{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:WV6OPVRPBFHG4X6AFXJJO6CHOY","short_pith_number":"pith:WV6OPVRP","canonical_record":{"source":{"id":"2305.03888","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-06T01:20:30Z","cross_cats_sorted":["cs.AI","cs.AR"],"title_canon_sha256":"35eba7ceb364ae8cbe7ad4cf434f0ac5fbc0e681d24d682cbe497a7a7c58eff7","abstract_canon_sha256":"8b2c2d601ab3d5919d1cd5b3fceb00c4f72f7d6996e685a23acdaddd204b85ee"},"schema_version":"1.0"},"canonical_sha256":"b57ce7d62f094e6e5fc02dd29778477628c27f0b2ad10dc1fcb984e6820d02c7","source":{"kind":"arxiv","id":"2305.03888","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.03888","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"arxiv_version","alias_value":"2305.03888v2","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.03888","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_12","alias_value":"WV6OPVRPBFHG","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_16","alias_value":"WV6OPVRPBFHG4X6A","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_8","alias_value":"WV6OPVRP","created_at":"2026-07-05T06:09:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:WV6OPVRPBFHG4X6AFXJJO6CHOY","target":"record","payload":{"canonical_record":{"source":{"id":"2305.03888","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-06T01:20:30Z","cross_cats_sorted":["cs.AI","cs.AR"],"title_canon_sha256":"35eba7ceb364ae8cbe7ad4cf434f0ac5fbc0e681d24d682cbe497a7a7c58eff7","abstract_canon_sha256":"8b2c2d601ab3d5919d1cd5b3fceb00c4f72f7d6996e685a23acdaddd204b85ee"},"schema_version":"1.0"},"canonical_sha256":"b57ce7d62f094e6e5fc02dd29778477628c27f0b2ad10dc1fcb984e6820d02c7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:09:10.641836Z","signature_b64":"jGolELZb2o5uq8UkfXb2TqENFSUYnd2/UJrkmU3Tz7WH7vHhUxlMgnvyXY/2sKa7mmPwpGVHedyM5GLc24QxAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b57ce7d62f094e6e5fc02dd29778477628c27f0b2ad10dc1fcb984e6820d02c7","last_reissued_at":"2026-07-05T06:09:10.641217Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:09:10.641217Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.03888","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:09:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lHo75XzD9MNUuV1TQ/60730/xwkmwkpkwQuYC/NgH/gK0b7aQ0mB5NzPdQUIE6mdHT9kJp0cgc+V30qi1qxNDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:16:07.729054Z"},"content_sha256":"5d010be07ab0bdb4a79020fee35dee42101326c5881d406e2ffd4f5bf9f3c211","schema_version":"1.0","event_id":"sha256:5d010be07ab0bdb4a79020fee35dee42101326c5881d406e2ffd4f5bf9f3c211"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:WV6OPVRPBFHG4X6AFXJJO6CHOY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.AR"],"primary_cat":"cs.CR","authors_text":"Helei Cui, Shuo Huang, Yujin Huang, Zijian Wang","submitted_at":"2023-05-06T01:20:30Z","abstract_excerpt":"In recent years, on-device deep learning has gained attention as a means of developing affordable deep learning applications for mobile devices. However, on-device models are constrained by limited energy and computation resources. In the mean time, a poisoning attack known as sponge poisoning has been developed.This attack involves feeding the model with poisoned examples to increase the energy consumption during inference. As previous work is focusing on server hardware accelerators, in this work, we extend the sponge poisoning attack to an on-device scenario to evaluate the vulnerability of"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.03888","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.03888/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:09:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"T1b6bwAs+bWh+nrp0CRk+Hk59uxx23ZjgiVHBvdxdmSu9YX6eOiCNom22z1a/BNeoOgTVLsx6vjfC2BwWuZgCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:16:07.729669Z"},"content_sha256":"020336e4287b750583bcb6b61545d71e5dcc3509eb8cb24d0b5c97c13ac14cf8","schema_version":"1.0","event_id":"sha256:020336e4287b750583bcb6b61545d71e5dcc3509eb8cb24d0b5c97c13ac14cf8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/bundle.json","state_url":"https://pith.science/