{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UDANP6S5QPULMGKVLHNRBCJAFA","short_pith_number":"pith:UDANP6S5","canonical_record":{"source":{"id":"2401.15239","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-26T23:12:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"fe109b50e1307aba7ce8d8499cd986bea0b92b662c9eac2ca5b26b8d973c52a6","abstract_canon_sha256":"86353c97c7cc1462abfea47fdb89f905eb22391820d4765efd8f6250af2dd50f"},"schema_version":"1.0"},"canonical_sha256":"a0c0d7fa5d83e8b6195559db108920281bcda4480f893c2d99da8f0d76052266","source":{"kind":"arxiv","id":"2401.15239","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.15239","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"arxiv_version","alias_value":"2401.15239v1","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.15239","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_12","alias_value":"UDANP6S5QPUL","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_16","alias_value":"UDANP6S5QPULMGKV","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_8","alias_value":"UDANP6S5","created_at":"2026-07-05T07:38:13Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UDANP6S5QPULMGKVLHNRBCJAFA","target":"record","payload":{"canonical_record":{"source":{"id":"2401.15239","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-26T23:12:53Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"fe109b50e1307aba7ce8d8499cd986bea0b92b662c9eac2ca5b26b8d973c52a6","abstract_canon_sha256":"86353c97c7cc1462abfea47fdb89f905eb22391820d4765efd8f6250af2dd50f"},"schema_version":"1.0"},"canonical_sha256":"a0c0d7fa5d83e8b6195559db108920281bcda4480f893c2d99da8f0d76052266","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:38:13.511281Z","signature_b64":"jwI+7Jg0YZhBubyE7THnK2x/eWnYA4lait1eZUan8GVdLv4ow1YDEC6EY/JSEgAzbERsd/DAJ2znYbJQGqqNCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a0c0d7fa5d83e8b6195559db108920281bcda4480f893c2d99da8f0d76052266","last_reissued_at":"2026-07-05T07:38:13.510935Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:38:13.510935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2401.15239","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"l6/qmKfc66/+0T2NKLPHR/kC8YfBkFoeONh83bHEhmejYQ4onZ7mHOIw0ASAAox1gmMJ/7ixvx2qcbcgbLZnCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:06:29.718954Z"},"content_sha256":"aeddaad4d39e1c506ed238c1c68634771aeef15a511923e3c8d82b0dde80befb","schema_version":"1.0","event_id":"sha256:aeddaad4d39e1c506ed238c1c68634771aeef15a511923e3c8d82b0dde80befb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UDANP6S5QPULMGKVLHNRBCJAFA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MEA-Defender: A Robust Watermark against Model Extraction Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Hualong Ma, Jiachen Zhou, Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu, Shengzhi Zhang, Yingjun Zhang","submitted_at":"2024-01-26T23:12:53Z","abstract_excerpt":"Recently, numerous highly-valuable Deep Neural Networks (DNNs) have been trained using deep learning algorithms. To protect the Intellectual Property (IP) of the original owners over such DNN models, backdoor-based watermarks have been extensively studied. However, most of such watermarks fail upon model extraction attack, which utilizes input samples to query the target model and obtains the corresponding outputs, thus training a substitute model using such input-output pairs. In this paper, we propose a novel watermark to protect IP of DNN models against model extraction, named MEA-Defender."},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.15239","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2401.15239/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:38:13Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"9UjeqkgaUlALZ4RBuDhPg+Da3SF5nHTVgbFfFYmWEAuFlppL+LerJLxp8ZIK+qfEHUN67LpR3dakJO41I/OTCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T13:06:29.720307Z"},"content_sha256":"e18738419713f9f354279fa3901973a2190720ab6f639002c2308c46a1999786","schema_version":"1.0","event_id":"sha256:e18738419713f9f354279fa3901973a2190720ab6f639002c2308c46a1999786"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UDANP6S5QPULMGKVLHNRBCJAFA/bundle.json","state_url":"https://pith.science/pith/UDANP6S5QPULMGKVLHNRBCJAFA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UDANP6S5QPULMGKVLHNRBCJAFA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T13:06:29Z","links":{"resolver":"https://pith.science/pith/UDANP6S5QPULMGKVLHNRBCJAFA","bundle":"https://pith.science/pith/UDANP6S5QPULMGKVLHNRBCJAFA/bundle.json","state":"https://pith.science/pith/UDANP6S5QPULMGKVLHNRBCJAFA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UDANP6S5QPULMGKVLHNRBCJAFA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UDANP6S5QPULMGKVLHNRBCJAFA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"86353c97c7cc1462abfea47fdb89f905eb22391820d4765efd8f6250af2dd50f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-26T23:12:53Z","title_canon_sha256":"fe109b50e1307aba7ce8d8499cd986bea0b92b662c9eac2ca5b26b8d973c52a6"},"schema_version":"1.0","source":{"id":"2401.15239","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2401.15239","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"arxiv_version","alias_value":"2401.15239v1","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2401.15239","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_12","alias_value":"UDANP6S5QPUL","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_16","alias_value":"UDANP6S5QPULMGKV","created_at":"2026-07-05T07:38:13Z"},{"alias_kind":"pith_short_8","alias_value":"UDANP6S5","created_at":"2026-07-05T07:38:13Z"}],"graph_snapshots":[{"event_id":"sha256:e18738419713f9f354279fa3901973a2190720ab6f639002c2308c46a1999786","target":"graph","created_at":"2026-07-05T07:38:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2401.15239/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, numerous highly-valuable Deep Neural Networks (DNNs) have been trained using deep learning algorithms. To protect the Intellectual Property (IP) of the original owners over such DNN models, backdoor-based watermarks have been extensively studied. However, most of such watermarks fail upon model extraction attack, which utilizes input samples to query the target model and obtains the corresponding outputs, thus training a substitute model using such input-output pairs. In this paper, we propose a novel watermark to protect IP of DNN models against model extraction, named MEA-Defender.","authors_text":"Hualong Ma, Jiachen Zhou, Kai Chen, Pan Li, Peizhuo Lv, Ruigang Liang, Shenchen Zhu, Shengzhi Zhang, Yingjun Zhang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-26T23:12:53Z","title":"MEA-Defender: A Robust Watermark against Model Extraction Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2401.15239","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:aeddaad4d39e1c506ed238c1c68634771aeef15a511923e3c8d82b0dde80befb","target":"record","created_at":"2026-07-05T07:38:13Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"86353c97c7cc1462abfea47fdb89f905eb22391820d4765efd8f6250af2dd50f","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-01-26T23:12:53Z","title_canon_sha256":"fe109b50e1307aba7ce8d8499cd986bea0b92b662c9eac2ca5b26b8d973c52a6"},"schema_version":"1.0","source":{"id":"2401.15239","kind":"arxiv","version":1}},"canonical_sha256":"a0c0d7fa5d83e8b6195559db108920281bcda4480f893c2d99da8f0d76052266","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a0c0d7fa5d83e8b6195559db108920281bcda4480f893c2d99da8f0d76052266","first_computed_at":"2026-07-05T07:38:13.510935Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:38:13.510935Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jwI+7Jg0YZhBubyE7THnK2x/eWnYA4lait1eZUan8GVdLv4ow1YDEC6EY/JSEgAzbERsd/DAJ2znYbJQGqqNCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:38:13.511281Z","signed_message":"canonical_sha256_bytes"},"source_id":"2401.15239","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:aeddaad4d39e1c506ed238c1c68634771aeef15a511923e3c8d82b0dde80befb","sha256:e18738419713f9f354279fa3901973a2190720ab6f639002c2308c46a1999786"],"state_sha256":"3f771bcee2e32c28c072e9cb44b46a646d250a5f947c93e69074c1ad774cce9e"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FfIWS56aD33cUwmXInkjCRo0HTEuObsiBzigSovXErSenG6pHgF8fsodO4sVtd89SK1f0YIq8l5G+d8c60C4Bw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T13:06:29.728766Z","bundle_sha256":"be9b944961e1762dac7cd6ca8214fd749d29ed024de06e2fa8a63f31bd8921b8"}}