{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:PQHPDMHENRULJL5GB7A2H2THP6","short_pith_number":"pith:PQHPDMHE","canonical_record":{"source":{"id":"2112.03477","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T03:53:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"637c12bfc06966395e0153185243a9770a09f524358c50793c7582bc0a840de6","abstract_canon_sha256":"ca1490cf49838a53871aa0edb6c02bb9c77b37524c0d73889e9257c1548b891d"},"schema_version":"1.0"},"canonical_sha256":"7c0ef1b0e46c68b4afa60fc1a3ea677f97901fe04b9f84bba0218f264bff291d","source":{"kind":"arxiv","id":"2112.03477","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.03477","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"arxiv_version","alias_value":"2112.03477v2","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.03477","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_12","alias_value":"PQHPDMHENRUL","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_16","alias_value":"PQHPDMHENRULJL5G","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_8","alias_value":"PQHPDMHE","created_at":"2026-07-05T03:46:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:PQHPDMHENRULJL5GB7A2H2THP6","target":"record","payload":{"canonical_record":{"source":{"id":"2112.03477","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T03:53:38Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"637c12bfc06966395e0153185243a9770a09f524358c50793c7582bc0a840de6","abstract_canon_sha256":"ca1490cf49838a53871aa0edb6c02bb9c77b37524c0d73889e9257c1548b891d"},"schema_version":"1.0"},"canonical_sha256":"7c0ef1b0e46c68b4afa60fc1a3ea677f97901fe04b9f84bba0218f264bff291d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:46:37.874733Z","signature_b64":"8VwXycCfqrhNQ0RefRF7mF/VM1RCXXWmxnZGehhbk1cGjSog7H9AiDOx09QIhr1ZvSeZghFjCsYG4VmfwmBpDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"7c0ef1b0e46c68b4afa60fc1a3ea677f97901fe04b9f84bba0218f264bff291d","last_reissued_at":"2026-07-05T03:46:37.874328Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:46:37.874328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2112.03477","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:46:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+7RMpaglbQFzHnAB+upxBOevZOZiet6hBgHGcPx/q836ncAlREFTwyXmo3FAynw97gQJTl4m98ZDCy+gzOTzBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:42:27.539100Z"},"content_sha256":"204251a6746bc397e7506421f39000759ef02e9d235b9a625cba4f9a578e796d","schema_version":"1.0","event_id":"sha256:204251a6746bc397e7506421f39000759ef02e9d235b9a625cba4f9a578e796d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:PQHPDMHENRULJL5GB7A2H2THP6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BDFA: A Blind Data Adversarial Bit-flip Attack on Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Behnam Ghavami, Lesley Shannon, Mani Sadati, Mohammad Shahidzadeh, Zhenman Fang","submitted_at":"2021-12-07T03:53:38Z","abstract_excerpt":"Adversarial bit-flip attack (BFA) on Neural Network weights can result in catastrophic accuracy degradation by flipping a very small number of bits. A major drawback of prior bit flip attack techniques is their reliance on test data. This is frequently not possible for applications that contain sensitive or proprietary data. In this paper, we propose Blind Data Adversarial Bit-flip Attack (BDFA), a novel technique to enable BFA without any access to the training or testing data. This is achieved by optimizing for a synthetic dataset, which is engineered to match the statistics of batch normali"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.03477","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2112.03477/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:46:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jly4qKEphP+ijGQQHBt7BZvWm8FZiaOBfNhJgAYyY3g39kcPzVkenvwB33XkZ8uKfKUS/SIe0r/RW1MKBVzDCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:42:27.539636Z"},"content_sha256":"1e95760136dfbd8bbf09ae0b612c85f73ffe2eefe7bc012918ef424b4d3f6b83","schema_version":"1.0","event_id":"sha256:1e95760136dfbd8bbf09ae0b612c85f73ffe2eefe7bc012918ef424b4d3f6b83"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/PQHPDMHENRULJL5GB7A2H2THP6/bundle.json","state_url":"https://pith.science