{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:LQLAP6DNYYQ4LAZZT2LYVVQK3M","short_pith_number":"pith:LQLAP6DN","canonical_record":{"source":{"id":"2307.01292","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-03T18:53:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"9c6246543386f9ba0c161d7177d7a1a10e6c46668a055ea3eaf956fb076da866","abstract_canon_sha256":"ad3d1760581ebc58cbd65abd921c3a0520b36024d6a30e6dd8261a61ed453810"},"schema_version":"1.0"},"canonical_sha256":"5c1607f86dc621c583399e978ad60adb0a3c25afd7f82ea3c1da571c1fe74f49","source":{"kind":"arxiv","id":"2307.01292","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.01292","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"arxiv_version","alias_value":"2307.01292v2","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.01292","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_12","alias_value":"LQLAP6DNYYQ4","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_16","alias_value":"LQLAP6DNYYQ4LAZZ","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_8","alias_value":"LQLAP6DN","created_at":"2026-07-05T06:38:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:LQLAP6DNYYQ4LAZZT2LYVVQK3M","target":"record","payload":{"canonical_record":{"source":{"id":"2307.01292","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-03T18:53:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"9c6246543386f9ba0c161d7177d7a1a10e6c46668a055ea3eaf956fb076da866","abstract_canon_sha256":"ad3d1760581ebc58cbd65abd921c3a0520b36024d6a30e6dd8261a61ed453810"},"schema_version":"1.0"},"canonical_sha256":"5c1607f86dc621c583399e978ad60adb0a3c25afd7f82ea3c1da571c1fe74f49","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:38:01.477108Z","signature_b64":"IVD9g92noLjuASoc3PPBa7RgIQzjSJ492aF5L6LHV9Alq+RByEv+/G+BGiPcj+NZMnbUY1rBb0ew4c8NF4dxAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5c1607f86dc621c583399e978ad60adb0a3c25afd7f82ea3c1da571c1fe74f49","last_reissued_at":"2026-07-05T06:38:01.476681Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:38:01.476681Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.01292","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:38:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"R4+bwzvPaT95andecTqKovNZ18t/YPsPwyRjLGHge2jVjzNhkMsbo/l7kOZy5v8wUxoHeY9HmRUu85sWvXs7DA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:57:54.985562Z"},"content_sha256":"3d974f930d1d3734622132fb6f584c2251e578fb9cd0f49a72b088f895801f6f","schema_version":"1.0","event_id":"sha256:3d974f930d1d3734622132fb6f584c2251e578fb9cd0f49a72b088f895801f6f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:LQLAP6DNYYQ4LAZZT2LYVVQK3M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Alexey Tumanov (Georgia Institute of Technology), Debopam Sanyal (Georgia Institute of Technology), Jui-Tse Hung (Georgia Institute of Technology), Manav Agrawal (Georgia Institute of Technology), Prahlad Jasti (Georgia Institute of Technology), Riverside), Shahab Nikkhoo (University of California, Sibin Mohan (George Washington University), Somesh Jha (University of Wisconsin-Madison), Tianhao Wang (University of Virginia)","submitted_at":"2023-07-03T18:53:47Z","abstract_excerpt":"Model-serving systems have become increasingly popular, especially in real-time web applications. In such systems, users send queries to the server and specify the desired performance metrics (e.g., desired accuracy, latency). The server maintains a set of models (model zoo) in the back-end and serves the queries based on the specified metrics. This paper examines the security, specifically robustness against model extraction attacks, of such systems. Existing black-box attacks assume a single model can be repeatedly selected for serving inference requests. Modern inference serving systems bre"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.01292","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.01292/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:38:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"luQ2XA2EN77Go7kqrEjjf2oCr0de4RN2gDlWYy/tcymtVA1w+R+BFo1h+tii0J9eA4Kgn7enFv+NhBuveaWmDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T05:57:54.986085Z"},"content_sha256":"a8fd2e37b7f21dcfbd1a9dc5b3fe05e5d8dc0aefb9182d4de90a348dc29454d2","schema_version":"1.0","event_id":"sha256:a8fd2e37b7f21dcfbd1a9dc5b3fe05e5d8dc0aefb9182d4de90a348dc29454d2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/bundle.json","state_url":"https://pith.science/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