{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:SCPUGXL242L26ROTYANXMOHPVD","short_pith_number":"pith:SCPUGXL2","canonical_record":{"source":{"id":"2403.03590","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:24:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f082c0b1cd2e38316ec4927333b8472e7ff82742d73d9692119ec028d250ace8","abstract_canon_sha256":"aa6a711f44b3f65b850f5699a4f4b443bbff2c7f964699dc7cf7e480e0c1cf8c"},"schema_version":"1.0"},"canonical_sha256":"909f435d7ae697af45d3c01b7638efa8f33d761d459c1c46981a8df43af42638","source":{"kind":"arxiv","id":"2403.03590","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03590","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03590v1","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03590","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_12","alias_value":"SCPUGXL242L2","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_16","alias_value":"SCPUGXL242L26ROT","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_8","alias_value":"SCPUGXL2","created_at":"2026-07-05T07:52:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:SCPUGXL242L26ROTYANXMOHPVD","target":"record","payload":{"canonical_record":{"source":{"id":"2403.03590","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:24:47Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f082c0b1cd2e38316ec4927333b8472e7ff82742d73d9692119ec028d250ace8","abstract_canon_sha256":"aa6a711f44b3f65b850f5699a4f4b443bbff2c7f964699dc7cf7e480e0c1cf8c"},"schema_version":"1.0"},"canonical_sha256":"909f435d7ae697af45d3c01b7638efa8f33d761d459c1c46981a8df43af42638","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:52:50.514850Z","signature_b64":"aivZSzIJcdKPokOG8KtAEeAI/EqVkDLzIgPmCXdWvMMk9PDdU0QnNlomjXQCvc+KG+qWj0Bcv6lVHh/8iVCvCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"909f435d7ae697af45d3c01b7638efa8f33d761d459c1c46981a8df43af42638","last_reissued_at":"2026-07-05T07:52:50.514482Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:52:50.514482Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.03590","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:52:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4Qp8Ifylcx2e1BIAjPvcbn3SSh0ek0C6Dxn0ijnrQ7k/Gawhb/21VNqNUeEFHQYDUGZUkb6AYxzB6FLd3eGUCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:23:19.433158Z"},"content_sha256":"7bc11fb7b0b7761635e36897c83a2da403c9e3543019cee7a6f1bef7d80922f9","schema_version":"1.0","event_id":"sha256:7bc11fb7b0b7761635e36897c83a2da403c9e3543019cee7a6f1bef7d80922f9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:SCPUGXL242L26ROTYANXMOHPVD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Ahmad-Reza Sadeghi, Alessandro Pegoraro, Carlotta Segna, Kavita Kumari","submitted_at":"2024-03-06T10:24:47Z","abstract_excerpt":"Deep Learning (DL) models have become crucial in digital transformation, thus raising concerns about their intellectual property rights. Different watermarking techniques have been developed to protect Deep Neural Networks (DNNs) from IP infringement, creating a competitive field for DNN watermarking and removal methods. The predominant watermarking schemes use white-box techniques, which involve modifying weights by adding a unique signature to specific DNN layers. On the other hand, existing attacks on white-box watermarking usually require knowledge of the specific deployed watermarking sch"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03590","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.03590/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:52:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"evwE7aTgCcLgW1tAopSGGb5/EdY1PQcLYbANYCpuYgxGzt2EQirDwRViHle9gk6DPekwXZpoxTZ81lrgS9N3Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:23:19.434010Z"},"content_sha256":"51dd0d0d2131b80e05dc81c893a9b6dabcf53c6e5f308f5ee7c6790c05689852","schema_version":"1.0","event_id":"sha256:51dd0d0d2131b80e05dc81c893a9b6dabcf53c6e5f308f5ee7c6790c05689852"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/SCPUGXL242L26ROTYANXMOHPVD/bundle.json","state_url":"https://pith.science/pith/SCPUGXL242L26ROTYANXMOHPVD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