{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:RKSENSL356S7BTAHLQCQHWTSVD","short_pith_number":"pith:RKSENSL3","canonical_record":{"source":{"id":"2403.03593","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:27:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4683dc06f125d6634ed6ecdbc43c9aa78de67282966b41a3a164c3860d7ef76d","abstract_canon_sha256":"83d29b01649121d4014d5c7d1e675b3c3564c362b381d6f5aef08ff6ff9eb5a6"},"schema_version":"1.0"},"canonical_sha256":"8aa446c97befa5f0cc075c0503da72a8dfe140a86c4075c8c03e9595428d26c6","source":{"kind":"arxiv","id":"2403.03593","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03593","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03593v3","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03593","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_12","alias_value":"RKSENSL356S7","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_16","alias_value":"RKSENSL356S7BTAH","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_8","alias_value":"RKSENSL3","created_at":"2026-07-05T11:31:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:RKSENSL356S7BTAHLQCQHWTSVD","target":"record","payload":{"canonical_record":{"source":{"id":"2403.03593","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:27:08Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"4683dc06f125d6634ed6ecdbc43c9aa78de67282966b41a3a164c3860d7ef76d","abstract_canon_sha256":"83d29b01649121d4014d5c7d1e675b3c3564c362b381d6f5aef08ff6ff9eb5a6"},"schema_version":"1.0"},"canonical_sha256":"8aa446c97befa5f0cc075c0503da72a8dfe140a86c4075c8c03e9595428d26c6","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:31:38.145977Z","signature_b64":"Xa6K5lFA0hlqf0312SEGpSf2bp7OF+B8jstMGLaO5LofI8OaVUpCN7psTwwapnYqKSj3hkK2R/LzwW5t7uiKBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"8aa446c97befa5f0cc075c0503da72a8dfe140a86c4075c8c03e9595428d26c6","last_reissued_at":"2026-07-05T11:31:38.145497Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:31:38.145497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.03593","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DzAgtUJTfoHt9S8jRD7Dtk/ehDoHAME/Tk9AkCiilM8eRMAGL9rrgtZiEDshRFRSXtbfGYrihfmROURIgg5KAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:38:28.644590Z"},"content_sha256":"f9c520982704784914a34cc34997304a1208ad2520d8a2d1ca1aa14296ee2113","schema_version":"1.0","event_id":"sha256:f9c520982704784914a34cc34997304a1208ad2520d8a2d1ca1aa14296ee2113"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:RKSENSL356S7BTAHLQCQHWTSVD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Briland Hitaj, Dorjan Hitaj, Fabio De Gaspari, Fernando Perez-Cruz, Giulio Pagnotta, Luigi V. Mancini, Sediola Ruko","submitted_at":"2024-03-06T10:27:08Z","abstract_excerpt":"Training high-quality deep learning models is a challenging task due to computational and technical requirements. A growing number of individuals, institutions, and companies increasingly rely on pre-trained, third-party models made available in public repositories. These models are often used directly or integrated in product pipelines with no particular precautions, since they are effectively just data in tensor form and considered safe. In this paper, we raise awareness of a new machine learning supply chain threat targeting neural networks. We introduce MaleficNet 2.0, a novel technique to"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03593","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.03593/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:31:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CV8r6crNB94DuK65CZ2hVsCGCF2yMdHbdYMttKot8KrmDfRFiUZkqQSnDbIXkgJnrt5i3FNdG0ULTvFW+03zAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T09:38:28.645102Z"},"content_sha256":"55b6b6a95df0cdc692fe0184d28cbe0ec6509d88ede52bc0e72b4e6c2296c39e","schema_version":"1.0","event_id":"sha256:55b6b6a95df0cdc692fe0184d28cbe0ec6509d88ede52bc0e72b4e6c2296c39e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/RKSENSL356S7BTAHLQCQHWTSVD/bundle.json","state_url":"https://pith.science/pith/RKSENSL356S7BTAHLQCQHWTSVD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