{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:VEEWLF2T55WQFBG2J3DK3PWADQ","short_pith_number":"pith:VEEWLF2T","canonical_record":{"source":{"id":"2606.21592","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","cross_cats_sorted":[],"title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547","abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392"},"schema_version":"1.0"},"canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","source":{"kind":"arxiv","id":"2606.21592","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21592v1","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_12","alias_value":"VEEWLF2T55WQ","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_16","alias_value":"VEEWLF2T55WQFBG2","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_8","alias_value":"VEEWLF2T","created_at":"2026-06-23T01:13:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:VEEWLF2T55WQFBG2J3DK3PWADQ","target":"record","payload":{"canonical_record":{"source":{"id":"2606.21592","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","cross_cats_sorted":[],"title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547","abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392"},"schema_version":"1.0"},"canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-06-23T01:13:15.607031Z","signature_b64":"vj+PkZW3oxjJDRn1ZbvDU0uIXDTCyHpCKfiSrjEOLESmY0c74N4GOGXFXX5LlX1+PiDkl94kphoFF2N0mTDxDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","last_reissued_at":"2026-06-23T01:13:15.606575Z","signature_status":"signed_v1","first_computed_at":"2026-06-23T01:13:15.606575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2606.21592","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:13:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lz16+EmFafYM/ke+s8vWigOz3mgkjPGbYm26bHqbsh1RYda2sBCcDRpdc0xYbJ72ZvL4F0s+iiCO+Y25xaCTDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:53:45.102299Z"},"content_sha256":"8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b","schema_version":"1.0","event_id":"sha256:8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:VEEWLF2T55WQFBG2J3DK3PWADQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Enhancing Stateful Detection of Adversarial Attacks with Soft-labels' Temporality and Robust Similarity Approximations","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"De Zhang Lee, Ee-Chien Chang, Han Fang","submitted_at":"2026-06-19T16:49:29Z","abstract_excerpt":"Stateful Detection (SD) mitigates adversarial attacks by determining whether a sequence of queries contains queries from a black-box adversary. Recent works, such as Blacklight and PIHA utilize query similarity to detect such queries. In this paper, we observe that temporal information, in particular, the temporal correlation of the classification soft labels, is a prominent characteristic of adversarial attacks and can be leveraged to reduce false positive rates. Moreover, we point out a potential vulnerability in SD implementation. Many SD systems identify similar queries according to some i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21592","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2606.21592/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-06-23T01:13:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"MLi1kqqgtwnGBo6hNqpTJVlpA64KUJppjBPyK5BnfDR50GCRf4CiDpvKsrKfhARTK1crPFXLrXR6Ne1YK+8EDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:53:45.103349Z"},"content_sha256":"6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec","schema_version":"1.0","event_id":"sha256:6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/bundle.json","state_url":"https://pith.science/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:53:45Z","links":{"resolver":"https://pith.science/pith/VEEWLF2T55WQFBG2J3DK3PWADQ","bundle":"https://pith.science/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/bundle.json","state":"https://pith.science/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/VEEWLF2T55WQFBG2J3DK3PWADQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:VEEWLF2T55WQFBG2J3DK3PWADQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547"},"schema_version":"1.0","source":{"id":"2606.21592","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21592v1","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_12","alias_value":"VEEWLF2T55WQ","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_16","alias_value":"VEEWLF2T55WQFBG2","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_8","alias_value":"VEEWLF2T","created_at":"2026-06-23T01:13:15Z"}],"graph_snapshots":[{"event_id":"sha256:6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec","target":"graph","created_at":"2026-06-23T01:13:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.21592/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Stateful Detection (SD) mitigates adversarial attacks by determining whether a sequence of queries contains queries from a black-box adversary. Recent works, such as Blacklight and PIHA utilize query similarity to detect such queries. In this paper, we observe that temporal information, in particular, the temporal correlation of the classification soft labels, is a prominent characteristic of adversarial attacks and can be leveraged to reduce false positive rates. Moreover, we point out a potential vulnerability in SD implementation. Many SD systems identify similar queries according to some i","authors_text":"De Zhang Lee, Ee-Chien Chang, Han Fang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title":"Enhancing Stateful Detection of Adversarial Attacks with Soft-labels' Temporality and Robust Similarity Approximations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21592","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b","target":"record","created_at":"2026-06-23T01:13:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547"},"schema_version":"1.0","source":{"id":"2606.21592","kind":"arxiv","version":1}},"canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","first_computed_at":"2026-06-23T01:13:15.606575Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T01:13:15.606575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vj+PkZW3oxjJDRn1ZbvDU0uIXDTCyHpCKfiSrjEOLESmY0c74N4GOGXFXX5LlX1+PiDkl94kphoFF2N0mTDxDQ==","signature_status":"signed_v1","signed_at":"2026-06-23T01:13:15.607031Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.21592","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b","sha256:6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec"],"state_sha256":"0704d7e3397a423373215daba274075a277569f964adc2f866d81e042b6100a4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zaJ7XCRTUE7AYFX9XG5BQj/YcimP3R07+G2AQ8okvLhQB9UqZnRVssPUrvenh3lk3DWneeVaiOGvNcVM24huCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:53:45.109162Z","bundle_sha256":"718d68b156496528b855507baea6184ed402b3fbf0f984b6175d4c4de59b4910"}}