{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:U4CJPOO76FGB7GDMOPNC4IGIMT","short_pith_number":"pith:U4CJPOO7","canonical_record":{"source":{"id":"2107.09789","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-20T22:36:39Z","cross_cats_sorted":[],"title_canon_sha256":"649dd55b0a2a06062e33393d8b86dcad1a394bc3c9312f52519ccedf9e72be30","abstract_canon_sha256":"ecfd46ed07e9ecaa8e88865939f5c047577e98a11f3b9a8c8f1caf9487a0f265"},"schema_version":"1.0"},"canonical_sha256":"a70497b9dff14c1f986c73da2e20c864fb3b5a2e511ed5f9988d3fb029303eac","source":{"kind":"arxiv","id":"2107.09789","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09789","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09789v1","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09789","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_12","alias_value":"U4CJPOO76FGB","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_16","alias_value":"U4CJPOO76FGB7GDM","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_8","alias_value":"U4CJPOO7","created_at":"2026-07-05T04:03:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:U4CJPOO76FGB7GDMOPNC4IGIMT","target":"record","payload":{"canonical_record":{"source":{"id":"2107.09789","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-20T22:36:39Z","cross_cats_sorted":[],"title_canon_sha256":"649dd55b0a2a06062e33393d8b86dcad1a394bc3c9312f52519ccedf9e72be30","abstract_canon_sha256":"ecfd46ed07e9ecaa8e88865939f5c047577e98a11f3b9a8c8f1caf9487a0f265"},"schema_version":"1.0"},"canonical_sha256":"a70497b9dff14c1f986c73da2e20c864fb3b5a2e511ed5f9988d3fb029303eac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:03:12.216991Z","signature_b64":"4BUxUFjfS4NbaTtcXdwtHOVNVFzl7ACOjrbpYlvmLarWh8OqzBQ4ev1b8RZANq4OqHFD95KTXdMyVcbcmk5GBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a70497b9dff14c1f986c73da2e20c864fb3b5a2e511ed5f9988d3fb029303eac","last_reissued_at":"2026-07-05T04:03:12.216441Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:03:12.216441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2107.09789","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:03:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Uh5HSB/dNAmEt1W9sTb5s4Ts2MEaXiZkHgTn5QC63/0XGWFcm30DV9T0/lkYEpMmqQYJejOP2a69TEIzPHMlBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:09:25.371074Z"},"content_sha256":"00d655a3af8b15581215b991be355e0146d7a39eb83210a4713bb3b8a1f162b5","schema_version":"1.0","event_id":"sha256:00d655a3af8b15581215b991be355e0146d7a39eb83210a4713bb3b8a1f162b5"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:U4CJPOO76FGB7GDMOPNC4IGIMT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NeurObfuscator: A Full-stack Obfuscation Tool to Mitigate Neural Architecture Stealing","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Adnan Siraj Rakin, Chaitali Chakrabarti, Deliang Fan, Jingtao Li, Zhezhi He","submitted_at":"2021-07-20T22:36:39Z","abstract_excerpt":"Neural network stealing attacks have posed grave threats to neural network model deployment. Such attacks can be launched by extracting neural architecture information, such as layer sequence and dimension parameters, through leaky side-channels. To mitigate such attacks, we propose NeurObfuscator, a full-stack obfuscation tool to obfuscate the neural network architecture while preserving its functionality with very limited performance overhead. At the heart of this tool is a set of obfuscating knobs, including layer branching, layer widening, selective fusion and schedule pruning, that increa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09789","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2107.09789/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:03:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ucwwkuu25NTb/nIWuOtHawySnipToC3LhV1mrpPhY2rBi7+C7WTwbshW2NFp55SWc4ORCdUPARV5xV9bATjsDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:09:25.371907Z"},"content_sha256":"7c751060feb37c34c550aa4c948464071e119f8895ad13c2a44d88533b7fc4ec","schema_version":"1.0","event_id":"sha256:7c751060feb37c34c550aa4c948464071e119f8895ad13c2a44d88533b7fc4ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/bundle.json","state_url":"https