{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:X5EILJQ2QJGI3C6NIK4BC5CRKP","short_pith_number":"pith:X5EILJQ2","schema_version":"1.0","canonical_sha256":"bf4885a61a824c8d8bcd42b811745153e18d19d7508ac6f56dac792a3d89717b","source":{"kind":"arxiv","id":"2509.11159","version":1},"attestation_state":"computed","paper":{"title":"Stabilizing Data-Free Model Extraction","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Dat-Thinh Nguyen, Kim-Hung Le, Nhien-An Le-Khac","submitted_at":"2025-09-14T08:36:56Z","abstract_excerpt":"Model extraction is a severe threat to Machine Learning-as-a-Service systems, especially through data-free approaches, where dishonest users can replicate the functionality of a black-box target model without access to realistic data. Despite recent advancements, existing data-free model extraction methods suffer from the oscillating accuracy of the substitute model. This oscillation, which could be attributed to the constant shift in the generated data distribution during the attack, makes the attack impractical since the optimal substitute model cannot be determined without access to the tar"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2509.11159","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-09-14T08:36:56Z","cross_cats_sorted":[],"title_canon_sha256":"cc6aea9f6f81b3acc1d10e9f4321ab780fd20eafb7a196ff6d5d290f7ccbc617","abstract_canon_sha256":"14fe97fb5a988b913c096ce9c9cc83a42734c551033e3deba6da23dbe880b982"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T12:11:34.538642Z","signature_b64":"gzN8f+AkgRCeK538B9yIWhMUNMREvVZCIwOeYqzH/iyrywvkDXANjsPKUA0XC2WUPLslNSeEDzHw3dQMSeV6CA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"bf4885a61a824c8d8bcd42b811745153e18d19d7508ac6f56dac792a3d89717b","last_reissued_at":"2026-07-05T12:11:34.538163Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T12:11:34.538163Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Stabilizing Data-Free Model Extraction","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Dat-Thinh Nguyen, Kim-Hung Le, Nhien-An Le-Khac","submitted_at":"2025-09-14T08:36:56Z","abstract_excerpt":"Model extraction is a severe threat to Machine Learning-as-a-Service systems, especially through data-free approaches, where dishonest users can replicate the functionality of a black-box target model without access to realistic data. Despite recent advancements, existing data-free model extraction methods suffer from the oscillating accuracy of the substitute model. This oscillation, which could be attributed to the constant shift in the generated data distribution during the attack, makes the attack impractical since the optimal substitute model cannot be determined without access to the tar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2509.11159","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2509.11159/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2509.11159","created_at":"2026-07-05T12:11:34.538222+00:00"},{"alias_kind":"arxiv_version","alias_value":"2509.11159v1","created_at":"2026-07-05T12:11:34.538222+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2509.11159","created_at":"2026-07-05T12:11:34.538222+00:00"},{"alias_kind":"pith_short_12","alias_value":"X5EILJQ2QJGI","created_at":"2026-07-05T12:11:34.538222+00:00"},{"alias_kind":"pith_short_16","alias_value":"X5EILJQ2QJGI3C6N","created_at":"2026-07-05T12:11:34.538222+00:00"},{"alias_kind":"pith_short_8","alias_value":"X5EILJQ2","created_at":"2026-07-05T12:11:34.538222+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP","json":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP.json","graph_json":"https://pith.science/api/pith-number/X5EILJQ2QJGI3C6NIK4BC5CRKP/graph.json","events_json":"https://pith.science/api/pith-number/X5EILJQ2QJGI3C6NIK4BC5CRKP/events.json","paper":"https://pith.science/paper/X5EILJQ2"},"agent_actions":{"view_html":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP","download_json":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP.json","view_paper":"https://pith.science/paper/X5EILJQ2","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2509.11159&json=true","fetch_graph":"https://pith.science/api/pith-number/X5EILJQ2QJGI3C6NIK4BC5CRKP/graph.json","fetch_events":"https://pith.science/api/pith-number/X5EILJQ2QJGI3C6NIK4BC5CRKP/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP/action/timestamp_anchor","attest_storage":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP/action/storage_attestation","attest_author":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP/action/author_attestation","sign_citation":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP/action/citation_signature","submit_replication":"https://pith.science/pith/X5EILJQ2QJGI3C6NIK4BC5CRKP/action/replication_record"}},"created_at":"2026-07-05T12:11:34.538222+00:00","updated_at":"2026-07-05T12:11:34.538222+00:00"}