{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XCYPDVKYZLHJI6QNGCIL5MK7WC","short_pith_number":"pith:XCYPDVKY","canonical_record":{"source":{"id":"2412.12194","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-14T06:38:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"30ca09eaaa23ad1607d0b86ae3fe6932e0fa58e81cc8b8d8a9b880cde5027948","abstract_canon_sha256":"7a3d37e5b92da9ceb469d41436f299b97b9d6c11442fd5954041890948f53e7c"},"schema_version":"1.0"},"canonical_sha256":"b8b0f1d558cace947a0d3090beb15fb08f53c26ae2a238f1d0cdeaa8135aa489","source":{"kind":"arxiv","id":"2412.12194","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12194","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12194v1","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12194","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_12","alias_value":"XCYPDVKYZLHJ","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_16","alias_value":"XCYPDVKYZLHJI6QN","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_8","alias_value":"XCYPDVKY","created_at":"2026-07-05T09:56:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XCYPDVKYZLHJI6QNGCIL5MK7WC","target":"record","payload":{"canonical_record":{"source":{"id":"2412.12194","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-14T06:38:01Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"30ca09eaaa23ad1607d0b86ae3fe6932e0fa58e81cc8b8d8a9b880cde5027948","abstract_canon_sha256":"7a3d37e5b92da9ceb469d41436f299b97b9d6c11442fd5954041890948f53e7c"},"schema_version":"1.0"},"canonical_sha256":"b8b0f1d558cace947a0d3090beb15fb08f53c26ae2a238f1d0cdeaa8135aa489","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:56:57.751185Z","signature_b64":"wivQanXMyxs9M9e6dCWmgoNpRpwiV3qQH1WmxltZcfxLGko3iOR6okZz6JsO2jYzQm/OmN2hJjbJOO1xQa52CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b8b0f1d558cace947a0d3090beb15fb08f53c26ae2a238f1d0cdeaa8135aa489","last_reissued_at":"2026-07-05T09:56:57.750760Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:56:57.750760Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2412.12194","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gyxw0VW9J64iv3lcpOjnqbS3ebAy2eGIDqzhikLNiZhzaWYe2cjo/Q41BtF+dQvWSe1i+RPTFXdOMKX1csttCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:48:39.123665Z"},"content_sha256":"cb02440504c92154d1ea865f6df3730130b0b85dc1d37ea51a43a4af7030a92f","schema_version":"1.0","event_id":"sha256:cb02440504c92154d1ea865f6df3730130b0b85dc1d37ea51a43a4af7030a92f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XCYPDVKYZLHJI6QNGCIL5MK7WC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Anh Tu Ngo, Anupam Chattopadhyay, Nandish Chattopadhyay, Yi Hao Puah","submitted_at":"2024-12-14T06:38:01Z","abstract_excerpt":"Adoption of machine learning models across industries have turned Neural Networks (DNNs) into a prized Intellectual Property (IP), which needs to be protected from being stolen or being used without authorization. This topic gave rise to multiple watermarking schemes, through which, one can establish the ownership of a model. Watermarking using backdooring is the most well established method available in the literature, with specific works demonstrating the difficulty in removing the watermarks, embedded as backdoors within the weights of the network. However, in our work, we have identified a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12194","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2412.12194/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:56:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3QoEqj4H8i7rA9588RXUKgVN3kejAR23vBGhq06WJs8IgLSfgepPYZrcCW597VoImlCVojigSCI5x+CnxkMkBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:48:39.124227Z"},"content_sha256":"ac477682f667c7450b0955642761a54619dfb873c74616c62a88623e8d8cf5ae","schema_version":"1.0","event_id":"sha256:ac477682f667c7450b0955642761a54619dfb873c74616c62a88623e8d8cf5ae"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/bundle.json","state_url":"https://pith.science/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T05:48:39Z","links":{"resolver":"https://pith.science/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC","bundle":"https://pith.science/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/bundle.json","state":"https://pith.science/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XCYPDVKYZLHJI6QNGCIL5MK7WC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XCYPDVKYZLHJI6QNGCIL5MK7WC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7a3d37e5b92da9ceb469d41436f299b97b9d6c11442fd5954041890948f53e7c","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-14T06:38:01Z","title_canon_sha256":"30ca09eaaa23ad1607d0b86ae3fe6932e0fa58e81cc8b8d8a9b880cde5027948"},"schema_version":"1.0","source":{"id":"2412.12194","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2412.12194","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"arxiv_version","alias_value":"2412.12194v1","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.12194","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_12","alias_value":"XCYPDVKYZLHJ","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_16","alias_value":"XCYPDVKYZLHJI6QN","created_at":"2026-07-05T09:56:57Z"},{"alias_kind":"pith_short_8","alias_value":"XCYPDVKY","created_at":"2026-07-05T09:56:57Z"}],"graph_snapshots":[{"event_id":"sha256:ac477682f667c7450b0955642761a54619dfb873c74616c62a88623e8d8cf5ae","target":"graph","created_at":"2026-07-05T09:56:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2412.12194/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adoption of machine learning models across industries have turned Neural Networks (DNNs) into a prized Intellectual Property (IP), which needs to be protected from being stolen or being used without authorization. This topic gave rise to multiple watermarking schemes, through which, one can establish the ownership of a model. Watermarking using backdooring is the most well established method available in the literature, with specific works demonstrating the difficulty in removing the watermarks, embedded as backdoors within the weights of the network. However, in our work, we have identified a","authors_text":"Anh Tu Ngo, Anupam Chattopadhyay, Nandish Chattopadhyay, Yi Hao Puah","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-14T06:38:01Z","title":"BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.12194","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cb02440504c92154d1ea865f6df3730130b0b85dc1d37ea51a43a4af7030a92f","target":"record","created_at":"2026-07-05T09:56:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7a3d37e5b92da9ceb469d41436f299b97b9d6c11442fd5954041890948f53e7c","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-12-14T06:38:01Z","title_canon_sha256":"30ca09eaaa23ad1607d0b86ae3fe6932e0fa58e81cc8b8d8a9b880cde5027948"},"schema_version":"1.0","source":{"id":"2412.12194","kind":"arxiv","version":1}},"canonical_sha256":"b8b0f1d558cace947a0d3090beb15fb08f53c26ae2a238f1d0cdeaa8135aa489","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b8b0f1d558cace947a0d3090beb15fb08f53c26ae2a238f1d0cdeaa8135aa489","first_computed_at":"2026-07-05T09:56:57.750760Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:56:57.750760Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wivQanXMyxs9M9e6dCWmgoNpRpwiV3qQH1WmxltZcfxLGko3iOR6okZz6JsO2jYzQm/OmN2hJjbJOO1xQa52CQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:56:57.751185Z","signed_message":"canonical_sha256_bytes"},"source_id":"2412.12194","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cb02440504c92154d1ea865f6df3730130b0b85dc1d37ea51a43a4af7030a92f","sha256:ac477682f667c7450b0955642761a54619dfb873c74616c62a88623e8d8cf5ae"],"state_sha256":"7843646a2fec7dcc2abe0e2230d36e828127d2045e843f6a6cf4561ba9ff7cc2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tb6Nxn3ikk2nkkyhnBdaFJl+IL/b+kbw1oXgiCvRsqPyEwQffo1cn6RMaggZaNE/hwuZRTLg1cU890FQd/0dDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T05:48:39.129051Z","bundle_sha256":"200c7d2c0bc59b9f1336992b288c55f11dd6de510fc84d71e93644d7eed9eb3f"}}