{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:QNWHE4UY4N4ZDKHQ4AWFQI2LT5","short_pith_number":"pith:QNWHE4UY","canonical_record":{"source":{"id":"2210.11735","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-21T05:11:57Z","cross_cats_sorted":[],"title_canon_sha256":"36848998cd4be61f20b4481b10eb83421a962182097a9de61ad40a8f5309b866","abstract_canon_sha256":"a4770e4e353dac29f8f907243f04ab7fcee633134140a6b29307992f807ed6fb"},"schema_version":"1.0"},"canonical_sha256":"836c727298e37991a8f0e02c58234b9f7c4d4677e3416212cea66c7b8a25c068","source":{"kind":"arxiv","id":"2210.11735","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.11735","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"arxiv_version","alias_value":"2210.11735v2","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.11735","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_12","alias_value":"QNWHE4UY4N4Z","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_16","alias_value":"QNWHE4UY4N4ZDKHQ","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_8","alias_value":"QNWHE4UY","created_at":"2026-07-05T05:11:44Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:QNWHE4UY4N4ZDKHQ4AWFQI2LT5","target":"record","payload":{"canonical_record":{"source":{"id":"2210.11735","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-21T05:11:57Z","cross_cats_sorted":[],"title_canon_sha256":"36848998cd4be61f20b4481b10eb83421a962182097a9de61ad40a8f5309b866","abstract_canon_sha256":"a4770e4e353dac29f8f907243f04ab7fcee633134140a6b29307992f807ed6fb"},"schema_version":"1.0"},"canonical_sha256":"836c727298e37991a8f0e02c58234b9f7c4d4677e3416212cea66c7b8a25c068","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:11:44.208509Z","signature_b64":"J5EatR6TiVIW+Fo3BEjZn+o8D7vq74auBsBC+yQO6LieUhrBi7JUVQC/XFwJscaJnA41Txg7AitjADmbSW6SCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"836c727298e37991a8f0e02c58234b9f7c4d4677e3416212cea66c7b8a25c068","last_reissued_at":"2026-07-05T05:11:44.208140Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:11:44.208140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2210.11735","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:11:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lRrMjdW8Lx3vAlL9pbkIvwZgo4k2B+aMVFT6tsNC/7pCGPLwT+GI1pURbJ2qgqeQuA6TBBwVGKQfvRtb6vSnBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T00:35:51.510305Z"},"content_sha256":"6c61f86739cb0103baa3b28f54528067c758c209024d4f252277c89e7adba065","schema_version":"1.0","event_id":"sha256:6c61f86739cb0103baa3b28f54528067c758c209024d4f252277c89e7adba065"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:QNWHE4UY4N4ZDKHQ4AWFQI2LT5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extracted BERT Model Leaks More Information than You Think!","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Chen Chen, Lingjuan Lyu, Qiongkai Xu, Xuanli He","submitted_at":"2022-10-21T05:11:57Z","abstract_excerpt":"The collection and availability of big data, combined with advances in pre-trained models (e.g. BERT), have revolutionized the predictive performance of natural language processing tasks. This allows corporations to provide machine learning as a service (MLaaS) by encapsulating fine-tuned BERT-based models as APIs. Due to significant commercial interest, there has been a surge of attempts to steal re mote services via model extraction. Although previous works have made progress in defending against model extraction attacks, there has been little discussion on their performance in preventing pr"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.11735","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2210.11735/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:11:44Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZBGYyq7kE6A7DhHevi5qmwrIobyc3xZQT8a8sZVxwu7rdBy+5bmGvynOaFITXwkKBcf48baue3vG2o28/okoBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T00:35:51.510936Z"},"content_sha256":"850f162ec3ceb51bbaf9b9ac74284cc9168216c5ff21147b18f83821d088621e","schema_version":"1.0","event_id":"sha256:850f162ec3ceb51bbaf9b9ac74284cc9168216c5ff21147b18f83821d088621e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/bundle.json","state