{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:UUKZEWTPAAGECFX2WVLCSNSF3Q","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875"},"schema_version":"1.0","source":{"id":"2202.00008","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"arxiv_version","alias_value":"2202.00008v1","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2202.00008","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_12","alias_value":"UUKZEWTPAAGE","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_16","alias_value":"UUKZEWTPAAGECFX2","created_at":"2026-07-05T03:53:17Z"},{"alias_kind":"pith_short_8","alias_value":"UUKZEWTP","created_at":"2026-07-05T03:53:17Z"}],"graph_snapshots":[{"event_id":"sha256:80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8","target":"graph","created_at":"2026-07-05T03:53:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2202.00008/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep machine learning models are increasingly deployedin the wild for providing services to users. Adversaries maysteal the knowledge of these valuable models by trainingsubstitute models according to the inference results of thetargeted deployed models. Recent data-free model stealingmethods are shown effective to extract the knowledge of thetarget model without using real query examples, but they as-sume rich inference information, e.g., class probabilities andlogits. However, they are all based on competing generator-substitute networks and hence encounter training instability.In this paper","authors_text":"Chi Hong, Jiyue Huang, Lydia Y. Chen","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title":"MEGA: Model Stealing via Collaborative Generator-Substitute Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2202.00008","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770","target":"record","created_at":"2026-07-05T03:53:17Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"236f1e96222c0c748d48dfb9e2a2eb43598987f571c8e6d8c628bb0e21244605","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-01-31T09:34:28Z","title_canon_sha256":"0423c6f183d6d18e4523653dafe6d0380ece3b07fbe43e5f69f182225fb2b875"},"schema_version":"1.0","source":{"id":"2202.00008","kind":"arxiv","version":1}},"canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a515925a6f000c4116fab556293645dc38a503a3860403bec30a5283ea4f336a","first_computed_at":"2026-07-05T03:53:17.659569Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:53:17.659569Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"dnSVsJJWb9ufQW6EMT7g8TnIqOcvTCUvaPZCpCUF9MZ+SakyD1qkH560tU0/ddvvdIqV+56UfpVJ3UdoWQVaDw==","signature_status":"signed_v1","signed_at":"2026-07-05T03:53:17.660077Z","signed_message":"canonical_sha256_bytes"},"source_id":"2202.00008","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:53d90f28fddbdcce5aefda2b26e7bc7fd1e51d10e16aaa4c845058442242c770","sha256:80204424d561e9c2bcbd396acce00e396ffa3035d99152b9702cb1f6103442b8"],"state_sha256":"2d8acb88840f61bd6fcb273c120ba57795283f1d0d5e94459b991b99f839502c"}