{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:UEVWHGHEDPM4NHPKRNCMO2KUJB","short_pith_number":"pith:UEVWHGHE","schema_version":"1.0","canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","source":{"kind":"arxiv","id":"2502.10439","version":1},"attestation_state":"computed","paper":{"title":"Crypto Miner Attack: GPU Remote Code Execution Attacks","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ariel Szabo, Uzy Hadad","submitted_at":"2025-02-09T19:26:47Z","abstract_excerpt":"Remote Code Execution (RCE) exploits pose a significant threat to AI and ML systems, particularly in GPU-accelerated environments where the computational power of GPUs can be misused for malicious purposes. This paper focuses on RCE attacks leveraging deserialization vulnerabilities and custom layers, such as TensorFlow Lambda layers, which are often overlooked due to the complexity of monitoring GPU workloads. These vulnerabilities enable attackers to execute arbitrary code, blending malicious activity seamlessly into expected model behavior and exploiting GPUs for unauthorized tasks such as "},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2502.10439","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"1506cad833dbb3be676770381171a8a55a32ca429ac887b48520b1c8865eecb8","abstract_canon_sha256":"f02ae8aec4298be0a17ae4ce081cee600daafc164640793444515b6329aa9b39"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:14:52.623937Z","signature_b64":"KDJUYJ9v7eCwTRA2Ctx7s1cwmJa4Lm0Rv3ZnO7N+Lc2Mrjuq29zXoNOUVy6GD8IZimBVw/jjfaL3e75QSeKvCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","last_reissued_at":"2026-07-05T10:14:52.623483Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:14:52.623483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Crypto Miner Attack: GPU Remote Code Execution Attacks","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ariel Szabo, Uzy Hadad","submitted_at":"2025-02-09T19:26:47Z","abstract_excerpt":"Remote Code Execution (RCE) exploits pose a significant threat to AI and ML systems, particularly in GPU-accelerated environments where the computational power of GPUs can be misused for malicious purposes. This paper focuses on RCE attacks leveraging deserialization vulnerabilities and custom layers, such as TensorFlow Lambda layers, which are often overlooked due to the complexity of monitoring GPU workloads. These vulnerabilities enable attackers to execute arbitrary code, blending malicious activity seamlessly into expected model behavior and exploiting GPUs for unauthorized tasks such as "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.10439","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.10439/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2502.10439","created_at":"2026-07-05T10:14:52.623553+00:00"},{"alias_kind":"arxiv_version","alias_value":"2502.10439v1","created_at":"2026-07-05T10:14:52.623553+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.10439","created_at":"2026-07-05T10:14:52.623553+00:00"},{"alias_kind":"pith_short_12","alias_value":"UEVWHGHEDPM4","created_at":"2026-07-05T10:14:52.623553+00:00"},{"alias_kind":"pith_short_16","alias_value":"UEVWHGHEDPM4NHPK","created_at":"2026-07-05T10:14:52.623553+00:00"},{"alias_kind":"pith_short_8","alias_value":"UEVWHGHE","created_at":"2026-07-05T10:14:52.623553+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB","json":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB.json","graph_json":"https://pith.science/api/pith-number/UEVWHGHEDPM4NHPKRNCMO2KUJB/graph.json","events_json":"https://pith.science/api/pith-number/UEVWHGHEDPM4NHPKRNCMO2KUJB/events.json","paper":"https://pith.science/paper/UEVWHGHE"},"agent_actions":{"view_html":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB","download_json":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB.json","view_paper":"https://pith.science/paper/UEVWHGHE","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2502.10439&json=true","fetch_graph":"https://pith.science/api/pith-number/UEVWHGHEDPM4NHPKRNCMO2KUJB/graph.json","fetch_events":"https://pith.science/api/pith-number/UEVWHGHEDPM4NHPKRNCMO2KUJB/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/action/timestamp_anchor","attest_storage":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/action/storage_attestation","attest_author":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/action/author_attestation","sign_citation":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/action/citation_signature","submit_replication":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/action/replication_record"}},"created_at":"2026-07-05T10:14:52.623553+00:00","updated_at":"2026-07-05T10:14:52.623553+00:00"}