{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:V5VO7Q7F7G5LDBYOQLW3FF26YZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2861277cbe3c0bced9f11e2346b87424c5df4e452917e64b7bea8b7d6dfce6c3","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-10-02T21:20:06Z","title_canon_sha256":"79250916c074a6c21782e8fdee652ee395dbbf24e920fdf9c7b67c7e44f3c7c8"},"schema_version":"1.0","source":{"id":"1910.01226","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.01226","created_at":"2026-07-05T01:56:40Z"},{"alias_kind":"arxiv_version","alias_value":"1910.01226v3","created_at":"2026-07-05T01:56:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.01226","created_at":"2026-07-05T01:56:40Z"},{"alias_kind":"pith_short_12","alias_value":"V5VO7Q7F7G5L","created_at":"2026-07-05T01:56:40Z"},{"alias_kind":"pith_short_16","alias_value":"V5VO7Q7F7G5LDBYO","created_at":"2026-07-05T01:56:40Z"},{"alias_kind":"pith_short_8","alias_value":"V5VO7Q7F","created_at":"2026-07-05T01:56:40Z"}],"graph_snapshots":[{"event_id":"sha256:dd27ddb7a37c49d4906d99594b5ec2654742c57d1b938d3d111fca62511ecbe4","target":"graph","created_at":"2026-07-05T01:56:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.01226/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"As companies continue to invest heavily in larger, more accurate and more robust deep learning models, they are exploring approaches to monetize their models while protecting their intellectual property. Model licensing is promising, but requires a robust tool for owners to claim ownership of models, i.e. a watermark. Unfortunately, current designs have not been able to address piracy attacks, where third parties falsely claim model ownership by embedding their own \"pirate watermarks\" into an already-watermarked model. We observe that resistance to piracy attacks is fundamentally at odds with ","authors_text":"Ben Y. Zhao, Emily Wenger, Haitao Zheng, Huiying Li, Shawn Shan","cross_cats":["cs.LG","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-10-02T21:20:06Z","title":"Piracy Resistant Watermarks for Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.01226","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4abe8c20f83f37fc1f0a2c6d720ecfc1f345176a05f8e1163c321f7a937037bf","target":"record","created_at":"2026-07-05T01:56:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2861277cbe3c0bced9f11e2346b87424c5df4e452917e64b7bea8b7d6dfce6c3","cross_cats_sorted":["cs.LG","stat.ML"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2019-10-02T21:20:06Z","title_canon_sha256":"79250916c074a6c21782e8fdee652ee395dbbf24e920fdf9c7b67c7e44f3c7c8"},"schema_version":"1.0","source":{"id":"1910.01226","kind":"arxiv","version":3}},"canonical_sha256":"af6aefc3e5f9bab1870e82edb2975ec67ca848311f19d5229f3fe1d36cd04cce","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"af6aefc3e5f9bab1870e82edb2975ec67ca848311f19d5229f3fe1d36cd04cce","first_computed_at":"2026-07-05T01:56:40.295859Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:56:40.295859Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"poEu9uWDynUjhTazClPN0wPoi/yWrn4eiV8ZZ8GILOmm47OTPWbFXRa1vtL55vPPiFhABZypZIA9/t1CW797AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:56:40.296283Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.01226","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4abe8c20f83f37fc1f0a2c6d720ecfc1f345176a05f8e1163c321f7a937037bf","sha256:dd27ddb7a37c49d4906d99594b5ec2654742c57d1b938d3d111fca62511ecbe4"],"state_sha256":"4f934ec2f7b406b59908ef00ba3c56e71493d2261db579870318cd55e41003f4"}