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:16:07Z","links":{"resolver":"https://pith.science/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY","bundle":"https://pith.science/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/bundle.json","state":"https://pith.science/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/WV6OPVRPBFHG4X6AFXJJO6CHOY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:WV6OPVRPBFHG4X6AFXJJO6CHOY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"8b2c2d601ab3d5919d1cd5b3fceb00c4f72f7d6996e685a23acdaddd204b85ee","cross_cats_sorted":["cs.AI","cs.AR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-06T01:20:30Z","title_canon_sha256":"35eba7ceb364ae8cbe7ad4cf434f0ac5fbc0e681d24d682cbe497a7a7c58eff7"},"schema_version":"1.0","source":{"id":"2305.03888","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.03888","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"arxiv_version","alias_value":"2305.03888v2","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.03888","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_12","alias_value":"WV6OPVRPBFHG","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_16","alias_value":"WV6OPVRPBFHG4X6A","created_at":"2026-07-05T06:09:10Z"},{"alias_kind":"pith_short_8","alias_value":"WV6OPVRP","created_at":"2026-07-05T06:09:10Z"}],"graph_snapshots":[{"event_id":"sha256:020336e4287b750583bcb6b61545d71e5dcc3509eb8cb24d0b5c97c13ac14cf8","target":"graph","created_at":"2026-07-05T06:09:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.03888/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, on-device deep learning has gained attention as a means of developing affordable deep learning applications for mobile devices. However, on-device models are constrained by limited energy and computation resources. In the mean time, a poisoning attack known as sponge poisoning has been developed.This attack involves feeding the model with poisoned examples to increase the energy consumption during inference. As previous work is focusing on server hardware accelerators, in this work, we extend the sponge poisoning attack to an on-device scenario to evaluate the vulnerability of","authors_text":"Helei Cui, Shuo Huang, Yujin Huang, Zijian Wang","cross_cats":["cs.AI","cs.AR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-06T01:20:30Z","title":"Energy-Latency Attacks to On-Device Neural Networks via Sponge Poisoning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.03888","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5d010be07ab0bdb4a79020fee35dee42101326c5881d406e2ffd4f5bf9f3c211","target":"record","created_at":"2026-07-05T06:09:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"8b2c2d601ab3d5919d1cd5b3fceb00c4f72f7d6996e685a23acdaddd204b85ee","cross_cats_sorted":["cs.AI","cs.AR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-05-06T01:20:30Z","title_canon_sha256":"35eba7ceb364ae8cbe7ad4cf434f0ac5fbc0e681d24d682cbe497a7a7c58eff7"},"schema_version":"1.0","source":{"id":"2305.03888","kind":"arxiv","version":2}},"canonical_sha256":"b57ce7d62f094e6e5fc02dd29778477628c27f0b2ad10dc1fcb984e6820d02c7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b57ce7d62f094e6e5fc02dd29778477628c27f0b2ad10dc1fcb984e6820d02c7","first_computed_at":"2026-07-05T06:09:10.641217Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:09:10.641217Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"jGolELZb2o5uq8UkfXb2TqENFSUYnd2/UJrkmU3Tz7WH7vHhUxlMgnvyXY/2sKa7mmPwpGVHedyM5GLc24QxAQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:09:10.641836Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.03888","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5d010be07ab0bdb4a79020fee35dee42101326c5881d406e2ffd4f5bf9f3c211","sha256:020336e4287b750583bcb6b61545d71e5dcc3509eb8cb24d0b5c97c13ac14cf8"],"state_sha256":"25834f7b98aca33f734871fb03c67032e658e78565b2484215cfa47128ff12ca"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JI3S4Uth4wFv3jfAOJR5UbTTDys+Xycs2NSRVg3DlEfUXdCB48pShgV5YRhm+h8BTfJjakNTVKgdiTFiALBVBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:16:07.733757Z","bundle_sha256":"6403626e3b3f49b26ec82b2f350f991a912011e1fcb72874a5ba1408250b9734"}}