{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:RRBCHYADKM6RI4MVEBBZP7K74P","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8ae95b7bd60cb5ac13ff2fc79737a74d01e173531717c601af502cb1baaf5350","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.IV","submitted_at":"2025-06-24T09:46:01Z","title_canon_sha256":"1b284b52a631860a72025fc4cbf99327b775335394b00c2e79de0c341a2331e2"},"schema_version":"1.0","source":{"id":"2506.19464","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.19464","created_at":"2026-07-05T11:26:33Z"},{"alias_kind":"arxiv_version","alias_value":"2506.19464v1","created_at":"2026-07-05T11:26:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.19464","created_at":"2026-07-05T11:26:33Z"},{"alias_kind":"pith_short_12","alias_value":"RRBCHYADKM6R","created_at":"2026-07-05T11:26:33Z"},{"alias_kind":"pith_short_16","alias_value":"RRBCHYADKM6RI4MV","created_at":"2026-07-05T11:26:33Z"},{"alias_kind":"pith_short_8","alias_value":"RRBCHYAD","created_at":"2026-07-05T11:26:33Z"}],"graph_snapshots":[{"event_id":"sha256:4296b15a53cd13d6170c286e892a9557020ec3bb6b8f02d952f8357e1e7e8ec3","target":"graph","created_at":"2026-07-05T11:26:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.19464/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The success of deep learning in medical imaging applications has led several companies to deploy proprietary models in diagnostic workflows, offering monetized services. Even though model weights are hidden to protect the intellectual property of the service provider, these models are exposed to model stealing (MS) attacks, where adversaries can clone the model's functionality by querying it with a proxy dataset and training a thief model on the acquired predictions. While extensively studied on general vision tasks, the susceptibility of medical imaging models to MS attacks remains inadequate","authors_text":"Ankita Raj, Chetan Arora, Deepankar Varma, Harsh Swaika","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.IV","submitted_at":"2025-06-24T09:46:01Z","title":"Assessing Risk of Stealing Proprietary Models for Medical Imaging Tasks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.19464","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ce65977443a29cc0f75fec81954b19f3b4c4b8ff3f1f91873f25c009cbced2b6","target":"record","created_at":"2026-07-05T11:26:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8ae95b7bd60cb5ac13ff2fc79737a74d01e173531717c601af502cb1baaf5350","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"eess.IV","submitted_at":"2025-06-24T09:46:01Z","title_canon_sha256":"1b284b52a631860a72025fc4cbf99327b775335394b00c2e79de0c341a2331e2"},"schema_version":"1.0","source":{"id":"2506.19464","kind":"arxiv","version":1}},"canonical_sha256":"8c4223e003533d147195204397fd5fe3ea21acfbd495073ae50051e79e6f14f1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"8c4223e003533d147195204397fd5fe3ea21acfbd495073ae50051e79e6f14f1","first_computed_at":"2026-07-05T11:26:33.869227Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:26:33.869227Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"l3GdY0IoSPRsiUf1Wd+bu2yGqX2vSs8Vru4nS4rNGTupVmhpif+llY7Zx//SzKAthFLV5/bQG0+GAgoQQZckDw==","signature_status":"signed_v1","signed_at":"2026-07-05T11:26:33.869816Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.19464","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ce65977443a29cc0f75fec81954b19f3b4c4b8ff3f1f91873f25c009cbced2b6","sha256:4296b15a53cd13d6170c286e892a9557020ec3bb6b8f02d952f8357e1e7e8ec3"],"state_sha256":"635647b10b3251f2bdf25ddb8a2f19a6a41741283192c9fe26b20e0c9aef8856"}