{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:NXHJGYEOB2ZEVM3DCVTBWP25PF","short_pith_number":"pith:NXHJGYEO","canonical_record":{"source":{"id":"2305.13584","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-23T01:24:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d47736e4db3e8ed7a23002cc250e0f05a0870152cddb33f1ebda3d703060e073","abstract_canon_sha256":"6d321b6da89a2b715b930f205eba74ce7f777f687bf1329ace798bb48fd56c1d"},"schema_version":"1.0"},"canonical_sha256":"6dce93608e0eb24ab36315661b3f5d79665cdb20586c3f0fef5cb38503b377a7","source":{"kind":"arxiv","id":"2305.13584","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.13584","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"arxiv_version","alias_value":"2305.13584v2","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.13584","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_12","alias_value":"NXHJGYEOB2ZE","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_16","alias_value":"NXHJGYEOB2ZEVM3D","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_8","alias_value":"NXHJGYEO","created_at":"2026-07-05T10:32:23Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:NXHJGYEOB2ZEVM3DCVTBWP25PF","target":"record","payload":{"canonical_record":{"source":{"id":"2305.13584","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-23T01:24:39Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"d47736e4db3e8ed7a23002cc250e0f05a0870152cddb33f1ebda3d703060e073","abstract_canon_sha256":"6d321b6da89a2b715b930f205eba74ce7f777f687bf1329ace798bb48fd56c1d"},"schema_version":"1.0"},"canonical_sha256":"6dce93608e0eb24ab36315661b3f5d79665cdb20586c3f0fef5cb38503b377a7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:32:23.183584Z","signature_b64":"TeFsK+iT0YAq8hxNjgWiSu3+rh3lKDRJERJRvcixGhoYVH34wBfmBUNiPFNeDiaoUJfZBU5Iojiuju1Pk6+GAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"6dce93608e0eb24ab36315661b3f5d79665cdb20586c3f0fef5cb38503b377a7","last_reissued_at":"2026-07-05T10:32:23.181651Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:32:23.181651Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.13584","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ByqWPxI7nwe9/nRKO0H7PZ2Pxq0siEGuwE1ie21988TZ6JBOXPwi03ZC8/VK2cbLnR8BCD3XZcUpV/jQejbOAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:02:50.720266Z"},"content_sha256":"0ad1ebe94ade5b71da60294873798f2b1399e8675fe3e451d2fa6878c12899ef","schema_version":"1.0","event_id":"sha256:0ad1ebe94ade5b71da60294873798f2b1399e8675fe3e451d2fa6878c12899ef"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:NXHJGYEOB2ZEVM3DCVTBWP25PF","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Model Stealing Attack Against Multi-Exit Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Cai Yuling, Chen Kai, Li Pan, Lv Peizhuo, Xiang Fan, Zhang Shengzhi","submitted_at":"2023-05-23T01:24:39Z","abstract_excerpt":"Compared to traditional neural networks with a single output channel, a multi-exit network has multiple exits that allow for early outputs from the model's intermediate layers, thus significantly improving computational efficiency while maintaining similar main task accuracy. Existing model stealing attacks can only steal the model's utility while failing to capture its output strategy, i.e., a set of thresholds used to determine from which exit to output. This leads to a significant decrease in computational efficiency for the extracted model, thereby losing the advantage of multi-exit networ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.13584","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.13584/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:32:23Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"72uCy8rGXxolhuYa4MMiWp+VbhGbv8Dt9KZzp0nmspaSLtCTQU7Jh+0wG2Jpk+ZBRH+nux4Onpc5D819w01XCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T21:02:50.721444Z"},"content_sha256":"46cd8208cb9cb604b45dc1cfcc6132d2b6970e3a1a9e302851fc197534c6f162","schema_version":"1.0","event_id":"sha256:46cd8208cb9cb604b45dc1cfcc6132d2b6970e3a1a9e302851fc197534c6f162"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/bundle.json","state_url":"https://pith.science/