{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:WCEE7YYFDOZOOLKJHREESX2N4S","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f9a5bef14ba868e636ce9ec31a07e931a448dba24c6c7ebacab76a5a66f3248a","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2019-06-26T08:32:37Z","title_canon_sha256":"02bdbe7177f834bd8c562d966913bece5d9c835ab236f429842cc54be7e377f5"},"schema_version":"1.0","source":{"id":"1906.10908","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.10908","created_at":"2026-07-05T00:45:06Z"},{"alias_kind":"arxiv_version","alias_value":"1906.10908v2","created_at":"2026-07-05T00:45:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.10908","created_at":"2026-07-05T00:45:06Z"},{"alias_kind":"pith_short_12","alias_value":"WCEE7YYFDOZO","created_at":"2026-07-05T00:45:06Z"},{"alias_kind":"pith_short_16","alias_value":"WCEE7YYFDOZOOLKJ","created_at":"2026-07-05T00:45:06Z"},{"alias_kind":"pith_short_8","alias_value":"WCEE7YYF","created_at":"2026-07-05T00:45:06Z"}],"graph_snapshots":[{"event_id":"sha256:540bfd12408c546fcf602e56336d29fda7965874a60a03aacc32206eb508d1ca","target":"graph","created_at":"2026-07-05T00:45:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1906.10908/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"High-performance Deep Neural Networks (DNNs) are increasingly deployed in many real-world applications e.g., cloud prediction APIs. Recent advances in model functionality stealing attacks via black-box access (i.e., inputs in, predictions out) threaten the business model of such applications, which require a lot of time, money, and effort to develop. Existing defenses take a passive role against stealing attacks, such as by truncating predicted information. We find such passive defenses ineffective against DNN stealing attacks. In this paper, we propose the first defense which actively perturb","authors_text":"Bernt Schiele, Mario Fritz, Tribhuvanesh Orekondy","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2019-06-26T08:32:37Z","title":"Prediction Poisoning: Towards Defenses Against DNN Model Stealing Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.10908","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2e94538fb782532e03895cd361261b7ab0dacf09700b278b4f8f4d5598dd19a7","target":"record","created_at":"2026-07-05T00:45:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f9a5bef14ba868e636ce9ec31a07e931a448dba24c6c7ebacab76a5a66f3248a","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2019-06-26T08:32:37Z","title_canon_sha256":"02bdbe7177f834bd8c562d966913bece5d9c835ab236f429842cc54be7e377f5"},"schema_version":"1.0","source":{"id":"1906.10908","kind":"arxiv","version":2}},"canonical_sha256":"b0884fe3051bb2e72d493c48495f4de4a6c3db02d17c91163667b145f0f299e0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b0884fe3051bb2e72d493c48495f4de4a6c3db02d17c91163667b145f0f299e0","first_computed_at":"2026-07-05T00:45:06.481926Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:45:06.481926Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xpC6nS0fsXzd1KpEQxDWmUAABQApIwUZD9AYfJNGhTs+m7fd4RCh69Cx3YJjkBSb2Y5qpoh5uYqzkMVd66pICg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:45:06.482469Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.10908","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2e94538fb782532e03895cd361261b7ab0dacf09700b278b4f8f4d5598dd19a7","sha256:540bfd12408c546fcf602e56336d29fda7965874a60a03aacc32206eb508d1ca"],"state_sha256":"c3853bb5cdaaa8c6285a8f2910ee01e4fc1922a7a8880b769a774fab61c80cda"}