{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:UJPAQ6TASKY6K725JCMTEGAG5H","short_pith_number":"pith:UJPAQ6TA","canonical_record":{"source":{"id":"1910.05429","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-11T22:25:11Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"f0d58efab5ebaede26b26b3e43fa26d44b3497dd9017e56b131b31144b8be949","abstract_canon_sha256":"e788ba6ab5329478c6f9e4fa299a1e03828c7e053fa1aad68a90f49e3f3f45a8"},"schema_version":"1.0"},"canonical_sha256":"a25e087a6092b1e57f5d4899321806e9e9fb78ce616daa521125e51ece910c58","source":{"kind":"arxiv","id":"1910.05429","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.05429","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"arxiv_version","alias_value":"1910.05429v3","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.05429","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_12","alias_value":"UJPAQ6TASKY6","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_16","alias_value":"UJPAQ6TASKY6K725","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_8","alias_value":"UJPAQ6TA","created_at":"2026-07-05T01:06:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:UJPAQ6TASKY6K725JCMTEGAG5H","target":"record","payload":{"canonical_record":{"source":{"id":"1910.05429","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-11T22:25:11Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"f0d58efab5ebaede26b26b3e43fa26d44b3497dd9017e56b131b31144b8be949","abstract_canon_sha256":"e788ba6ab5329478c6f9e4fa299a1e03828c7e053fa1aad68a90f49e3f3f45a8"},"schema_version":"1.0"},"canonical_sha256":"a25e087a6092b1e57f5d4899321806e9e9fb78ce616daa521125e51ece910c58","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:06:08.914940Z","signature_b64":"ILmpGTD/FZ/27X8zcfTsDZuSZND5kkaIRSedL1Ehzj8+2dGjJi+xfAWJ9CvWiHvG8HSnXmAA4l2x+CmoL6ETCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a25e087a6092b1e57f5d4899321806e9e9fb78ce616daa521125e51ece910c58","last_reissued_at":"2026-07-05T01:06:08.914447Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:06:08.914447Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1910.05429","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:06:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sriHpvN9FI9iSWgCOpXpJKf9LVYPRHN1V3ihIRkA/5sIhhVx6d33JXScRVl3IuJ9SLSq1hrtd9vSvrcySChXAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:38:09.567840Z"},"content_sha256":"09873a9217cef90f247a7c3bdb224f6c5b25b3905ab4c865680014bd3d06bc96","schema_version":"1.0","event_id":"sha256:09873a9217cef90f247a7c3bdb224f6c5b25b3905ab4c865680014bd3d06bc96"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:UJPAQ6TASKY6K725JCMTEGAG5H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Buse Gul Atli, Mika Juuti, N. Asokan, Samuel Marchal, Sebastian Szyller","submitted_at":"2019-10-11T22:25:11Z","abstract_excerpt":"Recently, machine learning (ML) has introduced advanced solutions to many domains. Since ML models provide business advantage to model owners, protecting intellectual property of ML models has emerged as an important consideration. Confidentiality of ML models can be protected by exposing them to clients only via prediction APIs. However, model extraction attacks can steal the functionality of ML models using the information leaked to clients through the results returned via the API. In this work, we question whether model extraction is a serious threat to complex, real-life ML models. We eval"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.05429","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1910.05429/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:06:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"07wio8mQGK5dUCYNcuv9thHMzaqaDF5cnA7MLsbC4eBHvbnci6H3Kyc5gXXq4YKXe5w8NFn6p8+cFvgh5hcrDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T03:38:09.568795Z"},"content_sha256":"544a65d276745db0975cf2e6106fb0c5ea25c702fd656eda9d19e334e1c1a33d","schema_version":"1.0","event_id":"sha256:544a65d276745db0975cf2e6106fb0c5ea25c702fd656eda9d19e334e1c1a33d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UJPAQ6TASKY6K725JCMTEGAG5H/bundle.json","state_url":"https://pith.science/pith/UJPAQ6TASKY6K725JCMTEGAG5H