{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:T5IA2TGOHKDLUBKMUJYMPLYSDR","short_pith_number":"pith:T5IA2TGO","canonical_record":{"source":{"id":"1809.01829","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-06T05:29:46Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"e20661c1db6d99ae6ed39efea7724d2dc7c633a0d6b9a444501897f589bd3e51","abstract_canon_sha256":"df4e982920c79f7b8feb14b962deb5e6f8fd5453da021a3ef61d3472570b910e"},"schema_version":"1.0"},"canonical_sha256":"9f500d4cce3a86ba054ca270c7af121c6a694afc8854bf19fd6adbfac8bb6ece","source":{"kind":"arxiv","id":"1809.01829","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.01829","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"arxiv_version","alias_value":"1809.01829v4","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.01829","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_12","alias_value":"T5IA2TGOHKDL","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_16","alias_value":"T5IA2TGOHKDLUBKM","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_8","alias_value":"T5IA2TGO","created_at":"2026-07-04T23:56:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:T5IA2TGOHKDLUBKMUJYMPLYSDR","target":"record","payload":{"canonical_record":{"source":{"id":"1809.01829","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-06T05:29:46Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"e20661c1db6d99ae6ed39efea7724d2dc7c633a0d6b9a444501897f589bd3e51","abstract_canon_sha256":"df4e982920c79f7b8feb14b962deb5e6f8fd5453da021a3ef61d3472570b910e"},"schema_version":"1.0"},"canonical_sha256":"9f500d4cce3a86ba054ca270c7af121c6a694afc8854bf19fd6adbfac8bb6ece","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:56:47.090963Z","signature_b64":"k5JhEkl1UxmW+Kaz8/V0S+dFYEdWmmQBkReaFvcwmIiHIxcQCSpc8PS78BPnLc1TSkWz/ropgHTbstwYNJFkAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9f500d4cce3a86ba054ca270c7af121c6a694afc8854bf19fd6adbfac8bb6ece","last_reissued_at":"2026-07-04T23:56:47.090304Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:56:47.090304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1809.01829","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:56:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"deOc602dB7R3gIUIOsKICK1WynFjTe9taBulwdBJz+KhWXh3q/OAX74j8NLIX7uQ1tDL0D4e7t8oyZtYvIulBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T13:42:40.153773Z"},"content_sha256":"38e9e27b6f2e462f4c9c54d849a93485610936bd8ea1aad1f11db71a6a525d63","schema_version":"1.0","event_id":"sha256:38e9e27b6f2e462f4c9c54d849a93485610936bd8ea1aad1f11db71a6a525d63"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:T5IA2TGOHKDLUBKMUJYMPLYSDR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Reprogramming of Text Classification Neural Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Farinaz Koushanfar, Paarth Neekhara, Shehzeen Hussain, Shlomo Dubnov","submitted_at":"2018-09-06T05:29:46Z","abstract_excerpt":"Adversarial Reprogramming has demonstrated success in utilizing pre-trained neural network classifiers for alternative classification tasks without modification to the original network. An adversary in such an attack scenario trains an additive contribution to the inputs to repurpose the neural network for the new classification task. While this reprogramming approach works for neural networks with a continuous input space such as that of images, it is not directly applicable to neural networks trained for tasks such as text classification, where the input space is discrete. Repurposing such c"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.01829","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1809.01829/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:56:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XnSphkREvl+QggnqjSp/GV5Zanl/U4gugBtrHYwCUkp9CHf23MZ2URc7A42kyRdhDHB6vGEDLAo0EkkldL1tBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-21T13:42:40.154152Z"},"content_sha256":"d04580dddb7c5df28d1eec6f588deca846de847dbc28f3c5542e0651d9eb7829","schema_version":"1.0","event_id":"sha256:d04580dddb7c5df28d1eec6f588deca846de847dbc28f3c5542e0651d9eb7829"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/bundle