T05:57:54Z","links":{"resolver":"https://pith.science/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M","bundle":"https://pith.science/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/bundle.json","state":"https://pith.science/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LQLAP6DNYYQ4LAZZT2LYVVQK3M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:LQLAP6DNYYQ4LAZZT2LYVVQK3M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ad3d1760581ebc58cbd65abd921c3a0520b36024d6a30e6dd8261a61ed453810","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-03T18:53:47Z","title_canon_sha256":"9c6246543386f9ba0c161d7177d7a1a10e6c46668a055ea3eaf956fb076da866"},"schema_version":"1.0","source":{"id":"2307.01292","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.01292","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"arxiv_version","alias_value":"2307.01292v2","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.01292","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_12","alias_value":"LQLAP6DNYYQ4","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_16","alias_value":"LQLAP6DNYYQ4LAZZ","created_at":"2026-07-05T06:38:01Z"},{"alias_kind":"pith_short_8","alias_value":"LQLAP6DN","created_at":"2026-07-05T06:38:01Z"}],"graph_snapshots":[{"event_id":"sha256:a8fd2e37b7f21dcfbd1a9dc5b3fe05e5d8dc0aefb9182d4de90a348dc29454d2","target":"graph","created_at":"2026-07-05T06:38:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.01292/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Model-serving systems have become increasingly popular, especially in real-time web applications. In such systems, users send queries to the server and specify the desired performance metrics (e.g., desired accuracy, latency). The server maintains a set of models (model zoo) in the back-end and serves the queries based on the specified metrics. This paper examines the security, specifically robustness against model extraction attacks, of such systems. Existing black-box attacks assume a single model can be repeatedly selected for serving inference requests. Modern inference serving systems bre","authors_text":"Alexey Tumanov (Georgia Institute of Technology), Debopam Sanyal (Georgia Institute of Technology), Jui-Tse Hung (Georgia Institute of Technology), Manav Agrawal (Georgia Institute of Technology), Prahlad Jasti (Georgia Institute of Technology), Riverside), Shahab Nikkhoo (University of California, Sibin Mohan (George Washington University), Somesh Jha (University of Wisconsin-Madison), Tianhao Wang (University of Virginia)","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-03T18:53:47Z","title":"Pareto-Secure Machine Learning (PSML): Fingerprinting and Securing Inference Serving Systems"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.01292","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3d974f930d1d3734622132fb6f584c2251e578fb9cd0f49a72b088f895801f6f","target":"record","created_at":"2026-07-05T06:38:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ad3d1760581ebc58cbd65abd921c3a0520b36024d6a30e6dd8261a61ed453810","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-07-03T18:53:47Z","title_canon_sha256":"9c6246543386f9ba0c161d7177d7a1a10e6c46668a055ea3eaf956fb076da866"},"schema_version":"1.0","source":{"id":"2307.01292","kind":"arxiv","version":2}},"canonical_sha256":"5c1607f86dc621c583399e978ad60adb0a3c25afd7f82ea3c1da571c1fe74f49","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5c1607f86dc621c583399e978ad60adb0a3c25afd7f82ea3c1da571c1fe74f49","first_computed_at":"2026-07-05T06:38:01.476681Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:38:01.476681Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"IVD9g92noLjuASoc3PPBa7RgIQzjSJ492aF5L6LHV9Alq+RByEv+/G+BGiPcj+NZMnbUY1rBb0ew4c8NF4dxAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:38:01.477108Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.01292","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3d974f930d1d3734622132fb6f584c2251e578fb9cd0f49a72b088f895801f6f","sha256:a8fd2e37b7f21dcfbd1a9dc5b3fe05e5d8dc0aefb9182d4de90a348dc29454d2"],"state_sha256":"7c60faa18b48dc2b2c062ce0f4620c8e8adfc748f6a06f6d54d93fa7c9866601"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JkvpIEkYWzri8DeD2vqQv5N7y7mW0G02wjQBTjvTVWSqSHHwKzSAeYUWed1EZINEr2zxZJJYfUa/3JcdWfOdBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T05:57:54.991119Z","bundle_sha256":"778a7993a3555652562179b6304057ba7e79d9db2d43ea5ffb71d3fe02eef28c"}}