{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:O5ZKOJRFUBIHMRNYQKBGZMDS65","short_pith_number":"pith:O5ZKOJRF","canonical_record":{"source":{"id":"1803.05847","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-03-05T11:35:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"cf3ab94be330b005f2be57d48fad1c23f14e7b09c473a184ccbdada0d29eb438","abstract_canon_sha256":"ef277763cf0eda8b2b317ecdf378efcac4d1b9bb3dac2bd1824bf9a42a4913e5"},"schema_version":"1.0"},"canonical_sha256":"7772a72625a0507645b882826cb072f75faf998b61f8b940bd53d636a091df64","source":{"kind":"arxiv","id":"1803.05847","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1803.05847","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"arxiv_version","alias_value":"1803.05847v2","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1803.05847","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_12","alias_value":"O5ZKOJRFUBIH","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_16","alias_value":"O5ZKOJRFUBIHMRNY","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_8","alias_value":"O5ZKOJRF","created_at":"2026-07-05T00:22:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:O5ZKOJRFUBIHMRNYQKBGZMDS65","target":"record","payload":{"canonical_record":{"source":{"id":"1803.05847","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-03-05T11:35:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"cf3ab94be330b005f2be57d48fad1c23f14e7b09c473a184ccbdada0d29eb438","abstract_canon_sha256":"ef277763cf0eda8b2b317ecdf378efcac4d1b9bb3dac2bd1824bf9a42a4913e5"},"schema_version":"1.0"},"canonical_sha256":"7772a72625a0507645b882826cb072f75faf998b61f8b940bd53d636a091df64","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:22:34.295944Z","signature_b64":"o9kjJVh1Rq5GwFxl5Nu1OhGiIPZ2nxVX0Cldxvld3QhGBXXxS/RE1Fprim4iJhX2OEx4J960b0uFfKKF+B8YAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7772a72625a0507645b882826cb072f75faf998b61f8b940bd53d636a091df64","last_reissued_at":"2026-07-05T00:22:34.295440Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:22:34.295440Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1803.05847","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:22:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YJxSD2IsdSs/m12d/DczfHqvtaugVZNo2b4wgeVjdru8nhx7FE+EroiUdXfBhp0OpBrD5AuqFeHqyWB5CmKWDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:27:58.387574Z"},"content_sha256":"ef613d5fa87f9fc4754195c05e5363bab501c536f27194dde74b00c6b920ed24","schema_version":"1.0","event_id":"sha256:ef613d5fa87f9fc4754195c05e5363bab501c536f27194dde74b00c6b920ed24"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:O5ZKOJRFUBIHMRNYQKBGZMDS65","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Bo Luo, Lingxiao Wei, Qiang Xu, Yannan Liu, Yu Li","submitted_at":"2018-03-05T11:35:14Z","abstract_excerpt":"Deep learning has become the de-facto computational paradigm for various kinds of perception problems, including many privacy-sensitive applications such as online medical image analysis. No doubt to say, the data privacy of these deep learning systems is a serious concern. Different from previous research focusing on exploiting privacy leakage from deep learning models, in this paper, we present the first attack on the implementation of deep learning models. To be specific, we perform the attack on an FPGA-based convolutional neural network accelerator and we manage to recover the input image"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1803.05847","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1803.05847/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:22:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gDd831i0LcuLqd/vWkvBq9vdAjbzQvGOnHjJ8ktLsfW2xjOLZNOyhbql0xGHZfhU4Pec3HeyvwjSJ65Rb1CaDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T14:27:58.388070Z"},"content_sha256":"f2b164a0e370ab5b35175f867996486438d149d34774aa3f7f551ad46c964722","schema_version":"1.0","event_id":"sha256:f2b164a0e370ab5b35175f867996486438d149d34774aa3f7f551ad46c964722"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/bundle.json","state_url":"https://pith.science/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T14:27:58Z","links":{"resolver":"https://pith.science/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65","bundle":"https://pith.science/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/bundle.json","state":"https://pith.science/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/state.json","well_known_bundle":"https://pith.science/.well-known/pith/O5ZKOJRFUBIHMRNYQKBGZMDS65/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:O5ZKOJRFUBIHMRNYQKBGZMDS65","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ef277763cf0eda8b2b317ecdf378efcac4d1b9bb3dac2bd1824bf9a42a4913e5","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-03-05T11:35:14Z","title_canon_sha256":"cf3ab94be330b005f2be57d48fad1c23f14e7b09c473a184ccbdada0d29eb438"},"schema_version":"1.0","source":{"id":"1803.05847","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1803.05847","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"arxiv_version","alias_value":"1803.05847v2","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1803.05847","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_12","alias_value":"O5ZKOJRFUBIH","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_16","alias_value":"O5ZKOJRFUBIHMRNY","created_at":"2026-07-05T00:22:34Z"},{"alias_kind":"pith_short_8","alias_value":"O5ZKOJRF","created_at":"2026-07-05T00:22:34Z"}],"graph_snapshots":[{"event_id":"sha256:f2b164a0e370ab5b35175f867996486438d149d34774aa3f7f551ad46c964722","target":"graph","created_at":"2026-07-05T00:22:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1803.05847/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning has become the de-facto computational paradigm for various kinds of perception problems, including many privacy-sensitive applications such as online medical image analysis. No doubt to say, the data privacy of these deep learning systems is a serious concern. Different from previous research focusing on exploiting privacy leakage from deep learning models, in this paper, we present the first attack on the implementation of deep learning models. To be specific, we perform the attack on an FPGA-based convolutional neural network accelerator and we manage to recover the input image","authors_text":"Bo Luo, Lingxiao Wei, Qiang Xu, Yannan Liu, Yu Li","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-03-05T11:35:14Z","title":"I Know What You See: Power Side-Channel Attack on Convolutional Neural Network Accelerators"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1803.05847","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ef613d5fa87f9fc4754195c05e5363bab501c536f27194dde74b00c6b920ed24","target":"record","created_at":"2026-07-05T00:22:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ef277763cf0eda8b2b317ecdf378efcac4d1b9bb3dac2bd1824bf9a42a4913e5","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-03-05T11:35:14Z","title_canon_sha256":"cf3ab94be330b005f2be57d48fad1c23f14e7b09c473a184ccbdada0d29eb438"},"schema_version":"1.0","source":{"id":"1803.05847","kind":"arxiv","version":2}},"canonical_sha256":"7772a72625a0507645b882826cb072f75faf998b61f8b940bd53d636a091df64","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7772a72625a0507645b882826cb072f75faf998b61f8b940bd53d636a091df64","first_computed_at":"2026-07-05T00:22:34.295440Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:22:34.295440Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o9kjJVh1Rq5GwFxl5Nu1OhGiIPZ2nxVX0Cldxvld3QhGBXXxS/RE1Fprim4iJhX2OEx4J960b0uFfKKF+B8YAw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:22:34.295944Z","signed_message":"canonical_sha256_bytes"},"source_id":"1803.05847","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ef613d5fa87f9fc4754195c05e5363bab501c536f27194dde74b00c6b920ed24","sha256:f2b164a0e370ab5b35175f867996486438d149d34774aa3f7f551ad46c964722"],"state_sha256":"f50c041f360508c1506669a24d1bca4e741448f3c50c2dbbbd7725f11efc393c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cla8+uVRdycsJfOzmEF4/2vDCrNFvKrT/cCpXmj7uZmfuAxboXdX+surGaR5qDWBzLziuKo2JPE/OOvYjgPKBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T14:27:58.428906Z","bundle_sha256":"5a9376181cfcaca34c66aede601311ed53145da44db33bd8c3017e64fae6a5bf"}}