/pith/PQHPDMHENRULJL5GB7A2H2THP6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/PQHPDMHENRULJL5GB7A2H2THP6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:42:27Z","links":{"resolver":"https://pith.science/pith/PQHPDMHENRULJL5GB7A2H2THP6","bundle":"https://pith.science/pith/PQHPDMHENRULJL5GB7A2H2THP6/bundle.json","state":"https://pith.science/pith/PQHPDMHENRULJL5GB7A2H2THP6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/PQHPDMHENRULJL5GB7A2H2THP6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:PQHPDMHENRULJL5GB7A2H2THP6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ca1490cf49838a53871aa0edb6c02bb9c77b37524c0d73889e9257c1548b891d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T03:53:38Z","title_canon_sha256":"637c12bfc06966395e0153185243a9770a09f524358c50793c7582bc0a840de6"},"schema_version":"1.0","source":{"id":"2112.03477","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2112.03477","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"arxiv_version","alias_value":"2112.03477v2","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2112.03477","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_12","alias_value":"PQHPDMHENRUL","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_16","alias_value":"PQHPDMHENRULJL5G","created_at":"2026-07-05T03:46:37Z"},{"alias_kind":"pith_short_8","alias_value":"PQHPDMHE","created_at":"2026-07-05T03:46:37Z"}],"graph_snapshots":[{"event_id":"sha256:1e95760136dfbd8bbf09ae0b612c85f73ffe2eefe7bc012918ef424b4d3f6b83","target":"graph","created_at":"2026-07-05T03:46:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2112.03477/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial bit-flip attack (BFA) on Neural Network weights can result in catastrophic accuracy degradation by flipping a very small number of bits. A major drawback of prior bit flip attack techniques is their reliance on test data. This is frequently not possible for applications that contain sensitive or proprietary data. In this paper, we propose Blind Data Adversarial Bit-flip Attack (BDFA), a novel technique to enable BFA without any access to the training or testing data. This is achieved by optimizing for a synthetic dataset, which is engineered to match the statistics of batch normali","authors_text":"Behnam Ghavami, Lesley Shannon, Mani Sadati, Mohammad Shahidzadeh, Zhenman Fang","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T03:53:38Z","title":"BDFA: A Blind Data Adversarial Bit-flip Attack on Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2112.03477","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:204251a6746bc397e7506421f39000759ef02e9d235b9a625cba4f9a578e796d","target":"record","created_at":"2026-07-05T03:46:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ca1490cf49838a53871aa0edb6c02bb9c77b37524c0d73889e9257c1548b891d","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-12-07T03:53:38Z","title_canon_sha256":"637c12bfc06966395e0153185243a9770a09f524358c50793c7582bc0a840de6"},"schema_version":"1.0","source":{"id":"2112.03477","kind":"arxiv","version":2}},"canonical_sha256":"7c0ef1b0e46c68b4afa60fc1a3ea677f97901fe04b9f84bba0218f264bff291d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7c0ef1b0e46c68b4afa60fc1a3ea677f97901fe04b9f84bba0218f264bff291d","first_computed_at":"2026-07-05T03:46:37.874328Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:46:37.874328Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"8VwXycCfqrhNQ0RefRF7mF/VM1RCXXWmxnZGehhbk1cGjSog7H9AiDOx09QIhr1ZvSeZghFjCsYG4VmfwmBpDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:46:37.874733Z","signed_message":"canonical_sha256_bytes"},"source_id":"2112.03477","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:204251a6746bc397e7506421f39000759ef02e9d235b9a625cba4f9a578e796d","sha256:1e95760136dfbd8bbf09ae0b612c85f73ffe2eefe7bc012918ef424b4d3f6b83"],"state_sha256":"e378caccbf675e60903c33bc854a428d707086ef4b70d4cdb6f7fdd966944fa2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"rhD14H+KBq+mMz9lB0bZDf92CgC0Vz8jvL90yYH7f+2OG6zJqdCdBCEicX5bVGhuWyWcIUVyF/QZc7VJO6U6CA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:42:27.545653Z","bundle_sha256":"566f38f4a22a9c30e2adef20041d856d84d3d0d56e2da51c2b7cd2dbd5797181"}}