/RKSENSL356S7BTAHLQCQHWTSVD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T09:38:28Z","links":{"resolver":"https://pith.science/pith/RKSENSL356S7BTAHLQCQHWTSVD","bundle":"https://pith.science/pith/RKSENSL356S7BTAHLQCQHWTSVD/bundle.json","state":"https://pith.science/pith/RKSENSL356S7BTAHLQCQHWTSVD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/RKSENSL356S7BTAHLQCQHWTSVD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:RKSENSL356S7BTAHLQCQHWTSVD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83d29b01649121d4014d5c7d1e675b3c3564c362b381d6f5aef08ff6ff9eb5a6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:27:08Z","title_canon_sha256":"4683dc06f125d6634ed6ecdbc43c9aa78de67282966b41a3a164c3860d7ef76d"},"schema_version":"1.0","source":{"id":"2403.03593","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03593","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03593v3","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03593","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_12","alias_value":"RKSENSL356S7","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_16","alias_value":"RKSENSL356S7BTAH","created_at":"2026-07-05T11:31:38Z"},{"alias_kind":"pith_short_8","alias_value":"RKSENSL3","created_at":"2026-07-05T11:31:38Z"}],"graph_snapshots":[{"event_id":"sha256:55b6b6a95df0cdc692fe0184d28cbe0ec6509d88ede52bc0e72b4e6c2296c39e","target":"graph","created_at":"2026-07-05T11:31:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.03593/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Training high-quality deep learning models is a challenging task due to computational and technical requirements. A growing number of individuals, institutions, and companies increasingly rely on pre-trained, third-party models made available in public repositories. These models are often used directly or integrated in product pipelines with no particular precautions, since they are effectively just data in tensor form and considered safe. In this paper, we raise awareness of a new machine learning supply chain threat targeting neural networks. We introduce MaleficNet 2.0, a novel technique to","authors_text":"Briland Hitaj, Dorjan Hitaj, Fabio De Gaspari, Fernando Perez-Cruz, Giulio Pagnotta, Luigi V. Mancini, Sediola Ruko","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:27:08Z","title":"Do You Trust Your Model? Emerging Malware Threats in the Deep Learning Ecosystem"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03593","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f9c520982704784914a34cc34997304a1208ad2520d8a2d1ca1aa14296ee2113","target":"record","created_at":"2026-07-05T11:31:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83d29b01649121d4014d5c7d1e675b3c3564c362b381d6f5aef08ff6ff9eb5a6","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:27:08Z","title_canon_sha256":"4683dc06f125d6634ed6ecdbc43c9aa78de67282966b41a3a164c3860d7ef76d"},"schema_version":"1.0","source":{"id":"2403.03593","kind":"arxiv","version":3}},"canonical_sha256":"8aa446c97befa5f0cc075c0503da72a8dfe140a86c4075c8c03e9595428d26c6","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8aa446c97befa5f0cc075c0503da72a8dfe140a86c4075c8c03e9595428d26c6","first_computed_at":"2026-07-05T11:31:38.145497Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:31:38.145497Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Xa6K5lFA0hlqf0312SEGpSf2bp7OF+B8jstMGLaO5LofI8OaVUpCN7psTwwapnYqKSj3hkK2R/LzwW5t7uiKBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T11:31:38.145977Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.03593","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f9c520982704784914a34cc34997304a1208ad2520d8a2d1ca1aa14296ee2113","sha256:55b6b6a95df0cdc692fe0184d28cbe0ec6509d88ede52bc0e72b4e6c2296c39e"],"state_sha256":"de0c50b386f4fcc600245dcac7b53fdb2e7959a2d99fc14ca9370086d5524b2c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JPTG3f5kN+4CYUVg3BJ9G2ondXXdF2sIG2Wtgb4UzNJya25mh/RgQhhn79+XB8Pyq6X8PbVsXakdWF2bEPOJAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T09:38:28.649147Z","bundle_sha256":"8a7635f127e903f45ece560805f44590cb94c40460c478b7c6a0b5cf356087ad"}}