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UJPAQ6TASKY6K725JCMTEGAG5H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T03:38:09Z","links":{"resolver":"https://pith.science/pith/UJPAQ6TASKY6K725JCMTEGAG5H","bundle":"https://pith.science/pith/UJPAQ6TASKY6K725JCMTEGAG5H/bundle.json","state":"https://pith.science/pith/UJPAQ6TASKY6K725JCMTEGAG5H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UJPAQ6TASKY6K725JCMTEGAG5H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:UJPAQ6TASKY6K725JCMTEGAG5H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e788ba6ab5329478c6f9e4fa299a1e03828c7e053fa1aad68a90f49e3f3f45a8","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-11T22:25:11Z","title_canon_sha256":"f0d58efab5ebaede26b26b3e43fa26d44b3497dd9017e56b131b31144b8be949"},"schema_version":"1.0","source":{"id":"1910.05429","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.05429","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"arxiv_version","alias_value":"1910.05429v3","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.05429","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_12","alias_value":"UJPAQ6TASKY6","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_16","alias_value":"UJPAQ6TASKY6K725","created_at":"2026-07-05T01:06:08Z"},{"alias_kind":"pith_short_8","alias_value":"UJPAQ6TA","created_at":"2026-07-05T01:06:08Z"}],"graph_snapshots":[{"event_id":"sha256:544a65d276745db0975cf2e6106fb0c5ea25c702fd656eda9d19e334e1c1a33d","target":"graph","created_at":"2026-07-05T01:06:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.05429/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently, machine learning (ML) has introduced advanced solutions to many domains. Since ML models provide business advantage to model owners, protecting intellectual property of ML models has emerged as an important consideration. Confidentiality of ML models can be protected by exposing them to clients only via prediction APIs. However, model extraction attacks can steal the functionality of ML models using the information leaked to clients through the results returned via the API. In this work, we question whether model extraction is a serious threat to complex, real-life ML models. We eval","authors_text":"Buse Gul Atli, Mika Juuti, N. Asokan, Samuel Marchal, Sebastian Szyller","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-11T22:25:11Z","title":"Extraction of Complex DNN Models: Real Threat or Boogeyman?"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.05429","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09873a9217cef90f247a7c3bdb224f6c5b25b3905ab4c865680014bd3d06bc96","target":"record","created_at":"2026-07-05T01:06:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e788ba6ab5329478c6f9e4fa299a1e03828c7e053fa1aad68a90f49e3f3f45a8","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-10-11T22:25:11Z","title_canon_sha256":"f0d58efab5ebaede26b26b3e43fa26d44b3497dd9017e56b131b31144b8be949"},"schema_version":"1.0","source":{"id":"1910.05429","kind":"arxiv","version":3}},"canonical_sha256":"a25e087a6092b1e57f5d4899321806e9e9fb78ce616daa521125e51ece910c58","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a25e087a6092b1e57f5d4899321806e9e9fb78ce616daa521125e51ece910c58","first_computed_at":"2026-07-05T01:06:08.914447Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:06:08.914447Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ILmpGTD/FZ/27X8zcfTsDZuSZND5kkaIRSedL1Ehzj8+2dGjJi+xfAWJ9CvWiHvG8HSnXmAA4l2x+CmoL6ETCg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:06:08.914940Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.05429","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09873a9217cef90f247a7c3bdb224f6c5b25b3905ab4c865680014bd3d06bc96","sha256:544a65d276745db0975cf2e6106fb0c5ea25c702fd656eda9d19e334e1c1a33d"],"state_sha256":"aa39eafa2f1a9f0d8e89d3a8c6e94a8e6ef9a1a4f07ea8ecb915a09e734f7c1a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GBussTjaRTYlAvFaHyenDQaSwqT/il69bQo33iF2Phg5Sox8Rt4w2SCcbau3YmtUvz4M6SBGDEgPjJPqMUTVAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T03:38:09.574341Z","bundle_sha256":"ea5db603f1b3291b331c7b85c724c5c8789db155ea06fbdc5d5f4e3bbe79d65d"}}