{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:LN2QAOIZMOGPMPZUQ4WQ5E53FC","short_pith_number":"pith:LN2QAOIZ","canonical_record":{"source":{"id":"1903.12269","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-03-28T21:07:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"636642e5f0b19594232b3e99ca26ab04b7120aea1684a0ad04120768eae188b7","abstract_canon_sha256":"2f28adc5eaa86870e261cd5753f637319acc4541ece6690b16937102c12750f3"},"schema_version":"1.0"},"canonical_sha256":"5b75003919638cf63f34872d0e93bb28ba363a7d27e50f1824a166f3da7b22e4","source":{"kind":"arxiv","id":"1903.12269","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.12269","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"arxiv_version","alias_value":"1903.12269v2","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.12269","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"pith_short_12","alias_value":"LN2QAOIZMOGP","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"LN2QAOIZMOGPMPZU","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"LN2QAOIZ","created_at":"2026-05-18T12:33:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:LN2QAOIZMOGPMPZUQ4WQ5E53FC","target":"record","payload":{"canonical_record":{"source":{"id":"1903.12269","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-03-28T21:07:48Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"636642e5f0b19594232b3e99ca26ab04b7120aea1684a0ad04120768eae188b7","abstract_canon_sha256":"2f28adc5eaa86870e261cd5753f637319acc4541ece6690b16937102c12750f3"},"schema_version":"1.0"},"canonical_sha256":"5b75003919638cf63f34872d0e93bb28ba363a7d27e50f1824a166f3da7b22e4","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:49:08.646593Z","signature_b64":"22AP+k72975KwxcRfIEAlWqS6n0tMt1gcWXwNmlIdfobLIszg8meOlF9zr+5Apg4YGt6+gME/fVfTdVNFkzbAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5b75003919638cf63f34872d0e93bb28ba363a7d27e50f1824a166f3da7b22e4","last_reissued_at":"2026-05-17T23:49:08.645937Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:49:08.645937Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1903.12269","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:49:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AQd5CjlhjgPe/bFEvjAGOAf3al20RjuZtbN6jVtVyLOeooosE6lARxVXfn6D6AExgE/T40qRS+3sOfJPWryzAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T04:06:57.440180Z"},"content_sha256":"e8ffffdd39ad39a4c60b6a19d60534aa658cd809ea3a977360a7401cefb452e8","schema_version":"1.0","event_id":"sha256:e8ffffdd39ad39a4c60b6a19d60534aa658cd809ea3a977360a7401cefb452e8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:LN2QAOIZMOGPMPZUQ4WQ5E53FC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Bit-Flip Attack: Crushing Neural Network with Progressive Bit Search","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Adnan Siraj Rakin, Deliang Fan, Zhezhi He","submitted_at":"2019-03-28T21:07:48Z","abstract_excerpt":"Several important security issues of Deep Neural Network (DNN) have been raised recently associated with different applications and components. The most widely investigated security concern of DNN is from its malicious input, a.k.a adversarial example. Nevertheless, the security challenge of DNN's parameters is not well explored yet. In this work, we are the first to propose a novel DNN weight attack methodology called Bit-Flip Attack (BFA) which can crush a neural network through maliciously flipping extremely small amount of bits within its weight storage memory system (i.e., DRAM). The bit-"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.12269","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:49:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MZvaf/4AvS7nGwE1iD4Y3mJol0ie72XmTGfnYcdAtTLwp8wCLnClcV/vxO4Ci/KN7VF6Rn1FIFddUY4r8qMSDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T04:06:57.440625Z"},"content_sha256":"bc33107a394d774233b405e4640b236dca76b413ca90c377ce3104d384aa8425","schema_version":"1.0","event_id":"sha256:bc33107a394d774233b405e4640b236dca76b413ca90c377ce3104d384aa8425"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/bundle.json","state_url":"https://pith.science/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-27T04:06:57Z","links":{"resolver":"https://pith.science/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC","bundle":"https://pith.science/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/bundle.json","state":"https://pith.science/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LN2QAOIZMOGPMPZUQ4WQ5E53FC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:LN2QAOIZMOGPMPZUQ4WQ5E53FC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f28adc5eaa86870e261cd5753f637319acc4541ece6690b16937102c12750f3","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-03-28T21:07:48Z","title_canon_sha256":"636642e5f0b19594232b3e99ca26ab04b7120aea1684a0ad04120768eae188b7"},"schema_version":"1.0","source":{"id":"1903.12269","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1903.12269","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"arxiv_version","alias_value":"1903.12269v2","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1903.12269","created_at":"2026-05-17T23:49:08Z"},{"alias_kind":"pith_short_12","alias_value":"LN2QAOIZMOGP","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"LN2QAOIZMOGPMPZU","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"LN2QAOIZ","created_at":"2026-05-18T12:33:21Z"}],"graph_snapshots":[{"event_id":"sha256:bc33107a394d774233b405e4640b236dca76b413ca90c377ce3104d384aa8425","target":"graph","created_at":"2026-05-17T23:49:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Several important security issues of Deep Neural Network (DNN) have been raised recently associated with different applications and components. The most widely investigated security concern of DNN is from its malicious input, a.k.a adversarial example. Nevertheless, the security challenge of DNN's parameters is not well explored yet. In this work, we are the first to propose a novel DNN weight attack methodology called Bit-Flip Attack (BFA) which can crush a neural network through maliciously flipping extremely small amount of bits within its weight storage memory system (i.e., DRAM). The bit-","authors_text":"Adnan Siraj Rakin, Deliang Fan, Zhezhi He","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-03-28T21:07:48Z","title":"Bit-Flip Attack: Crushing Neural Network with Progressive Bit Search"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1903.12269","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e8ffffdd39ad39a4c60b6a19d60534aa658cd809ea3a977360a7401cefb452e8","target":"record","created_at":"2026-05-17T23:49:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f28adc5eaa86870e261cd5753f637319acc4541ece6690b16937102c12750f3","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-03-28T21:07:48Z","title_canon_sha256":"636642e5f0b19594232b3e99ca26ab04b7120aea1684a0ad04120768eae188b7"},"schema_version":"1.0","source":{"id":"1903.12269","kind":"arxiv","version":2}},"canonical_sha256":"5b75003919638cf63f34872d0e93bb28ba363a7d27e50f1824a166f3da7b22e4","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5b75003919638cf63f34872d0e93bb28ba363a7d27e50f1824a166f3da7b22e4","first_computed_at":"2026-05-17T23:49:08.645937Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:49:08.645937Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"22AP+k72975KwxcRfIEAlWqS6n0tMt1gcWXwNmlIdfobLIszg8meOlF9zr+5Apg4YGt6+gME/fVfTdVNFkzbAA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:49:08.646593Z","signed_message":"canonical_sha256_bytes"},"source_id":"1903.12269","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e8ffffdd39ad39a4c60b6a19d60534aa658cd809ea3a977360a7401cefb452e8","sha256:bc33107a394d774233b405e4640b236dca76b413ca90c377ce3104d384aa8425"],"state_sha256":"d336a0dc941cb55679cb9eaa1e7095a01fcc963b52bc72770ec766aadd6ffe55"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WuE51+lGeDvaWgiHNoAcDdPMv1tLCZ33FXQe2mGhKNJVvYImz+mqB7fOQ9Fcv9TTOQ+W1lEA9hPO4xZHtggTDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-27T04:06:57.443255Z","bundle_sha256":"66bd41d976340b803f2747fd065971d7e1f0742a134074bd1b3243b7c82718ce"}}