{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:XIBNA2FUQ5VHQLMPWTT35T4Y2Y","short_pith_number":"pith:XIBNA2FU","schema_version":"1.0","canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","source":{"kind":"arxiv","id":"2309.03466","version":2},"attestation_state":"computed","paper":{"title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Min Yang, Mi Zhang, Wenxuan Li, Xudong Pan, Yifan Lu","submitted_at":"2023-09-07T03:16:03Z","abstract_excerpt":"To protect the intellectual property of well-trained deep neural networks (DNNs), black-box watermarks, which are embedded into the prediction behavior of DNN models on a set of specially-crafted samples and extracted from suspect models using only API access, have gained increasing popularity in both academy and industry. Watermark robustness is usually implemented against attackers who steal the protected model and obfuscate its parameters for watermark removal. However, current robustness evaluations are primarily performed under moderate attacks or unrealistic settings. Existing removal at"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2309.03466","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"12316a29063fc4ab2de1b7ac721395275a7226a299616efba912af04d435624c","abstract_canon_sha256":"4521b31de13d3c46be631a378e589a0c9b47234727490e7ce0ba7281e4d7c476"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:01:25.507213Z","signature_b64":"FRUGHyuMyajLGI4CiIp8ZXAp937WgJvquQwau69OHvnd3Cdtba+z7Bd41KEN/crxm1pQZHFs7n74igzEV+/ZAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","last_reissued_at":"2026-07-05T09:01:25.506804Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:01:25.506804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Min Yang, Mi Zhang, Wenxuan Li, Xudong Pan, Yifan Lu","submitted_at":"2023-09-07T03:16:03Z","abstract_excerpt":"To protect the intellectual property of well-trained deep neural networks (DNNs), black-box watermarks, which are embedded into the prediction behavior of DNN models on a set of specially-crafted samples and extracted from suspect models using only API access, have gained increasing popularity in both academy and industry. Watermark robustness is usually implemented against attackers who steal the protected model and obfuscate its parameters for watermark removal. However, current robustness evaluations are primarily performed under moderate attacks or unrealistic settings. Existing removal at"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.03466","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.03466/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2309.03466","created_at":"2026-07-05T09:01:25.506859+00:00"},{"alias_kind":"arxiv_version","alias_value":"2309.03466v2","created_at":"2026-07-05T09:01:25.506859+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.03466","created_at":"2026-07-05T09:01:25.506859+00:00"},{"alias_kind":"pith_short_12","alias_value":"XIBNA2FUQ5VH","created_at":"2026-07-05T09:01:25.506859+00:00"},{"alias_kind":"pith_short_16","alias_value":"XIBNA2FUQ5VHQLMP","created_at":"2026-07-05T09:01:25.506859+00:00"},{"alias_kind":"pith_short_8","alias_value":"XIBNA2FU","created_at":"2026-07-05T09:01:25.506859+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y","json":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y.json","graph_json":"https://pith.science/api/pith-number/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/graph.json","events_json":"https://pith.science/api/pith-number/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/events.json","paper":"https://pith.science/paper/XIBNA2FU"},"agent_actions":{"view_html":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y","download_json":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y.json","view_paper":"https://pith.science/paper/XIBNA2FU","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2309.03466&json=true","fetch_graph":"https://pith.science/api/pith-number/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/graph.json","fetch_events":"https://pith.science/api/pith-number/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/action/timestamp_anchor","attest_storage":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/action/storage_attestation","attest_author":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/action/author_attestation","sign_citation":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/action/citation_signature","submit_replication":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/action/replication_record"}},"created_at":"2026-07-05T09:01:25.506859+00:00","updated_at":"2026-07-05T09:01:25.506859+00:00"}