{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:NHL3SSFOQFZ2JWRZEYT4NMZUFZ","short_pith_number":"pith:NHL3SSFO","canonical_record":{"source":{"id":"1906.00830","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-06-03T14:25:30Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"1d3d0e992b358626eafba085549dbbe240d5cb85a2b7f98af72ecdff30b8a627","abstract_canon_sha256":"6108077745c720cdcd0665f312120c73a036292b0762b8355a9d558f872a08f6"},"schema_version":"1.0"},"canonical_sha256":"69d7b948ae8173a4da392627c6b3342e413a6052f19b07d903c5e9183c21ea48","source":{"kind":"arxiv","id":"1906.00830","version":5},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.00830","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"arxiv_version","alias_value":"1906.00830v5","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.00830","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_12","alias_value":"NHL3SSFOQFZ2","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_16","alias_value":"NHL3SSFOQFZ2JWRZ","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_8","alias_value":"NHL3SSFO","created_at":"2026-07-05T02:58:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:NHL3SSFOQFZ2JWRZEYT4NMZUFZ","target":"record","payload":{"canonical_record":{"source":{"id":"1906.00830","kind":"arxiv","version":5},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-06-03T14:25:30Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"1d3d0e992b358626eafba085549dbbe240d5cb85a2b7f98af72ecdff30b8a627","abstract_canon_sha256":"6108077745c720cdcd0665f312120c73a036292b0762b8355a9d558f872a08f6"},"schema_version":"1.0"},"canonical_sha256":"69d7b948ae8173a4da392627c6b3342e413a6052f19b07d903c5e9183c21ea48","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:58:20.964117Z","signature_b64":"T1s3uyOUwimlEBPreiSSE92JOvi5yYDHP4oQHQL7iTRBS6a5mdTUjqXxOGf5pTuXPX5Vr48dUXfguntxiiDDCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"69d7b948ae8173a4da392627c6b3342e413a6052f19b07d903c5e9183c21ea48","last_reissued_at":"2026-07-05T02:58:20.963649Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:58:20.963649Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.00830","source_version":5,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"HiGAU1cyOSCj0szZltUs8xSr4n9tY47Gs7eP6ygR9jQXVwSRFahi0sk6geFw65us58g53KERQ5q4c2uTkkm2CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:13:53.857634Z"},"content_sha256":"fd7dbe275b3a5c572a27e7f5c5f972b707381eb0d96c5ba86a26e42e313e584d","schema_version":"1.0","event_id":"sha256:fd7dbe275b3a5c572a27e7f5c5f972b707381eb0d96c5ba86a26e42e313e584d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:NHL3SSFOQFZ2JWRZEYT4NMZUFZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.CR","authors_text":"Buse Gul Atli, N. Asokan, Samuel Marchal, Sebastian Szyller","submitted_at":"2019-06-03T14:25:30Z","abstract_excerpt":"Training machine learning (ML) models is expensive in terms of computational power, amounts of labeled data and human expertise. Thus, ML models constitute intellectual property (IP) and business value for their owners. Embedding digital watermarks during model training allows a model owner to later identify their models in case of theft or misuse. However, model functionality can also be stolen via model extraction, where an adversary trains a surrogate model using results returned from a prediction API of the original model. Recent work has shown that model extraction is a realistic threat. "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.00830","kind":"arxiv","version":5},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1906.00830/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:58:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"7aXyXj7olSBqpreBVv526hIhaN7Tr8gqVpw+chXLva8CZLOmeMWdFBGBeDrT06AT7ZA2iDL8uduwgv0qLSKDAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T05:13:53.858141Z"},"content_sha256":"9231b3ea7fe487ecb8ff0baf7915055a49db8cd1b58278d7ef202bad0ac4cc02","schema_version":"1.0","event_id":"sha256:9231b3ea7fe487ecb8ff0baf7915055a49db8cd1b58278d7ef202bad0ac4cc02"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/bundle.json","state_url":"https://pith.science/