{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:ODN5DKRZDB2SKPFANEB5RAXZT3","short_pith_number":"pith:ODN5DKRZ","canonical_record":{"source":{"id":"2104.11470","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-23T08:39:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d74f6fbaa1e46053e17a6d8744872882861f4319ea9e80942e7e2ab7c00b461d","abstract_canon_sha256":"28d35d24c417d70cef48663a8717416be2d626f4f30565ccc4854516752b089e"},"schema_version":"1.0"},"canonical_sha256":"70dbd1aa391875253ca06903d882f99eff690200966610beb899179256e388da","source":{"kind":"arxiv","id":"2104.11470","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.11470","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"arxiv_version","alias_value":"2104.11470v2","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.11470","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_12","alias_value":"ODN5DKRZDB2S","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_16","alias_value":"ODN5DKRZDB2SKPFA","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_8","alias_value":"ODN5DKRZ","created_at":"2026-07-05T03:27:30Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:ODN5DKRZDB2SKPFANEB5RAXZT3","target":"record","payload":{"canonical_record":{"source":{"id":"2104.11470","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-23T08:39:41Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d74f6fbaa1e46053e17a6d8744872882861f4319ea9e80942e7e2ab7c00b461d","abstract_canon_sha256":"28d35d24c417d70cef48663a8717416be2d626f4f30565ccc4854516752b089e"},"schema_version":"1.0"},"canonical_sha256":"70dbd1aa391875253ca06903d882f99eff690200966610beb899179256e388da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:27:30.923776Z","signature_b64":"G5iL5LWhdGiiD8EDlhl7rmbYAwSTWqcT8UXS7A7c5rA8oNCjM86P2dJeY7+IuqvV4X2gICBDdza/uWMYT30LCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"70dbd1aa391875253ca06903d882f99eff690200966610beb899179256e388da","last_reissued_at":"2026-07-05T03:27:30.923308Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:27:30.923308Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2104.11470","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:27:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aoXveetzTFoLXtIK5bRVXzHYfIXo64JFv2fX2Oyame7gxoSALX5uHJDXydFcecsxg7OquelzFGb8ZfDs/VZjDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:39:44.968866Z"},"content_sha256":"4ba9309455597c7938224c338d5170e702f14a010380fbd19bcc2d294e3bf95b","schema_version":"1.0","event_id":"sha256:4ba9309455597c7938224c338d5170e702f14a010380fbd19bcc2d294e3bf95b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:ODN5DKRZDB2SKPFANEB5RAXZT3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Random Noise Defense Against Query-Based Black-Box Attacks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Baoyuan Wu, Hongyuan Zha, Yanbo Fan, Zeyu Qin","submitted_at":"2021-04-23T08:39:41Z","abstract_excerpt":"The query-based black-box attacks have raised serious threats to machine learning models in many real applications. In this work, we study a lightweight defense method, dubbed Random Noise Defense (RND), which adds proper Gaussian noise to each query. We conduct the theoretical analysis about the effectiveness of RND against query-based black-box attacks and the corresponding adaptive attacks. Our theoretical results reveal that the defense performance of RND is determined by the magnitude ratio between the noise induced by RND and the noise added by the attackers for gradient estimation or lo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.11470","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2104.11470/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:27:30Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FRqbaxToqrJVTGy9kyxZt1j6wMOX/dY9cUWdFT0UkpA7RXjvg2xWLd51NZnzROGB+n50imb5F49VIsU8J/1FCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T21:39:44.969543Z"},"content_sha256":"2fdfa159a900d2b38043a8ef72194c85096e3049abf5fd35fc505d7513bf337d","schema_version":"1.0","event_id":"sha256:2fdfa159a900d2b38043a8ef72194c85096e3049abf5fd35fc505d7513bf337d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/bundle.json","state_url":"https://pith.science/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T21:39:44Z","links":{"resolver":"https://pith.science/pith/ODN5DKRZDB2SKPFANEB5RAXZT3","bundle":"https://pith.science/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/bundle.json","state":"https://pith.science/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ODN5DKRZDB2SKPFANEB5RAXZT3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:ODN5DKRZDB2SKPFANEB5RAXZT3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"28d35d24c417d70cef48663a8717416be2d626f4f30565ccc4854516752b089e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-23T08:39:41Z","title_canon_sha256":"d74f6fbaa1e46053e17a6d8744872882861f4319ea9e80942e7e2ab7c00b461d"},"schema_version":"1.0","source":{"id":"2104.11470","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.11470","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"arxiv_version","alias_value":"2104.11470v2","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.11470","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_12","alias_value":"ODN5DKRZDB2S","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_16","alias_value":"ODN5DKRZDB2SKPFA","created_at":"2026-07-05T03:27:30Z"},{"alias_kind":"pith_short_8","alias_value":"ODN5DKRZ","created_at":"2026-07-05T03:27:30Z"}],"graph_snapshots":[{"event_id":"sha256:2fdfa159a900d2b38043a8ef72194c85096e3049abf5fd35fc505d7513bf337d","target":"graph","created_at":"2026-07-05T03:27:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.11470/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The query-based black-box attacks have raised serious threats to machine learning models in many real applications. In this work, we study a lightweight defense method, dubbed Random Noise Defense (RND), which adds proper Gaussian noise to each query. We conduct the theoretical analysis about the effectiveness of RND against query-based black-box attacks and the corresponding adaptive attacks. Our theoretical results reveal that the defense performance of RND is determined by the magnitude ratio between the noise induced by RND and the noise added by the attackers for gradient estimation or lo","authors_text":"Baoyuan Wu, Hongyuan Zha, Yanbo Fan, Zeyu Qin","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-23T08:39:41Z","title":"Random Noise Defense Against Query-Based Black-Box Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.11470","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4ba9309455597c7938224c338d5170e702f14a010380fbd19bcc2d294e3bf95b","target":"record","created_at":"2026-07-05T03:27:30Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"28d35d24c417d70cef48663a8717416be2d626f4f30565ccc4854516752b089e","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-04-23T08:39:41Z","title_canon_sha256":"d74f6fbaa1e46053e17a6d8744872882861f4319ea9e80942e7e2ab7c00b461d"},"schema_version":"1.0","source":{"id":"2104.11470","kind":"arxiv","version":2}},"canonical_sha256":"70dbd1aa391875253ca06903d882f99eff690200966610beb899179256e388da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"70dbd1aa391875253ca06903d882f99eff690200966610beb899179256e388da","first_computed_at":"2026-07-05T03:27:30.923308Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:27:30.923308Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"G5iL5LWhdGiiD8EDlhl7rmbYAwSTWqcT8UXS7A7c5rA8oNCjM86P2dJeY7+IuqvV4X2gICBDdza/uWMYT30LCA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:27:30.923776Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.11470","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4ba9309455597c7938224c338d5170e702f14a010380fbd19bcc2d294e3bf95b","sha256:2fdfa159a900d2b38043a8ef72194c85096e3049abf5fd35fc505d7513bf337d"],"state_sha256":"e2cf374b81fcc95ee7db073de92a9f0f6752ef3a51dd1a95fa1e8cec00b8bd86"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZqK9cob1NAHOSlOAGzpD7Oy6pH+5huIp0b6CLAW6jh+peQ7aUQxG2jOTZtFKQBi6IEi9+OhA31Qx/ttPwobyBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T21:39:44.973897Z","bundle_sha256":"864f92f376915fb342b1c50440a85a78336014c4237a946ad56332fba3a2264b"}}