{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:NEKKQCWCZOOVKO3ZEV5M7G2SYB","short_pith_number":"pith:NEKKQCWC","canonical_record":{"source":{"id":"2506.10744","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:31:27Z","cross_cats_sorted":[],"title_canon_sha256":"92e8fd39055d740d3d533562ea5e7ecda268d3093c8dfd084188db3aacdfa10b","abstract_canon_sha256":"3875d35f5185052180a5da55db81ad480531adcdf03bd4f695b7f977fede687b"},"schema_version":"1.0"},"canonical_sha256":"6914a80ac2cb9d553b79257acf9b52c065d12075fa0b83f9482095e033d0a9b8","source":{"kind":"arxiv","id":"2506.10744","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.10744","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.10744v1","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.10744","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"NEKKQCWCZOOV","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"NEKKQCWCZOOVKO3Z","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"NEKKQCWC","created_at":"2026-07-05T11:20:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:NEKKQCWCZOOVKO3ZEV5M7G2SYB","target":"record","payload":{"canonical_record":{"source":{"id":"2506.10744","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:31:27Z","cross_cats_sorted":[],"title_canon_sha256":"92e8fd39055d740d3d533562ea5e7ecda268d3093c8dfd084188db3aacdfa10b","abstract_canon_sha256":"3875d35f5185052180a5da55db81ad480531adcdf03bd4f695b7f977fede687b"},"schema_version":"1.0"},"canonical_sha256":"6914a80ac2cb9d553b79257acf9b52c065d12075fa0b83f9482095e033d0a9b8","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:20:29.653879Z","signature_b64":"bi6hpc6nZ+pockIalqzJxQkx1nuGZ9F2WE/tmIe73XYFo6L7N1sqo8SP+YHiu1gvKeA4Q7QMGlkSp1K2AARADg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6914a80ac2cb9d553b79257acf9b52c065d12075fa0b83f9482095e033d0a9b8","last_reissued_at":"2026-07-05T11:20:29.653307Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:20:29.653307Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.10744","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZpSKpookMj0UDw0hcP8mcJy8att8Y5kTNYzUBXMYLuzKr1yQXWutuTG5JwXgO+of1V6nertLhtK9oTBLeeB1AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T15:16:26.182664Z"},"content_sha256":"a565838c5e8656d50b883a48af6763c6e18b2883fb865627a2b4551b8d050b06","schema_version":"1.0","event_id":"sha256:a565838c5e8656d50b883a48af6763c6e18b2883fb865627a2b4551b8d050b06"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:NEKKQCWCZOOVKO3ZEV5M7G2SYB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"ObfusBFA: A Holistic Approach to Safeguarding DNNs from Different Types of Bit-Flip Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Han Qiu, Tianwei Zhang, Xiaobei Yan","submitted_at":"2025-06-12T14:31:27Z","abstract_excerpt":"Bit-flip attacks (BFAs) represent a serious threat to Deep Neural Networks (DNNs), where flipping a small number of bits in the model parameters or binary code can significantly degrade the model accuracy or mislead the model prediction in a desired way. Existing defenses exclusively focus on protecting models for specific attacks and platforms, while lacking effectiveness for other scenarios. We propose ObfusBFA, an efficient and holistic methodology to mitigate BFAs targeting both the high-level model weights and low-level codebase (executables or shared libraries). The key idea of ObfusBFA "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.10744","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.10744/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:20:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"IT3pjXHNfumwck4mSvdYoXwmVksinCEHHa169D/uiPi2ZDl3M0x/dZj585FsMHDbJWn+0DVRDEKr3lhPgkbPAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T15:16:26.183164Z"},"content_sha256":"f883691e25c7d85f9b4c8e12e4ad6a9d61a4b6ff99e9ca0289c8d45e720e73f5","schema_version":"1.0","event_id":"sha256:f883691e25c7d85f9b4c8e12e4ad6a9d61a4b6ff99e9ca0289c8d45e720e73f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/bundle.json","state_url":"https://pith.science/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