{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:S3BVSHGHHQVSVL5A43Q4R74BPY","short_pith_number":"pith:S3BVSHGH","schema_version":"1.0","canonical_sha256":"96c3591cc73c2b2aafa0e6e1c8ff817e1e87bf6dba92a9bb9cfe0a72fa37df26","source":{"kind":"arxiv","id":"2204.00292","version":1},"attestation_state":"computed","paper":{"title":"Preventing Distillation-based Attacks on Neural Network IP","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.AR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Mahdieh Grailoo, Mairo Leier, Samuel Pagliarini, Zain Ul Abideen","submitted_at":"2022-04-01T08:53:57Z","abstract_excerpt":"Neural networks (NNs) are already deployed in hardware today, becoming valuable intellectual property (IP) as many hours are invested in their training and optimization. Therefore, attackers may be interested in copying, reverse engineering, or even modifying this IP. The current practices in hardware obfuscation, including the widely studied logic locking technique, are insufficient to protect the actual IP of a well-trained NN: its weights. Simply hiding the weights behind a key-based scheme is inefficient (resource-hungry) and inadequate (attackers can exploit knowledge distillation). This "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2204.00292","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2022-04-01T08:53:57Z","cross_cats_sorted":["cs.AR","cs.LG"],"title_canon_sha256":"615dcc8c5a4b2aa80f017d18101788794501c253498b52dcbebc914a79fecf5c","abstract_canon_sha256":"5b678c9da174e4c941d36a07ebe62dbdadf0dd701b0f037a8feb53bcda4a305f"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:10:45.410495Z","signature_b64":"vlc7cqjbomNF6qOimzLyPDS4mQAf+6yWVaYVt5a/FK6VeYF7qjHkkn3puHccpKsggRUDYNhcKxwdUagw/pNKBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"96c3591cc73c2b2aafa0e6e1c8ff817e1e87bf6dba92a9bb9cfe0a72fa37df26","last_reissued_at":"2026-07-05T04:10:45.410098Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:10:45.410098Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Preventing Distillation-based Attacks on Neural Network IP","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.AR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Mahdieh Grailoo, Mairo Leier, Samuel Pagliarini, Zain Ul Abideen","submitted_at":"2022-04-01T08:53:57Z","abstract_excerpt":"Neural networks (NNs) are already deployed in hardware today, becoming valuable intellectual property (IP) as many hours are invested in their training and optimization. Therefore, attackers may be interested in copying, reverse engineering, or even modifying this IP. The current practices in hardware obfuscation, including the widely studied logic locking technique, are insufficient to protect the actual IP of a well-trained NN: its weights. Simply hiding the weights behind a key-based scheme is inefficient (resource-hungry) and inadequate (attackers can exploit knowledge distillation). This "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2204.00292","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2204.00292/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2204.00292","created_at":"2026-07-05T04:10:45.410153+00:00"},{"alias_kind":"arxiv_version","alias_value":"2204.00292v1","created_at":"2026-07-05T04:10:45.410153+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2204.00292","created_at":"2026-07-05T04:10:45.410153+00:00"},{"alias_kind":"pith_short_12","alias_value":"S3BVSHGHHQVS","created_at":"2026-07-05T04:10:45.410153+00:00"},{"alias_kind":"pith_short_16","alias_value":"S3BVSHGHHQVSVL5A","created_at":"2026-07-05T04:10:45.410153+00:00"},{"alias_kind":"pith_short_8","alias_value":"S3BVSHGH","created_at":"2026-07-05T04:10:45.410153+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY","json":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY.json","graph_json":"https://pith.science/api/pith-number/S3BVSHGHHQVSVL5A43Q4R74BPY/graph.json","events_json":"https://pith.science/api/pith-number/S3BVSHGHHQVSVL5A43Q4R74BPY/events.json","paper":"https://pith.science/paper/S3BVSHGH"},"agent_actions":{"view_html":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY","download_json":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY.json","view_paper":"https://pith.science/paper/S3BVSHGH","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2204.00292&json=true","fetch_graph":"https://pith.science/api/pith-number/S3BVSHGHHQVSVL5A43Q4R74BPY/graph.json","fetch_events":"https://pith.science/api/pith-number/S3BVSHGHHQVSVL5A43Q4R74BPY/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY/action/timestamp_anchor","attest_storage":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY/action/storage_attestation","attest_author":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY/action/author_attestation","sign_citation":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY/action/citation_signature","submit_replication":"https://pith.science/pith/S3BVSHGHHQVSVL5A43Q4R74BPY/action/replication_record"}},"created_at":"2026-07-05T04:10:45.410153+00:00","updated_at":"2026-07-05T04:10:45.410153+00:00"}