.json","state_url":"https://pith.science/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-21T13:42:40Z","links":{"resolver":"https://pith.science/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR","bundle":"https://pith.science/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/bundle.json","state":"https://pith.science/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/T5IA2TGOHKDLUBKMUJYMPLYSDR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:T5IA2TGOHKDLUBKMUJYMPLYSDR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"df4e982920c79f7b8feb14b962deb5e6f8fd5453da021a3ef61d3472570b910e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-06T05:29:46Z","title_canon_sha256":"e20661c1db6d99ae6ed39efea7724d2dc7c633a0d6b9a444501897f589bd3e51"},"schema_version":"1.0","source":{"id":"1809.01829","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.01829","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"arxiv_version","alias_value":"1809.01829v4","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.01829","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_12","alias_value":"T5IA2TGOHKDL","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_16","alias_value":"T5IA2TGOHKDLUBKM","created_at":"2026-07-04T23:56:47Z"},{"alias_kind":"pith_short_8","alias_value":"T5IA2TGO","created_at":"2026-07-04T23:56:47Z"}],"graph_snapshots":[{"event_id":"sha256:d04580dddb7c5df28d1eec6f588deca846de847dbc28f3c5542e0651d9eb7829","target":"graph","created_at":"2026-07-04T23:56:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1809.01829/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial Reprogramming has demonstrated success in utilizing pre-trained neural network classifiers for alternative classification tasks without modification to the original network. An adversary in such an attack scenario trains an additive contribution to the inputs to repurpose the neural network for the new classification task. While this reprogramming approach works for neural networks with a continuous input space such as that of images, it is not directly applicable to neural networks trained for tasks such as text classification, where the input space is discrete. Repurposing such c","authors_text":"Farinaz Koushanfar, Paarth Neekhara, Shehzeen Hussain, Shlomo Dubnov","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-06T05:29:46Z","title":"Adversarial Reprogramming of Text Classification Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.01829","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:38e9e27b6f2e462f4c9c54d849a93485610936bd8ea1aad1f11db71a6a525d63","target":"record","created_at":"2026-07-04T23:56:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"df4e982920c79f7b8feb14b962deb5e6f8fd5453da021a3ef61d3472570b910e","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-06T05:29:46Z","title_canon_sha256":"e20661c1db6d99ae6ed39efea7724d2dc7c633a0d6b9a444501897f589bd3e51"},"schema_version":"1.0","source":{"id":"1809.01829","kind":"arxiv","version":4}},"canonical_sha256":"9f500d4cce3a86ba054ca270c7af121c6a694afc8854bf19fd6adbfac8bb6ece","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9f500d4cce3a86ba054ca270c7af121c6a694afc8854bf19fd6adbfac8bb6ece","first_computed_at":"2026-07-04T23:56:47.090304Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:56:47.090304Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"k5JhEkl1UxmW+Kaz8/V0S+dFYEdWmmQBkReaFvcwmIiHIxcQCSpc8PS78BPnLc1TSkWz/ropgHTbstwYNJFkAA==","signature_status":"signed_v1","signed_at":"2026-07-04T23:56:47.090963Z","signed_message":"canonical_sha256_bytes"},"source_id":"1809.01829","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:38e9e27b6f2e462f4c9c54d849a93485610936bd8ea1aad1f11db71a6a525d63","sha256:d04580dddb7c5df28d1eec6f588deca846de847dbc28f3c5542e0651d9eb7829"],"state_sha256":"c595e219cef3cdb79bd5a67ff27800ed8e51e12a921b01da6fe682103c67adc0"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YykttT6clLyFFGV1Dk2NUsS7ClnoHVMHa9HN+RmNxATpn4eD5mebZriOYIw1ho10mauN4mqmlrdzHOlETatEAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-21T13:42:40.156686Z","bundle_sha256":"a248ab0730671b6b4cfcb519c27cf62c7427e4b45931b9a682f131acccf7b147"}}