{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:UEVWHGHEDPM4NHPKRNCMO2KUJB","short_pith_number":"pith:UEVWHGHE","canonical_record":{"source":{"id":"2502.10439","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"1506cad833dbb3be676770381171a8a55a32ca429ac887b48520b1c8865eecb8","abstract_canon_sha256":"f02ae8aec4298be0a17ae4ce081cee600daafc164640793444515b6329aa9b39"},"schema_version":"1.0"},"canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","source":{"kind":"arxiv","id":"2502.10439","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.10439","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"arxiv_version","alias_value":"2502.10439v1","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.10439","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_12","alias_value":"UEVWHGHEDPM4","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_16","alias_value":"UEVWHGHEDPM4NHPK","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_8","alias_value":"UEVWHGHE","created_at":"2026-07-05T10:14:52Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:UEVWHGHEDPM4NHPKRNCMO2KUJB","target":"record","payload":{"canonical_record":{"source":{"id":"2502.10439","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"1506cad833dbb3be676770381171a8a55a32ca429ac887b48520b1c8865eecb8","abstract_canon_sha256":"f02ae8aec4298be0a17ae4ce081cee600daafc164640793444515b6329aa9b39"},"schema_version":"1.0"},"canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:14:52.623937Z","signature_b64":"KDJUYJ9v7eCwTRA2Ctx7s1cwmJa4Lm0Rv3ZnO7N+Lc2Mrjuq29zXoNOUVy6GD8IZimBVw/jjfaL3e75QSeKvCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","last_reissued_at":"2026-07-05T10:14:52.623483Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:14:52.623483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.10439","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"by3d0LX+ZMRul51m8P70m02mWGGIT28xOUrQjaTYMXiVV3E1Jl+VYpUDmDx2tb3+KgLqhxXUVoRrtrWBwzezAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T13:51:16.957188Z"},"content_sha256":"13618887716bda059ce7773a12ab6afeee4816b02b4171fe4813cf2197238b4a","schema_version":"1.0","event_id":"sha256:13618887716bda059ce7773a12ab6afeee4816b02b4171fe4813cf2197238b4a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:UEVWHGHEDPM4NHPKRNCMO2KUJB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Crypto Miner Attack: GPU Remote Code Execution Attacks","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ariel Szabo, Uzy Hadad","submitted_at":"2025-02-09T19:26:47Z","abstract_excerpt":"Remote Code Execution (RCE) exploits pose a significant threat to AI and ML systems, particularly in GPU-accelerated environments where the computational power of GPUs can be misused for malicious purposes. This paper focuses on RCE attacks leveraging deserialization vulnerabilities and custom layers, such as TensorFlow Lambda layers, which are often overlooked due to the complexity of monitoring GPU workloads. These vulnerabilities enable attackers to execute arbitrary code, blending malicious activity seamlessly into expected model behavior and exploiting GPUs for unauthorized tasks such as "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.10439","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.10439/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:14:52Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Y3TodMMIstVtEkG97aq5z1CvVQhIkStShkgETae7F38dHiOcSLrDSWvTCNx2pJbL0hMR9LE7FtRX1tgBH/9MDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-22T13:51:16.957748Z"},"content_sha256":"169d7ca0e80fe9991e3e4d4c71bc7b14be2bbc0dd60982ff76f44c21ababb754","schema_version":"1.0","event_id":"sha256:169d7ca0e80fe9991e3e4d4c71bc7b14be2bbc0dd60982ff76f44c21ababb754"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/bundle.json","state_url":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-22T13:51:16Z","links":{"resolver":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB","bundle":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/bundle.json","state":"https://pith.science/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UEVWHGHEDPM4NHPKRNCMO2KUJB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:UEVWHGHEDPM4NHPKRNCMO2KUJB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f02ae8aec4298be0a17ae4ce081cee600daafc164640793444515b6329aa9b39","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","title_canon_sha256":"1506cad833dbb3be676770381171a8a55a32ca429ac887b48520b1c8865eecb8"},"schema_version":"1.0","source":{"id":"2502.10439","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.10439","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"arxiv_version","alias_value":"2502.10439v1","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.10439","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_12","alias_value":"UEVWHGHEDPM4","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_16","alias_value":"UEVWHGHEDPM4NHPK","created_at":"2026-07-05T10:14:52Z"},{"alias_kind":"pith_short_8","alias_value":"UEVWHGHE","created_at":"2026-07-05T10:14:52Z"}],"graph_snapshots":[{"event_id":"sha256:169d7ca0e80fe9991e3e4d4c71bc7b14be2bbc0dd60982ff76f44c21ababb754","target":"graph","created_at":"2026-07-05T10:14:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.10439/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Remote Code Execution (RCE) exploits pose a significant threat to AI and ML systems, particularly in GPU-accelerated environments where the computational power of GPUs can be misused for malicious purposes. This paper focuses on RCE attacks leveraging deserialization vulnerabilities and custom layers, such as TensorFlow Lambda layers, which are often overlooked due to the complexity of monitoring GPU workloads. These vulnerabilities enable attackers to execute arbitrary code, blending malicious activity seamlessly into expected model behavior and exploiting GPUs for unauthorized tasks such as ","authors_text":"Ariel Szabo, Uzy Hadad","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","title":"Crypto Miner Attack: GPU Remote Code Execution Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.10439","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:13618887716bda059ce7773a12ab6afeee4816b02b4171fe4813cf2197238b4a","target":"record","created_at":"2026-07-05T10:14:52Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f02ae8aec4298be0a17ae4ce081cee600daafc164640793444515b6329aa9b39","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2025-02-09T19:26:47Z","title_canon_sha256":"1506cad833dbb3be676770381171a8a55a32ca429ac887b48520b1c8865eecb8"},"schema_version":"1.0","source":{"id":"2502.10439","kind":"arxiv","version":1}},"canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a12b6398e41bd9c69dea8b44c76954487f90495e782b1b010b8c99d45216dc6d","first_computed_at":"2026-07-05T10:14:52.623483Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:14:52.623483Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"KDJUYJ9v7eCwTRA2Ctx7s1cwmJa4Lm0Rv3ZnO7N+Lc2Mrjuq29zXoNOUVy6GD8IZimBVw/jjfaL3e75QSeKvCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T10:14:52.623937Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.10439","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:13618887716bda059ce7773a12ab6afeee4816b02b4171fe4813cf2197238b4a","sha256:169d7ca0e80fe9991e3e4d4c71bc7b14be2bbc0dd60982ff76f44c21ababb754"],"state_sha256":"be3c3d0e94d627c137d3c0877d5d6350098350f8689b8ca1ce869a08da73956b"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"W/BBBNxPhsIhe4P0jWaUh6/LbLkjNKMsxC28oKjVXHxGSEA5s9SqWxiLK6ucYIq4aqClsoq3hC1GpkYt68VpAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-22T13:51:16.962890Z","bundle_sha256":"22f828c69cba2d44f2e87b0de3827daea6114afd6ca1f0b04656b11d0a1ae74a"}}