{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:XEE6Z543TWOTBJ6ZGBZITS5CX5","short_pith_number":"pith:XEE6Z543","canonical_record":{"source":{"id":"2404.00108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-29T18:52:33Z","cross_cats_sorted":[],"title_canon_sha256":"c5ff1815e9a514c8af2228cead43ab0db73fd23e00ee5ce181271c06432a5c41","abstract_canon_sha256":"d1caa0da328bad7a0154e893b0d812e0a50e11d3e065b67d781d2e21ad20fd03"},"schema_version":"1.0"},"canonical_sha256":"b909ecf79b9d9d30a7d9307289cba2bf7ddcc2f08410b8330a56a486300ccb93","source":{"kind":"arxiv","id":"2404.00108","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.00108","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.00108v1","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.00108","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_12","alias_value":"XEE6Z543TWOT","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_16","alias_value":"XEE6Z543TWOTBJ6Z","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_8","alias_value":"XEE6Z543","created_at":"2026-07-05T08:02:27Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:XEE6Z543TWOTBJ6ZGBZITS5CX5","target":"record","payload":{"canonical_record":{"source":{"id":"2404.00108","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-29T18:52:33Z","cross_cats_sorted":[],"title_canon_sha256":"c5ff1815e9a514c8af2228cead43ab0db73fd23e00ee5ce181271c06432a5c41","abstract_canon_sha256":"d1caa0da328bad7a0154e893b0d812e0a50e11d3e065b67d781d2e21ad20fd03"},"schema_version":"1.0"},"canonical_sha256":"b909ecf79b9d9d30a7d9307289cba2bf7ddcc2f08410b8330a56a486300ccb93","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:02:27.925701Z","signature_b64":"Ga8NC1ubThhdnitrXApYdoaKJzmItEM9TAW5mvJsKQCGdfxz3VxmT9gLerkQG7h3xxhPIJdBFMY2JHPrfrAmCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b909ecf79b9d9d30a7d9307289cba2bf7ddcc2f08410b8330a56a486300ccb93","last_reissued_at":"2026-07-05T08:02:27.925294Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:02:27.925294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2404.00108","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:02:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1o4ZbMdc/1udK2T7B3jihMDe+uM7LcbmzmXfKmIjyBUyR+E8oXEN2EsYpC6u873zEvQffgBugo194tZfjvCdCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:27:01.517083Z"},"content_sha256":"cf857363b3127dbca9ff598ceacdba30e063f30a3e2e2352091aded98a878d34","schema_version":"1.0","event_id":"sha256:cf857363b3127dbca9ff598ceacdba30e063f30a3e2e2352091aded98a878d34"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:XEE6Z543TWOTBJ6ZGBZITS5CX5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Efficient Data-Free Model Stealing with Label Diversity","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Yiyong Liu","submitted_at":"2024-03-29T18:52:33Z","abstract_excerpt":"Machine learning as a Service (MLaaS) allows users to query the machine learning model in an API manner, which provides an opportunity for users to enjoy the benefits brought by the high-performance model trained on valuable data. This interface boosts the proliferation of machine learning based applications, while on the other hand, it introduces the attack surface for model stealing attacks. Existing model stealing attacks have relaxed their attack assumptions to the data-free setting, while keeping the effectiveness. However, these methods are complex and consist of several components, whic"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.00108","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2404.00108/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:02:27Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YQrA9uepuJ4JBcvdgTuHusuN2aKEOOUAcu+7WGb4TXqvF8RsPLTcrNrs8EbdiYMHmgb0PXJ6Aih6vBjJ6duVCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-23T23:27:01.517571Z"},"content_sha256":"a3d7a724bbf7c53d913b44cee2e31ea0b548c2cab707593e1e9114fce7e8086f","schema_version":"1.0","event_id":"sha256:a3d7a724bbf7c53d913b44cee2e31ea0b548c2cab707593e1e9114fce7e8086f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/bundle.json","state_url":"https://pith.science