{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XFIUMF7VDNABPU37KVDGRHT4KY","short_pith_number":"pith:XFIUMF7V","canonical_record":{"source":{"id":"2311.09994","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T16:09:44Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3122dad9fd2b7949963787594dc0284030dd62c9cff9edaae31c953895483ace","abstract_canon_sha256":"fda9fbed99d9371b2387d56f8a5e8bc2fe6bf85db7289d3b8502a62e4f281692"},"schema_version":"1.0"},"canonical_sha256":"b9514617f51b4017d37f5546689e7c5604b2ac8fd4f07e5e7654665e2e387249","source":{"kind":"arxiv","id":"2311.09994","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09994","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09994v2","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09994","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_12","alias_value":"XFIUMF7VDNAB","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_16","alias_value":"XFIUMF7VDNABPU37","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_8","alias_value":"XFIUMF7V","created_at":"2026-07-05T08:00:38Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XFIUMF7VDNABPU37KVDGRHT4KY","target":"record","payload":{"canonical_record":{"source":{"id":"2311.09994","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T16:09:44Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"3122dad9fd2b7949963787594dc0284030dd62c9cff9edaae31c953895483ace","abstract_canon_sha256":"fda9fbed99d9371b2387d56f8a5e8bc2fe6bf85db7289d3b8502a62e4f281692"},"schema_version":"1.0"},"canonical_sha256":"b9514617f51b4017d37f5546689e7c5604b2ac8fd4f07e5e7654665e2e387249","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:00:38.327043Z","signature_b64":"07joIHMUXGA1YiLuMu1lHTXE2MjkpI2UZ9aMjxwgL9wjjFytYu7mkA24de0BRCYpbEz9BTBm8rMPWMKxeYzlCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"b9514617f51b4017d37f5546689e7c5604b2ac8fd4f07e5e7654665e2e387249","last_reissued_at":"2026-07-05T08:00:38.326589Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:00:38.326589Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.09994","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:00:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Fj9qQKCVENnxc2fP9sWJ7x0d4R08wvutRRSRE2CUKhaYZ+sBlS67HLdD5DsM+qW3sQwT30bJeYpeM6l0QaUeCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T19:13:35.214642Z"},"content_sha256":"5bf4ec08601af8b7c4a4ebf298414dd45d4846b0094181d574e557f7c7e8b540","schema_version":"1.0","event_id":"sha256:5bf4ec08601af8b7c4a4ebf298414dd45d4846b0094181d574e557f7c7e8b540"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XFIUMF7VDNABPU37KVDGRHT4KY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards more Practical Threat Models in Artificial Intelligence Security","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Alexandre Alahi, Kathrin Grosse, Lukas Bieringer, Tarek Richard Besold","submitted_at":"2023-11-16T16:09:44Z","abstract_excerpt":"Recent works have identified a gap between research and practice in artificial intelligence security: threats studied in academia do not always reflect the practical use and security risks of AI. For example, while models are often studied in isolation, they form part of larger ML pipelines in practice. Recent works also brought forward that adversarial manipulations introduced by academic attacks are impractical. We take a first step towards describing the full extent of this disparity. To this end, we revisit the threat models of the six most studied attacks in AI security research and match"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09994","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.09994/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:00:38Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SyhHPKbeLwdftD3GXrEEEupgBapBBGwmVWsgRg9MZIhnJduUmoFr1/9m5UNtBgwsAqSV8H/mpQq34Oym+7vrDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T19:13:35.215203Z"},"content_sha256":"61e750bb45fe99dbc8712ce9acce9b3d875d94048b08e7ae3321893ee72598ab","schema_version":"1.0","event_id":"sha256:61e750bb45fe99dbc8712ce9acce9b3d875d94048b08e7ae3321893ee72598ab"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XFIUMF7VDNABPU37KVDGRHT4KY/bundle.json","state_url":"https://pith.science/pith