/SCPUGXL242L26ROTYANXMOHPVD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T09:23:19Z","links":{"resolver":"https://pith.science/pith/SCPUGXL242L26ROTYANXMOHPVD","bundle":"https://pith.science/pith/SCPUGXL242L26ROTYANXMOHPVD/bundle.json","state":"https://pith.science/pith/SCPUGXL242L26ROTYANXMOHPVD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/SCPUGXL242L26ROTYANXMOHPVD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:SCPUGXL242L26ROTYANXMOHPVD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"aa6a711f44b3f65b850f5699a4f4b443bbff2c7f964699dc7cf7e480e0c1cf8c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:24:47Z","title_canon_sha256":"f082c0b1cd2e38316ec4927333b8472e7ff82742d73d9692119ec028d250ace8"},"schema_version":"1.0","source":{"id":"2403.03590","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.03590","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"arxiv_version","alias_value":"2403.03590v1","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.03590","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_12","alias_value":"SCPUGXL242L2","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_16","alias_value":"SCPUGXL242L26ROT","created_at":"2026-07-05T07:52:50Z"},{"alias_kind":"pith_short_8","alias_value":"SCPUGXL2","created_at":"2026-07-05T07:52:50Z"}],"graph_snapshots":[{"event_id":"sha256:51dd0d0d2131b80e05dc81c893a9b6dabcf53c6e5f308f5ee7c6790c05689852","target":"graph","created_at":"2026-07-05T07:52:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.03590/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Learning (DL) models have become crucial in digital transformation, thus raising concerns about their intellectual property rights. Different watermarking techniques have been developed to protect Deep Neural Networks (DNNs) from IP infringement, creating a competitive field for DNN watermarking and removal methods. The predominant watermarking schemes use white-box techniques, which involve modifying weights by adding a unique signature to specific DNN layers. On the other hand, existing attacks on white-box watermarking usually require knowledge of the specific deployed watermarking sch","authors_text":"Ahmad-Reza Sadeghi, Alessandro Pegoraro, Carlotta Segna, Kavita Kumari","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:24:47Z","title":"DeepEclipse: How to Break White-Box DNN-Watermarking Schemes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.03590","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7bc11fb7b0b7761635e36897c83a2da403c9e3543019cee7a6f1bef7d80922f9","target":"record","created_at":"2026-07-05T07:52:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"aa6a711f44b3f65b850f5699a4f4b443bbff2c7f964699dc7cf7e480e0c1cf8c","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-03-06T10:24:47Z","title_canon_sha256":"f082c0b1cd2e38316ec4927333b8472e7ff82742d73d9692119ec028d250ace8"},"schema_version":"1.0","source":{"id":"2403.03590","kind":"arxiv","version":1}},"canonical_sha256":"909f435d7ae697af45d3c01b7638efa8f33d761d459c1c46981a8df43af42638","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"909f435d7ae697af45d3c01b7638efa8f33d761d459c1c46981a8df43af42638","first_computed_at":"2026-07-05T07:52:50.514482Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:52:50.514482Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"aivZSzIJcdKPokOG8KtAEeAI/EqVkDLzIgPmCXdWvMMk9PDdU0QnNlomjXQCvc+KG+qWj0Bcv6lVHh/8iVCvCw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:52:50.514850Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.03590","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7bc11fb7b0b7761635e36897c83a2da403c9e3543019cee7a6f1bef7d80922f9","sha256:51dd0d0d2131b80e05dc81c893a9b6dabcf53c6e5f308f5ee7c6790c05689852"],"state_sha256":"ef7e7d7e7430e0421e5e0cead513d5b4c8a33306fc3a93cc6891f7332ca6284c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"avXxeBhnnkN2JWAWRt7CicTLEPBNBd6J6Ro8lSjeZO5Jh2D7LJghSE2OZ/88rACKAHacfYmGRqFM9WpgJMYFCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T09:23:19.441252Z","bundle_sha256":"b48134eb4dcd2593068f0e2ff1f20845ff8a1eb0e073d3f49fe4672d6294d62b"}}