/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-23T23:27:01Z","links":{"resolver":"https://pith.science/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5","bundle":"https://pith.science/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/bundle.json","state":"https://pith.science/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XEE6Z543TWOTBJ6ZGBZITS5CX5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:XEE6Z543TWOTBJ6ZGBZITS5CX5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d1caa0da328bad7a0154e893b0d812e0a50e11d3e065b67d781d2e21ad20fd03","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-29T18:52:33Z","title_canon_sha256":"c5ff1815e9a514c8af2228cead43ab0db73fd23e00ee5ce181271c06432a5c41"},"schema_version":"1.0","source":{"id":"2404.00108","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2404.00108","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"arxiv_version","alias_value":"2404.00108v1","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2404.00108","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_12","alias_value":"XEE6Z543TWOT","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_16","alias_value":"XEE6Z543TWOTBJ6Z","created_at":"2026-07-05T08:02:27Z"},{"alias_kind":"pith_short_8","alias_value":"XEE6Z543","created_at":"2026-07-05T08:02:27Z"}],"graph_snapshots":[{"event_id":"sha256:a3d7a724bbf7c53d913b44cee2e31ea0b548c2cab707593e1e9114fce7e8086f","target":"graph","created_at":"2026-07-05T08:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2404.00108/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning as a Service (MLaaS) allows users to query the machine learning model in an API manner, which provides an opportunity for users to enjoy the benefits brought by the high-performance model trained on valuable data. This interface boosts the proliferation of machine learning based applications, while on the other hand, it introduces the attack surface for model stealing attacks. Existing model stealing attacks have relaxed their attack assumptions to the data-free setting, while keeping the effectiveness. However, these methods are complex and consist of several components, whic","authors_text":"Michael Backes, Rui Wen, Yang Zhang, Yiyong Liu","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-29T18:52:33Z","title":"Efficient Data-Free Model Stealing with Label Diversity"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2404.00108","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cf857363b3127dbca9ff598ceacdba30e063f30a3e2e2352091aded98a878d34","target":"record","created_at":"2026-07-05T08:02:27Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d1caa0da328bad7a0154e893b0d812e0a50e11d3e065b67d781d2e21ad20fd03","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-03-29T18:52:33Z","title_canon_sha256":"c5ff1815e9a514c8af2228cead43ab0db73fd23e00ee5ce181271c06432a5c41"},"schema_version":"1.0","source":{"id":"2404.00108","kind":"arxiv","version":1}},"canonical_sha256":"b909ecf79b9d9d30a7d9307289cba2bf7ddcc2f08410b8330a56a486300ccb93","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b909ecf79b9d9d30a7d9307289cba2bf7ddcc2f08410b8330a56a486300ccb93","first_computed_at":"2026-07-05T08:02:27.925294Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:02:27.925294Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ga8NC1ubThhdnitrXApYdoaKJzmItEM9TAW5mvJsKQCGdfxz3VxmT9gLerkQG7h3xxhPIJdBFMY2JHPrfrAmCA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:02:27.925701Z","signed_message":"canonical_sha256_bytes"},"source_id":"2404.00108","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cf857363b3127dbca9ff598ceacdba30e063f30a3e2e2352091aded98a878d34","sha256:a3d7a724bbf7c53d913b44cee2e31ea0b548c2cab707593e1e9114fce7e8086f"],"state_sha256":"567e2298efa6e8ec9f7780ae287e7a1bc955a9e5fd2669a4edd22ad024e72e5d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iRGVzbYTWb+eZRQ0OcIL6p+cas9fVKdjxtg+CrzznjouPqyU3N1ZwYIv4MXOg3v5Kl9PVwTlUyU/UEOjRnnGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-23T23:27:01.521364Z","bundle_sha256":"a1bbe7b3bdef0dc54ae68bdbbc29422fa2505a073910b6caf1ae706860a45f67"}}