://pith.science/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T17:09:25Z","links":{"resolver":"https://pith.science/pith/U4CJPOO76FGB7GDMOPNC4IGIMT","bundle":"https://pith.science/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/bundle.json","state":"https://pith.science/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/U4CJPOO76FGB7GDMOPNC4IGIMT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:U4CJPOO76FGB7GDMOPNC4IGIMT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ecfd46ed07e9ecaa8e88865939f5c047577e98a11f3b9a8c8f1caf9487a0f265","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-20T22:36:39Z","title_canon_sha256":"649dd55b0a2a06062e33393d8b86dcad1a394bc3c9312f52519ccedf9e72be30"},"schema_version":"1.0","source":{"id":"2107.09789","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2107.09789","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"arxiv_version","alias_value":"2107.09789v1","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2107.09789","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_12","alias_value":"U4CJPOO76FGB","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_16","alias_value":"U4CJPOO76FGB7GDM","created_at":"2026-07-05T04:03:12Z"},{"alias_kind":"pith_short_8","alias_value":"U4CJPOO7","created_at":"2026-07-05T04:03:12Z"}],"graph_snapshots":[{"event_id":"sha256:7c751060feb37c34c550aa4c948464071e119f8895ad13c2a44d88533b7fc4ec","target":"graph","created_at":"2026-07-05T04:03:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2107.09789/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural network stealing attacks have posed grave threats to neural network model deployment. Such attacks can be launched by extracting neural architecture information, such as layer sequence and dimension parameters, through leaky side-channels. To mitigate such attacks, we propose NeurObfuscator, a full-stack obfuscation tool to obfuscate the neural network architecture while preserving its functionality with very limited performance overhead. At the heart of this tool is a set of obfuscating knobs, including layer branching, layer widening, selective fusion and schedule pruning, that increa","authors_text":"Adnan Siraj Rakin, Chaitali Chakrabarti, Deliang Fan, Jingtao Li, Zhezhi He","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-20T22:36:39Z","title":"NeurObfuscator: A Full-stack Obfuscation Tool to Mitigate Neural Architecture Stealing"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2107.09789","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:00d655a3af8b15581215b991be355e0146d7a39eb83210a4713bb3b8a1f162b5","target":"record","created_at":"2026-07-05T04:03:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ecfd46ed07e9ecaa8e88865939f5c047577e98a11f3b9a8c8f1caf9487a0f265","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2021-07-20T22:36:39Z","title_canon_sha256":"649dd55b0a2a06062e33393d8b86dcad1a394bc3c9312f52519ccedf9e72be30"},"schema_version":"1.0","source":{"id":"2107.09789","kind":"arxiv","version":1}},"canonical_sha256":"a70497b9dff14c1f986c73da2e20c864fb3b5a2e511ed5f9988d3fb029303eac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a70497b9dff14c1f986c73da2e20c864fb3b5a2e511ed5f9988d3fb029303eac","first_computed_at":"2026-07-05T04:03:12.216441Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:03:12.216441Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"4BUxUFjfS4NbaTtcXdwtHOVNVFzl7ACOjrbpYlvmLarWh8OqzBQ4ev1b8RZANq4OqHFD95KTXdMyVcbcmk5GBA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:03:12.216991Z","signed_message":"canonical_sha256_bytes"},"source_id":"2107.09789","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:00d655a3af8b15581215b991be355e0146d7a39eb83210a4713bb3b8a1f162b5","sha256:7c751060feb37c34c550aa4c948464071e119f8895ad13c2a44d88533b7fc4ec"],"state_sha256":"25fea811185eda6213d70313e1a37f5ccf1f5f936b62e0761305646716308f86"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"U4AP7DjVb7/NxO6i/Zb0e7WCNpvINaUi5UjguyfIbCa72FnaGg8CseZHr/RbnDJiqOYoyqfClfGNmW1I1FYvBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T17:09:25.385399Z","bundle_sha256":"45729ed262062723bb367803435c428274ce26c8c086dfc8e991686a0225b291"}}