05:09:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.03312","created_at":"2026-07-05T05:09:22Z"},{"alias_kind":"pith_short_12","alias_value":"KRM33ZTEVFSA","created_at":"2026-07-05T05:09:22Z"},{"alias_kind":"pith_short_16","alias_value":"KRM33ZTEVFSANPYP","created_at":"2026-07-05T05:09:22Z"},{"alias_kind":"pith_short_8","alias_value":"KRM33ZTE","created_at":"2026-07-05T05:09:22Z"}],"graph_snapshots":[{"event_id":"sha256:b6eb79b19aa0698acb26624edaedc67806c0fb38cede96f74a48347ba37c5ac5","target":"graph","created_at":"2026-07-05T05:09:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.03312/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"How can we protect the intellectual property of trained NLP models? Modern NLP models are prone to stealing by querying and distilling from their publicly exposed APIs. However, existing protection methods such as watermarking only work for images but are not applicable to text. We propose Distillation-Resistant Watermarking (DRW), a novel technique to protect NLP models from being stolen via distillation. DRW protects a model by injecting watermarks into the victim's prediction probability corresponding to a secret key and is able to detect such a key by probing a suspect model. We prove that","authors_text":"Lei Li, Xuandong Zhao, Yu-Xiang Wang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2022-10-07T04:14:35Z","title":"Distillation-Resistant Watermarking for Model Protection in NLP"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.03312","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:dd50833cfad34aee199be9625ba8fd9d07e9d2bc2160f29775c64a247e2b1163","target":"record","created_at":"2026-07-05T05:09:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"96b84d2c40e66373ca55ecb366528c85fc1c6b1fcc6dd28220844958781569e3","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CL","submitted_at":"2022-10-07T04:14:35Z","title_canon_sha256":"6b49ad1f533397f10177ddb6305107352ff1f653fbb2e423a1b9de5e41f9a801"},"schema_version":"1.0","source":{"id":"2210.03312","kind":"arxiv","version":2}},"canonical_sha256":"5459bde664a96406bf0f7625dec1e39b932c943c29f173eb3ce85d32102e2064","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5459bde664a96406bf0f7625dec1e39b932c943c29f173eb3ce85d32102e2064","first_computed_at":"2026-07-05T05:09:22.582641Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:09:22.582641Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"5qm4Fk9tjz4GWzyxf3BtivXVFpTJ0blXhYzWbhwQCRhfjXr7OQDufEQ2sz63M0zNPzbuLGHdOUleLZe5v2oWAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:09:22.583083Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.03312","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:dd50833cfad34aee199be9625ba8fd9d07e9d2bc2160f29775c64a247e2b1163","sha256:b6eb79b19aa0698acb26624edaedc67806c0fb38cede96f74a48347ba37c5ac5"],"state_sha256":"4b44ef89c666703bd3f2e7711c02439e93e9476b7c4711c166c317730a8b824a"}