{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:PIYCCXLDLOBIU63YRRHOU2QWZH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"41a0f1c50b1957d64de69d441f7e46d9b9bc0e450e0b2b4c8fc6d69dd6eed7d3","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2021-04-21T18:12:18Z","title_canon_sha256":"12c57ce117aadfe46108ba28e63c1b6660a36bc3d2bbfce5a1671efd54c2653e"},"schema_version":"1.0","source":{"id":"2104.10706","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2104.10706","created_at":"2026-07-05T02:34:13Z"},{"alias_kind":"arxiv_version","alias_value":"2104.10706v1","created_at":"2026-07-05T02:34:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2104.10706","created_at":"2026-07-05T02:34:13Z"},{"alias_kind":"pith_short_12","alias_value":"PIYCCXLDLOBI","created_at":"2026-07-05T02:34:13Z"},{"alias_kind":"pith_short_16","alias_value":"PIYCCXLDLOBIU63Y","created_at":"2026-07-05T02:34:13Z"},{"alias_kind":"pith_short_8","alias_value":"PIYCCXLD","created_at":"2026-07-05T02:34:13Z"}],"graph_snapshots":[{"event_id":"sha256:42a0516fdd9ab9b7290d92327860e0bca5324428b1cf4b5ce78104190a759310","target":"graph","created_at":"2026-07-05T02:34:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2104.10706/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With increasingly more data and computation involved in their training, machine learning models constitute valuable intellectual property. This has spurred interest in model stealing, which is made more practical by advances in learning with partial, little, or no supervision. Existing defenses focus on inserting unique watermarks in a model's decision surface, but this is insufficient: the watermarks are not sampled from the training distribution and thus are not always preserved during model stealing. In this paper, we make the key observation that knowledge contained in the stolen model's t","authors_text":"Mohammad Yaghini, Nicolas Papernot, Pratyush Maini","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2021-04-21T18:12:18Z","title":"Dataset Inference: Ownership Resolution in Machine Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2104.10706","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d5610a75b3932101ccf42ee3f12124aa9fc9186c681afc23195adf94a2d9ecfe","target":"record","created_at":"2026-07-05T02:34:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"41a0f1c50b1957d64de69d441f7e46d9b9bc0e450e0b2b4c8fc6d69dd6eed7d3","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2021-04-21T18:12:18Z","title_canon_sha256":"12c57ce117aadfe46108ba28e63c1b6660a36bc3d2bbfce5a1671efd54c2653e"},"schema_version":"1.0","source":{"id":"2104.10706","kind":"arxiv","version":1}},"canonical_sha256":"7a30215d635b828a7b788c4eea6a16c9e6a8b5217a76beda3a420dc4be515703","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7a30215d635b828a7b788c4eea6a16c9e6a8b5217a76beda3a420dc4be515703","first_computed_at":"2026-07-05T02:34:13.632160Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:34:13.632160Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3S20TjUt1IdUhsIjOd607OISExAP0ONikADJTMjBBWbnYR9RznWXu5Aq1HGJp6mh69IwqR3c9q/Ce/vLBg5gDg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:34:13.632588Z","signed_message":"canonical_sha256_bytes"},"source_id":"2104.10706","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d5610a75b3932101ccf42ee3f12124aa9fc9186c681afc23195adf94a2d9ecfe","sha256:42a0516fdd9ab9b7290d92327860e0bca5324428b1cf4b5ce78104190a759310"],"state_sha256":"59a267047e44c8160abeaf662af3df69c49317ac2b83480ef9e4f23a1d47f038"}