{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:TNT5DRHNI5V2X3643OL2SEMTET","short_pith_number":"pith:TNT5DRHN","canonical_record":{"source":{"id":"2003.09739","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.SP","submitted_at":"2020-03-21T19:58:14Z","cross_cats_sorted":[],"title_canon_sha256":"ce6f2792f3f1dc6e82857d9aed45b97f363edb60286bd2b8cac91dadcda848b5","abstract_canon_sha256":"6c0e56b1a7ea1a9530c0293ce22a40925f025d35b99c92497b26b1015bd05265"},"schema_version":"1.0"},"canonical_sha256":"9b67d1c4ed476babefdcdb97a9119324e3b780557f7cc2458f435c2495b06c50","source":{"kind":"arxiv","id":"2003.09739","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.09739","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"arxiv_version","alias_value":"2003.09739v1","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.09739","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_12","alias_value":"TNT5DRHNI5V2","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_16","alias_value":"TNT5DRHNI5V2X364","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_8","alias_value":"TNT5DRHN","created_at":"2026-07-05T00:49:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:TNT5DRHNI5V2X3643OL2SEMTET","target":"record","payload":{"canonical_record":{"source":{"id":"2003.09739","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.SP","submitted_at":"2020-03-21T19:58:14Z","cross_cats_sorted":[],"title_canon_sha256":"ce6f2792f3f1dc6e82857d9aed45b97f363edb60286bd2b8cac91dadcda848b5","abstract_canon_sha256":"6c0e56b1a7ea1a9530c0293ce22a40925f025d35b99c92497b26b1015bd05265"},"schema_version":"1.0"},"canonical_sha256":"9b67d1c4ed476babefdcdb97a9119324e3b780557f7cc2458f435c2495b06c50","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:49:46.523987Z","signature_b64":"gSyByLeIZVwz6GGKpwH9heDZadnQDZBguEfHYA8hMqST21xU34GszmPuXEtRQj3Dd3hEUmQGqDfWjxqjuqUnCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"9b67d1c4ed476babefdcdb97a9119324e3b780557f7cc2458f435c2495b06c50","last_reissued_at":"2026-07-05T00:49:46.523605Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:49:46.523605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2003.09739","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:49:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JZJk/nYirI8aZToN4qc2lrwBiFndJjFa3DzDFFNf0V22hetQ9QyOsXSU36Iki7DrGzxgh/J+ZcK/hSf1jYU9BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:58:10.287989Z"},"content_sha256":"63dc6c4ebee627e8d85710f28bb74b16abc6ac5368ba1e508ada0c7cba1d7bb9","schema_version":"1.0","event_id":"sha256:63dc6c4ebee627e8d85710f28bb74b16abc6ac5368ba1e508ada0c7cba1d7bb9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:TNT5DRHNI5V2X3643OL2SEMTET","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"New Security Challenges on Machine Learning Inference Engine: Chip Cloning and Model Reverse Engineering","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"eess.SP","authors_text":"Hongwu Jiang, Shanshi Huang, Shimeng Yu, Xiaochen Peng, Yandong Luo","submitted_at":"2020-03-21T19:58:14Z","abstract_excerpt":"Machine learning inference engine is of great interest to smart edge computing. Compute-in-memory (CIM) architecture has shown significant improvements in throughput and energy efficiency for hardware acceleration. Emerging non-volatile memory technologies offer great potential for instant on and off by dynamic power gating. Inference engine is typically pre-trained by the cloud and then being deployed to the filed. There are new attack models on chip cloning and neural network model reverse engineering. In this paper, we propose countermeasures to the weight cloning and input-output pair atta"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.09739","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2003.09739/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:49:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MZkBE+v70FKsu4d1lSdbBM/rWnZOl3PQEDt3909CtUVuE5ak1eUkPLQqEdQx9AM2fk1Vo7sfqmC/ybGs4KKpCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:58:10.288552Z"},"content_sha256":"04f97510f81034bc931b653f760f473211bbd41b21a46fc89daff90f18c8544c","schema_version":"1.0","event_id":"sha256:04f97510f81034bc931b653f760f473211bbd41b21a46fc89daff90f18c8544c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/TNT5DRHNI5V2X3643OL2SEMTET/bundle.json","state_url":"https://pith.science/pith/TNT5DRHNI5V2X3643OL2SEMTET/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/TNT5DRHNI5V2X3643OL2SEMTET/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T03:58:10Z","links":{"resolver":"https://pith.science/pith/TNT5DRHNI5V2X3643OL2SEMTET","bundle":"https://pith.science/pith/TNT5DRHNI5V2X3643OL2SEMTET/bundle.json","state":"https://pith.science/pith/TNT5DRHNI5V2X3643OL2SEMTET/state.json","well_known_bundle":"https://pith.science/.well-known/pith/TNT5DRHNI5V2X3643OL2SEMTET/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:TNT5DRHNI5V2X3643OL2SEMTET","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6c0e56b1a7ea1a9530c0293ce22a40925f025d35b99c92497b26b1015bd05265","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.SP","submitted_at":"2020-03-21T19:58:14Z","title_canon_sha256":"ce6f2792f3f1dc6e82857d9aed45b97f363edb60286bd2b8cac91dadcda848b5"},"schema_version":"1.0","source":{"id":"2003.09739","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2003.09739","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"arxiv_version","alias_value":"2003.09739v1","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2003.09739","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_12","alias_value":"TNT5DRHNI5V2","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_16","alias_value":"TNT5DRHNI5V2X364","created_at":"2026-07-05T00:49:46Z"},{"alias_kind":"pith_short_8","alias_value":"TNT5DRHN","created_at":"2026-07-05T00:49:46Z"}],"graph_snapshots":[{"event_id":"sha256:04f97510f81034bc931b653f760f473211bbd41b21a46fc89daff90f18c8544c","target":"graph","created_at":"2026-07-05T00:49:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2003.09739/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning inference engine is of great interest to smart edge computing. Compute-in-memory (CIM) architecture has shown significant improvements in throughput and energy efficiency for hardware acceleration. Emerging non-volatile memory technologies offer great potential for instant on and off by dynamic power gating. Inference engine is typically pre-trained by the cloud and then being deployed to the filed. There are new attack models on chip cloning and neural network model reverse engineering. In this paper, we propose countermeasures to the weight cloning and input-output pair atta","authors_text":"Hongwu Jiang, Shanshi Huang, Shimeng Yu, Xiaochen Peng, Yandong Luo","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.SP","submitted_at":"2020-03-21T19:58:14Z","title":"New Security Challenges on Machine Learning Inference Engine: Chip Cloning and Model Reverse Engineering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2003.09739","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:63dc6c4ebee627e8d85710f28bb74b16abc6ac5368ba1e508ada0c7cba1d7bb9","target":"record","created_at":"2026-07-05T00:49:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6c0e56b1a7ea1a9530c0293ce22a40925f025d35b99c92497b26b1015bd05265","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"eess.SP","submitted_at":"2020-03-21T19:58:14Z","title_canon_sha256":"ce6f2792f3f1dc6e82857d9aed45b97f363edb60286bd2b8cac91dadcda848b5"},"schema_version":"1.0","source":{"id":"2003.09739","kind":"arxiv","version":1}},"canonical_sha256":"9b67d1c4ed476babefdcdb97a9119324e3b780557f7cc2458f435c2495b06c50","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"9b67d1c4ed476babefdcdb97a9119324e3b780557f7cc2458f435c2495b06c50","first_computed_at":"2026-07-05T00:49:46.523605Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:49:46.523605Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gSyByLeIZVwz6GGKpwH9heDZadnQDZBguEfHYA8hMqST21xU34GszmPuXEtRQj3Dd3hEUmQGqDfWjxqjuqUnCw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:49:46.523987Z","signed_message":"canonical_sha256_bytes"},"source_id":"2003.09739","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:63dc6c4ebee627e8d85710f28bb74b16abc6ac5368ba1e508ada0c7cba1d7bb9","sha256:04f97510f81034bc931b653f760f473211bbd41b21a46fc89daff90f18c8544c"],"state_sha256":"81d68d4e574282ea44cf0b6f71536f10d320509626a5aae2cd9a8704fc4dc050"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"yJGM0jemWl9ViFkGqTGNPPws8PSSz9viWJiXrQ5OpRlBlld6smC9498i2Dp5TXvoROlZtZ1g2Jd5uI+ivPh1Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T03:58:10.293575Z","bundle_sha256":"f700776c6715245cfaa64961ddfb8e2696261711166965954c2eaade95725163"}}