{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:UUKZEWTPAAGECFX2WVLCSNSF3Q","short_pith_number":"pith:UUKZEWTP","canonical_record":{"source":{"id":"2202.00008","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875","abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605"},"schema_version":"1.0"},"canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","source":{"kind":"arxiv","id":"2202.00008","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"arxiv_version","alias_value":"2202.00008v1","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_12","alias_value":"UUKZEWTPAAGE","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_16","alias_value":"UUKZEWTPAAGECFX2","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_8","alias_value":"UUKZEWTP","created_at":"2026-07-05T03:53:17Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:UUKZEWTPAAGECFX2WVLCSNSF3Q","target":"record","payload":{"canonical_record":{"source":{"id":"2202.00008","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875","abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605"},"schema_version":"1.0"},"canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:53:17.660077Z","signature_b64":"dnSVsJJWb9ufQW6EMT7g8TnIqOcvTCUvaPZCpCUF9MZ+SakyD1qkH560tU0/ddvvdIqV+56UfpVJ3UdoWQVaDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","last_reissued_at":"2026-07-05T03:53:17.659569Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:53:17.659569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2202.00008","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:53:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8qLrtCcR1Ni/3u/pCErzWVf2697jZy7gcl3W8YeEx/fYNiMyWZYB4HyrbhJ4C+BhtaQ6BjOdq0i2Bdf3YcnDDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T01:07:30.763674Z"},"content_sha256":"53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770","schema_version":"1.0","event_id":"sha256:53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:UUKZEWTPAAGECFX2WVLCSNSF3Q","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"MEGA: Model Stealing via Collaborative Generator-Substitute Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CR","authors_text":"Chi Hong, Jiyue Huang, Lydia Y. Chen","submitted_at":"2022-01-31T09:34:28Z","abstract_excerpt":"Deep machine learning models are increasingly deployedin the wild for providing services to users. Adversaries maysteal the knowledge of these valuable models by trainingsubstitute models according to the inference results of thetargeted deployed models. Recent data-free model stealingmethods are shown effective to extract the knowledge of thetarget model without using real query examples, but they as-sume rich inference information, e.g., class probabilities andlogits. However, they are all based on competing generator-substitute networks and hence encounter training instability.In this paper"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.00008","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2202.00008/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:53:17Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pMj6ESMSYxG0Y7S1mgfYbJ2I02TL08/RLaA6Tg572pJSP8MDwQGa6JwoCLuisfwpZgpt7xRc43CD5VgMlk9uAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T01:07:30.764052Z"},"content_sha256":"80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8","schema_version":"1.0","event_id":"sha256:80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/bundle.json","state_url":"https://pith.science/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T01:07:30Z","links":{"resolver":"https://pith.science/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q","bundle":"https://pith.science/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/bundle.json","state":"https://pith.science/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UUKZEWTPAAGECFX2WVLCSNSF3Q/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UUKZEWTPAAGECFX2WVLCSNSF3Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875"},"schema_version":"1.0","source":{"id":"2202.00008","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"arxiv_version","alias_value":"2202.00008v1","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_12","alias_value":"UUKZEWTPAAGE","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_16","alias_value":"UUKZEWTPAAGECFX2","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_8","alias_value":"UUKZEWTP","created_at":"2026-07-05T03:53:17Z"}],"graph_snapshots":[{"event_id":"sha256:80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8","target":"graph","created_at":"2026-07-05T03:53:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.00008/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep machine learning models are increasingly deployedin the wild for providing services to users. Adversaries maysteal the knowledge of these valuable models by trainingsubstitute models according to the inference results of thetargeted deployed models. Recent data-free model stealingmethods are shown effective to extract the knowledge of thetarget model without using real query examples, but they as-sume rich inference information, e.g., class probabilities andlogits. However, they are all based on competing generator-substitute networks and hence encounter training instability.In this paper","authors_text":"Chi Hong, Jiyue Huang, Lydia Y. Chen","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title":"MEGA: Model Stealing via Collaborative Generator-Substitute Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.00008","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770","target":"record","created_at":"2026-07-05T03:53:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875"},"schema_version":"1.0","source":{"id":"2202.00008","kind":"arxiv","version":1}},"canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","first_computed_at":"2026-07-05T03:53:17.659569Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:53:17.659569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dnSVsJJWb9ufQW6EMT7g8TnIqOcvTCUvaPZCpCUF9MZ+SakyD1qkH560tU0/ddvvdIqV+56UfpVJ3UdoWQVaDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:53:17.660077Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.00008","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770","sha256:80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8"],"state_sha256":"2d8acb88840f61bd6fcb273c120ba57795283f1d0d5e94459b991b99f839502c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6ggkhUpTIRAufQ7Qtzhf2b46h2rwI0GU+iH/XAL+EHyfjZipsebEmI21rOlcYvwD7qAL4AZsygNL9SqtHOJ6DA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T01:07:30.766540Z","bundle_sha256":"782a0830741520ee79170a0d736acbe4febe87a38824a465174ca50e376200f8"}}