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T21:02:50Z","links":{"resolver":"https://pith.science/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF","bundle":"https://pith.science/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/bundle.json","state":"https://pith.science/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/state.json","well_known_bundle":"https://pith.science/.well-known/pith/NXHJGYEOB2ZEVM3DCVTBWP25PF/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:NXHJGYEOB2ZEVM3DCVTBWP25PF","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6d321b6da89a2b715b930f205eba74ce7f777f687bf1329ace798bb48fd56c1d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-23T01:24:39Z","title_canon_sha256":"d47736e4db3e8ed7a23002cc250e0f05a0870152cddb33f1ebda3d703060e073"},"schema_version":"1.0","source":{"id":"2305.13584","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.13584","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"arxiv_version","alias_value":"2305.13584v2","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.13584","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_12","alias_value":"NXHJGYEOB2ZE","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_16","alias_value":"NXHJGYEOB2ZEVM3D","created_at":"2026-07-05T10:32:23Z"},{"alias_kind":"pith_short_8","alias_value":"NXHJGYEO","created_at":"2026-07-05T10:32:23Z"}],"graph_snapshots":[{"event_id":"sha256:46cd8208cb9cb604b45dc1cfcc6132d2b6970e3a1a9e302851fc197534c6f162","target":"graph","created_at":"2026-07-05T10:32:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.13584/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Compared to traditional neural networks with a single output channel, a multi-exit network has multiple exits that allow for early outputs from the model's intermediate layers, thus significantly improving computational efficiency while maintaining similar main task accuracy. Existing model stealing attacks can only steal the model's utility while failing to capture its output strategy, i.e., a set of thresholds used to determine from which exit to output. This leads to a significant decrease in computational efficiency for the extracted model, thereby losing the advantage of multi-exit networ","authors_text":"Cai Yuling, Chen Kai, Li Pan, Lv Peizhuo, Xiang Fan, Zhang Shengzhi","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-23T01:24:39Z","title":"A Model Stealing Attack Against Multi-Exit Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.13584","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0ad1ebe94ade5b71da60294873798f2b1399e8675fe3e451d2fa6878c12899ef","target":"record","created_at":"2026-07-05T10:32:23Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6d321b6da89a2b715b930f205eba74ce7f777f687bf1329ace798bb48fd56c1d","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-23T01:24:39Z","title_canon_sha256":"d47736e4db3e8ed7a23002cc250e0f05a0870152cddb33f1ebda3d703060e073"},"schema_version":"1.0","source":{"id":"2305.13584","kind":"arxiv","version":2}},"canonical_sha256":"6dce93608e0eb24ab36315661b3f5d79665cdb20586c3f0fef5cb38503b377a7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"6dce93608e0eb24ab36315661b3f5d79665cdb20586c3f0fef5cb38503b377a7","first_computed_at":"2026-07-05T10:32:23.181651Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:32:23.181651Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"TeFsK+iT0YAq8hxNjgWiSu3+rh3lKDRJERJRvcixGhoYVH34wBfmBUNiPFNeDiaoUJfZBU5Iojiuju1Pk6+GAA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:32:23.183584Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.13584","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0ad1ebe94ade5b71da60294873798f2b1399e8675fe3e451d2fa6878c12899ef","sha256:46cd8208cb9cb604b45dc1cfcc6132d2b6970e3a1a9e302851fc197534c6f162"],"state_sha256":"b00d50f2a866278b7b97f014e839ac517909b84269a59e19d09ffb49b65a73fd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"REzaWU0WXEh56rlcK6RSNxka3lYkIgnZhQn1x3JRiHNu7ZOzQA518xSvLQ8DgfD35ELBa/NXLvl0n2ZGCLXnCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T21:02:50.727175Z","bundle_sha256":"68d33bcc6c64261dc154e66bb77946c95fef9b1d32e42e0d32c249178da6422d"}}