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T05:13:53Z","links":{"resolver":"https://pith.science/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ","bundle":"https://pith.science/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/bundle.json","state":"https://pith.science/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NHL3SSFOQFZ2JWRZEYT4NMZUFZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:NHL3SSFOQFZ2JWRZEYT4NMZUFZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6108077745c720cdcd0665f312120c73a036292b0762b8355a9d558f872a08f6","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-06-03T14:25:30Z","title_canon_sha256":"1d3d0e992b358626eafba085549dbbe240d5cb85a2b7f98af72ecdff30b8a627"},"schema_version":"1.0","source":{"id":"1906.00830","kind":"arxiv","version":5}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.00830","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"arxiv_version","alias_value":"1906.00830v5","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.00830","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_12","alias_value":"NHL3SSFOQFZ2","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_16","alias_value":"NHL3SSFOQFZ2JWRZ","created_at":"2026-07-05T02:58:20Z"},{"alias_kind":"pith_short_8","alias_value":"NHL3SSFO","created_at":"2026-07-05T02:58:20Z"}],"graph_snapshots":[{"event_id":"sha256:9231b3ea7fe487ecb8ff0baf7915055a49db8cd1b58278d7ef202bad0ac4cc02","target":"graph","created_at":"2026-07-05T02:58:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.00830/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Training machine learning (ML) models is expensive in terms of computational power, amounts of labeled data and human expertise. Thus, ML models constitute intellectual property (IP) and business value for their owners. Embedding digital watermarks during model training allows a model owner to later identify their models in case of theft or misuse. However, model functionality can also be stolen via model extraction, where an adversary trains a surrogate model using results returned from a prediction API of the original model. Recent work has shown that model extraction is a realistic threat. ","authors_text":"Buse Gul Atli, N. Asokan, Samuel Marchal, Sebastian Szyller","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-06-03T14:25:30Z","title":"DAWN: Dynamic Adversarial Watermarking of Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.00830","kind":"arxiv","version":5},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:fd7dbe275b3a5c572a27e7f5c5f972b707381eb0d96c5ba86a26e42e313e584d","target":"record","created_at":"2026-07-05T02:58:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6108077745c720cdcd0665f312120c73a036292b0762b8355a9d558f872a08f6","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-06-03T14:25:30Z","title_canon_sha256":"1d3d0e992b358626eafba085549dbbe240d5cb85a2b7f98af72ecdff30b8a627"},"schema_version":"1.0","source":{"id":"1906.00830","kind":"arxiv","version":5}},"canonical_sha256":"69d7b948ae8173a4da392627c6b3342e413a6052f19b07d903c5e9183c21ea48","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"69d7b948ae8173a4da392627c6b3342e413a6052f19b07d903c5e9183c21ea48","first_computed_at":"2026-07-05T02:58:20.963649Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:58:20.963649Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"T1s3uyOUwimlEBPreiSSE92JOvi5yYDHP4oQHQL7iTRBS6a5mdTUjqXxOGf5pTuXPX5Vr48dUXfguntxiiDDCA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:58:20.964117Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.00830","source_kind":"arxiv","source_version":5}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:fd7dbe275b3a5c572a27e7f5c5f972b707381eb0d96c5ba86a26e42e313e584d","sha256:9231b3ea7fe487ecb8ff0baf7915055a49db8cd1b58278d7ef202bad0ac4cc02"],"state_sha256":"067fef69c9c6d5a2aa47770271b3830e403a7b2b8980edad2f96f875613c6630"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ySwA7gD8b3ZJ4F2W9KL87JofYfv+GomplGAoaif51NqWAPhYatuOcg08v8xVgKQ+3wF70E2AyqFTJrV1IM8GCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T05:13:53.863532Z","bundle_sha256":"66b67f63c4a3892e46225aa5d0cab3275480b1d523247b5c5c279e69817e7d1b"}}