T15:16:26Z","links":{"resolver":"https://pith.science/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB","bundle":"https://pith.science/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/bundle.json","state":"https://pith.science/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NEKKQCWCZOOVKO3ZEV5M7G2SYB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:NEKKQCWCZOOVKO3ZEV5M7G2SYB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3875d35f5185052180a5da55db81ad480531adcdf03bd4f695b7f977fede687b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:31:27Z","title_canon_sha256":"92e8fd39055d740d3d533562ea5e7ecda268d3093c8dfd084188db3aacdfa10b"},"schema_version":"1.0","source":{"id":"2506.10744","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.10744","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"arxiv_version","alias_value":"2506.10744v1","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.10744","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_12","alias_value":"NEKKQCWCZOOV","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_16","alias_value":"NEKKQCWCZOOVKO3Z","created_at":"2026-07-05T11:20:29Z"},{"alias_kind":"pith_short_8","alias_value":"NEKKQCWC","created_at":"2026-07-05T11:20:29Z"}],"graph_snapshots":[{"event_id":"sha256:f883691e25c7d85f9b4c8e12e4ad6a9d61a4b6ff99e9ca0289c8d45e720e73f5","target":"graph","created_at":"2026-07-05T11:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.10744/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Bit-flip attacks (BFAs) represent a serious threat to Deep Neural Networks (DNNs), where flipping a small number of bits in the model parameters or binary code can significantly degrade the model accuracy or mislead the model prediction in a desired way. Existing defenses exclusively focus on protecting models for specific attacks and platforms, while lacking effectiveness for other scenarios. We propose ObfusBFA, an efficient and holistic methodology to mitigate BFAs targeting both the high-level model weights and low-level codebase (executables or shared libraries). The key idea of ObfusBFA ","authors_text":"Han Qiu, Tianwei Zhang, Xiaobei Yan","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:31:27Z","title":"ObfusBFA: A Holistic Approach to Safeguarding DNNs from Different Types of Bit-Flip Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.10744","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a565838c5e8656d50b883a48af6763c6e18b2883fb865627a2b4551b8d050b06","target":"record","created_at":"2026-07-05T11:20:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3875d35f5185052180a5da55db81ad480531adcdf03bd4f695b7f977fede687b","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2025-06-12T14:31:27Z","title_canon_sha256":"92e8fd39055d740d3d533562ea5e7ecda268d3093c8dfd084188db3aacdfa10b"},"schema_version":"1.0","source":{"id":"2506.10744","kind":"arxiv","version":1}},"canonical_sha256":"6914a80ac2cb9d553b79257acf9b52c065d12075fa0b83f9482095e033d0a9b8","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6914a80ac2cb9d553b79257acf9b52c065d12075fa0b83f9482095e033d0a9b8","first_computed_at":"2026-07-05T11:20:29.653307Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:20:29.653307Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bi6hpc6nZ+pockIalqzJxQkx1nuGZ9F2WE/tmIe73XYFo6L7N1sqo8SP+YHiu1gvKeA4Q7QMGlkSp1K2AARADg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:20:29.653879Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.10744","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a565838c5e8656d50b883a48af6763c6e18b2883fb865627a2b4551b8d050b06","sha256:f883691e25c7d85f9b4c8e12e4ad6a9d61a4b6ff99e9ca0289c8d45e720e73f5"],"state_sha256":"adbf286f00c3767b5eacae66d9a09d48ff6b383070e3e035c11983e9a91dd050"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CfrfWkDdZxnV0ECd0sLb6MB8h9GejFphm+5C1y5r2Z1UlFPcS+aDkaXd1l35RaDM9lK0vdeSxvVl5Ee/9gyNDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T15:16:26.188525Z","bundle_sha256":"e92afd054bdb470495d2d608b458bf723ac183c3e234b7baff272a5c047229d3"}}