/XFIUMF7VDNABPU37KVDGRHT4KY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XFIUMF7VDNABPU37KVDGRHT4KY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T19:13:35Z","links":{"resolver":"https://pith.science/pith/XFIUMF7VDNABPU37KVDGRHT4KY","bundle":"https://pith.science/pith/XFIUMF7VDNABPU37KVDGRHT4KY/bundle.json","state":"https://pith.science/pith/XFIUMF7VDNABPU37KVDGRHT4KY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XFIUMF7VDNABPU37KVDGRHT4KY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XFIUMF7VDNABPU37KVDGRHT4KY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"fda9fbed99d9371b2387d56f8a5e8bc2fe6bf85db7289d3b8502a62e4f281692","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T16:09:44Z","title_canon_sha256":"3122dad9fd2b7949963787594dc0284030dd62c9cff9edaae31c953895483ace"},"schema_version":"1.0","source":{"id":"2311.09994","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.09994","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"arxiv_version","alias_value":"2311.09994v2","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.09994","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_12","alias_value":"XFIUMF7VDNAB","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_16","alias_value":"XFIUMF7VDNABPU37","created_at":"2026-07-05T08:00:38Z"},{"alias_kind":"pith_short_8","alias_value":"XFIUMF7V","created_at":"2026-07-05T08:00:38Z"}],"graph_snapshots":[{"event_id":"sha256:61e750bb45fe99dbc8712ce9acce9b3d875d94048b08e7ae3321893ee72598ab","target":"graph","created_at":"2026-07-05T08:00:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.09994/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works have identified a gap between research and practice in artificial intelligence security: threats studied in academia do not always reflect the practical use and security risks of AI. For example, while models are often studied in isolation, they form part of larger ML pipelines in practice. Recent works also brought forward that adversarial manipulations introduced by academic attacks are impractical. We take a first step towards describing the full extent of this disparity. To this end, we revisit the threat models of the six most studied attacks in AI security research and match","authors_text":"Alexandre Alahi, Kathrin Grosse, Lukas Bieringer, Tarek Richard Besold","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T16:09:44Z","title":"Towards more Practical Threat Models in Artificial Intelligence Security"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.09994","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5bf4ec08601af8b7c4a4ebf298414dd45d4846b0094181d574e557f7c7e8b540","target":"record","created_at":"2026-07-05T08:00:38Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"fda9fbed99d9371b2387d56f8a5e8bc2fe6bf85db7289d3b8502a62e4f281692","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-11-16T16:09:44Z","title_canon_sha256":"3122dad9fd2b7949963787594dc0284030dd62c9cff9edaae31c953895483ace"},"schema_version":"1.0","source":{"id":"2311.09994","kind":"arxiv","version":2}},"canonical_sha256":"b9514617f51b4017d37f5546689e7c5604b2ac8fd4f07e5e7654665e2e387249","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"b9514617f51b4017d37f5546689e7c5604b2ac8fd4f07e5e7654665e2e387249","first_computed_at":"2026-07-05T08:00:38.326589Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:00:38.326589Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"07joIHMUXGA1YiLuMu1lHTXE2MjkpI2UZ9aMjxwgL9wjjFytYu7mkA24de0BRCYpbEz9BTBm8rMPWMKxeYzlCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:00:38.327043Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.09994","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5bf4ec08601af8b7c4a4ebf298414dd45d4846b0094181d574e557f7c7e8b540","sha256:61e750bb45fe99dbc8712ce9acce9b3d875d94048b08e7ae3321893ee72598ab"],"state_sha256":"ddff699f603c4ac31656e2be535e0fd9cd22b7570ca4bd9ddbdd13030ebd13ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gaa+AjU8+5HYLZ6GoOLVTbnCDHw7tye6Fk0wywmiM7tauWoWKlTMw2MNADR5C7C1jAFgWaYPjyiAyI5N14xRDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T19:13:35.218818Z","bundle_sha256":"8e6c407d3392a39491ba83ac4cf149c9bd11e5abad891ccbfb983ec03b9bc96a"}}