{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:VEEWLF2T55WQFBG2J3DK3PWADQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547"},"schema_version":"1.0","source":{"id":"2606.21592","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"arxiv_version","alias_value":"2606.21592v1","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2606.21592","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_12","alias_value":"VEEWLF2T55WQ","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_16","alias_value":"VEEWLF2T55WQFBG2","created_at":"2026-06-23T01:13:15Z"},{"alias_kind":"pith_short_8","alias_value":"VEEWLF2T","created_at":"2026-06-23T01:13:15Z"}],"graph_snapshots":[{"event_id":"sha256:6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec","target":"graph","created_at":"2026-06-23T01:13:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2606.21592/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Stateful Detection (SD) mitigates adversarial attacks by determining whether a sequence of queries contains queries from a black-box adversary. Recent works, such as Blacklight and PIHA utilize query similarity to detect such queries. In this paper, we observe that temporal information, in particular, the temporal correlation of the classification soft labels, is a prominent characteristic of adversarial attacks and can be leveraged to reduce false positive rates. Moreover, we point out a potential vulnerability in SD implementation. Many SD systems identify similar queries according to some i","authors_text":"De Zhang Lee, Ee-Chien Chang, Han Fang","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title":"Enhancing Stateful Detection of Adversarial Attacks with Soft-labels' Temporality and Robust Similarity Approximations"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2606.21592","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b","target":"record","created_at":"2026-06-23T01:13:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"498a564bc7e0dfda7f9f17280a50b24f0e75703f0960148564baf6c1fbe3d392","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-06-19T16:49:29Z","title_canon_sha256":"7ba7ef2bfbf53ae1d8c7d0282e396e9403b50157ac9e760e611f702cc54a8547"},"schema_version":"1.0","source":{"id":"2606.21592","kind":"arxiv","version":1}},"canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a909659753ef6d0284da4ec6adbec01c2c1653e87fb4acb164c4e49a15133389","first_computed_at":"2026-06-23T01:13:15.606575Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-06-23T01:13:15.606575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"vj+PkZW3oxjJDRn1ZbvDU0uIXDTCyHpCKfiSrjEOLESmY0c74N4GOGXFXX5LlX1+PiDkl94kphoFF2N0mTDxDQ==","signature_status":"signed_v1","signed_at":"2026-06-23T01:13:15.607031Z","signed_message":"canonical_sha256_bytes"},"source_id":"2606.21592","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8ad5462c5f7251fd2dbe621400baeb6859efd913f3835a3cb449510051d4728b","sha256:6055f4ce9acf8968a83a9d3362d10e2b4ae9f1ac788913e96926f2804312a8ec"],"state_sha256":"0704d7e3397a423373215daba274075a277569f964adc2f866d81e042b6100a4"}