_url":"https://pith.science/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T00:35:51Z","links":{"resolver":"https://pith.science/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5","bundle":"https://pith.science/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/bundle.json","state":"https://pith.science/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/QNWHE4UY4N4ZDKHQ4AWFQI2LT5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:QNWHE4UY4N4ZDKHQ4AWFQI2LT5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a4770e4e353dac29f8f907243f04ab7fcee633134140a6b29307992f807ed6fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-21T05:11:57Z","title_canon_sha256":"36848998cd4be61f20b4481b10eb83421a962182097a9de61ad40a8f5309b866"},"schema_version":"1.0","source":{"id":"2210.11735","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2210.11735","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"arxiv_version","alias_value":"2210.11735v2","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2210.11735","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_12","alias_value":"QNWHE4UY4N4Z","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_16","alias_value":"QNWHE4UY4N4ZDKHQ","created_at":"2026-07-05T05:11:44Z"},{"alias_kind":"pith_short_8","alias_value":"QNWHE4UY","created_at":"2026-07-05T05:11:44Z"}],"graph_snapshots":[{"event_id":"sha256:850f162ec3ceb51bbaf9b9ac74284cc9168216c5ff21147b18f83821d088621e","target":"graph","created_at":"2026-07-05T05:11:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2210.11735/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The collection and availability of big data, combined with advances in pre-trained models (e.g. BERT), have revolutionized the predictive performance of natural language processing tasks. This allows corporations to provide machine learning as a service (MLaaS) by encapsulating fine-tuned BERT-based models as APIs. Due to significant commercial interest, there has been a surge of attempts to steal re mote services via model extraction. Although previous works have made progress in defending against model extraction attacks, there has been little discussion on their performance in preventing pr","authors_text":"Chen Chen, Lingjuan Lyu, Qiongkai Xu, Xuanli He","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-21T05:11:57Z","title":"Extracted BERT Model Leaks More Information than You Think!"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2210.11735","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6c61f86739cb0103baa3b28f54528067c758c209024d4f252277c89e7adba065","target":"record","created_at":"2026-07-05T05:11:44Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a4770e4e353dac29f8f907243f04ab7fcee633134140a6b29307992f807ed6fb","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-10-21T05:11:57Z","title_canon_sha256":"36848998cd4be61f20b4481b10eb83421a962182097a9de61ad40a8f5309b866"},"schema_version":"1.0","source":{"id":"2210.11735","kind":"arxiv","version":2}},"canonical_sha256":"836c727298e37991a8f0e02c58234b9f7c4d4677e3416212cea66c7b8a25c068","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"836c727298e37991a8f0e02c58234b9f7c4d4677e3416212cea66c7b8a25c068","first_computed_at":"2026-07-05T05:11:44.208140Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:11:44.208140Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"J5EatR6TiVIW+Fo3BEjZn+o8D7vq74auBsBC+yQO6LieUhrBi7JUVQC/XFwJscaJnA41Txg7AitjADmbSW6SCg==","signature_status":"signed_v1","signed_at":"2026-07-05T05:11:44.208509Z","signed_message":"canonical_sha256_bytes"},"source_id":"2210.11735","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6c61f86739cb0103baa3b28f54528067c758c209024d4f252277c89e7adba065","sha256:850f162ec3ceb51bbaf9b9ac74284cc9168216c5ff21147b18f83821d088621e"],"state_sha256":"47de6b9cbd99b553566bacd3c812e4d5e2cc55baed029b6fac9f0a4a1a46cb67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xEPQo3zgL+YXjwNpmVL7DIMLXBcdsUhFje2I+GoDpzJxPiQA0UiPy62UGnsTHU9Fs8Gw16nSH7r49nfpEzbEDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T00:35:51.521602Z","bundle_sha256":"a031c757dc290fb800f03e8ed93f0a690652848600c41dc572c8dd339aa98007"}}