{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:XIBNA2FUQ5VHQLMPWTT35T4Y2Y","short_pith_number":"pith:XIBNA2FU","canonical_record":{"source":{"id":"2309.03466","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"12316a29063fc4ab2de1b7ac721395275a7226a299616efba912af04d435624c","abstract_canon_sha256":"4521b31de13d3c46be631a378e589a0c9b47234727490e7ce0ba7281e4d7c476"},"schema_version":"1.0"},"canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","source":{"kind":"arxiv","id":"2309.03466","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.03466","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"arxiv_version","alias_value":"2309.03466v2","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.03466","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_12","alias_value":"XIBNA2FUQ5VH","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_16","alias_value":"XIBNA2FUQ5VHQLMP","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_8","alias_value":"XIBNA2FU","created_at":"2026-07-05T09:01:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:XIBNA2FUQ5VHQLMPWTT35T4Y2Y","target":"record","payload":{"canonical_record":{"source":{"id":"2309.03466","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"12316a29063fc4ab2de1b7ac721395275a7226a299616efba912af04d435624c","abstract_canon_sha256":"4521b31de13d3c46be631a378e589a0c9b47234727490e7ce0ba7281e4d7c476"},"schema_version":"1.0"},"canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:01:25.507213Z","signature_b64":"FRUGHyuMyajLGI4CiIp8ZXAp937WgJvquQwau69OHvnd3Cdtba+z7Bd41KEN/crxm1pQZHFs7n74igzEV+/ZAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","last_reissued_at":"2026-07-05T09:01:25.506804Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:01:25.506804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.03466","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Drx/MSxrpET+nMIi5beB89hyJuHrnJ2fAddGlThnFwKbYX+U3avq2iNvlm+6OMpGKVRxCxd7m7oyYKtORXJ2AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:04:28.443334Z"},"content_sha256":"ccf6950935293ac0c9f7307efa3dd747e840e4b0d09b6dedfb65652de3ddeb18","schema_version":"1.0","event_id":"sha256:ccf6950935293ac0c9f7307efa3dd747e840e4b0d09b6dedfb65652de3ddeb18"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:XIBNA2FUQ5VHQLMPWTT35T4Y2Y","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Min Yang, Mi Zhang, Wenxuan Li, Xudong Pan, Yifan Lu","submitted_at":"2023-09-07T03:16:03Z","abstract_excerpt":"To protect the intellectual property of well-trained deep neural networks (DNNs), black-box watermarks, which are embedded into the prediction behavior of DNN models on a set of specially-crafted samples and extracted from suspect models using only API access, have gained increasing popularity in both academy and industry. Watermark robustness is usually implemented against attackers who steal the protected model and obfuscate its parameters for watermark removal. However, current robustness evaluations are primarily performed under moderate attacks or unrealistic settings. Existing removal at"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.03466","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.03466/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:01:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TGazneOuUZQCBnxdRhV6eC4BIz+i8gPAs6WLsMyg+8U4JvKlkUOzGTk9QKfs83u7ZzG9Zg9HjhZ8Gk2D9PflAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:04:28.443672Z"},"content_sha256":"d44c4b74810b5937c4c776d6ab373edd47f2c8f30bd620c1c4091b2469d438f5","schema_version":"1.0","event_id":"sha256:d44c4b74810b5937c4c776d6ab373edd47f2c8f30bd620c1c4091b2469d438f5"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/bundle.json","state_url":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:04:28Z","links":{"resolver":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y","bundle":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/bundle.json","state":"https://pith.science/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/state.json","well_known_bundle":"https://pith.science/.well-known/pith/XIBNA2FUQ5VHQLMPWTT35T4Y2Y/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:XIBNA2FUQ5VHQLMPWTT35T4Y2Y","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4521b31de13d3c46be631a378e589a0c9b47234727490e7ce0ba7281e4d7c476","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","title_canon_sha256":"12316a29063fc4ab2de1b7ac721395275a7226a299616efba912af04d435624c"},"schema_version":"1.0","source":{"id":"2309.03466","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.03466","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"arxiv_version","alias_value":"2309.03466v2","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.03466","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_12","alias_value":"XIBNA2FUQ5VH","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_16","alias_value":"XIBNA2FUQ5VHQLMP","created_at":"2026-07-05T09:01:25Z"},{"alias_kind":"pith_short_8","alias_value":"XIBNA2FU","created_at":"2026-07-05T09:01:25Z"}],"graph_snapshots":[{"event_id":"sha256:d44c4b74810b5937c4c776d6ab373edd47f2c8f30bd620c1c4091b2469d438f5","target":"graph","created_at":"2026-07-05T09:01:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.03466/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"To protect the intellectual property of well-trained deep neural networks (DNNs), black-box watermarks, which are embedded into the prediction behavior of DNN models on a set of specially-crafted samples and extracted from suspect models using only API access, have gained increasing popularity in both academy and industry. Watermark robustness is usually implemented against attackers who steal the protected model and obfuscate its parameters for watermark removal. However, current robustness evaluations are primarily performed under moderate attacks or unrealistic settings. Existing removal at","authors_text":"Min Yang, Mi Zhang, Wenxuan Li, Xudong Pan, Yifan Lu","cross_cats":["cs.AI"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","title":"Neural Dehydration: Effective Erasure of Black-box Watermarks from DNNs with Limited Data"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.03466","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ccf6950935293ac0c9f7307efa3dd747e840e4b0d09b6dedfb65652de3ddeb18","target":"record","created_at":"2026-07-05T09:01:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4521b31de13d3c46be631a378e589a0c9b47234727490e7ce0ba7281e4d7c476","cross_cats_sorted":["cs.AI"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-09-07T03:16:03Z","title_canon_sha256":"12316a29063fc4ab2de1b7ac721395275a7226a299616efba912af04d435624c"},"schema_version":"1.0","source":{"id":"2309.03466","kind":"arxiv","version":2}},"canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ba02d068b4876a782d8fb4e7becf98d63f068bf26e96fc9932a5cfa1cef75a8f","first_computed_at":"2026-07-05T09:01:25.506804Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:01:25.506804Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"FRUGHyuMyajLGI4CiIp8ZXAp937WgJvquQwau69OHvnd3Cdtba+z7Bd41KEN/crxm1pQZHFs7n74igzEV+/ZAw==","signature_status":"signed_v1","signed_at":"2026-07-05T09:01:25.507213Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.03466","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ccf6950935293ac0c9f7307efa3dd747e840e4b0d09b6dedfb65652de3ddeb18","sha256:d44c4b74810b5937c4c776d6ab373edd47f2c8f30bd620c1c4091b2469d438f5"],"state_sha256":"9e1c5429d043b608e350bafaeac09f3fa7674b72fecf14b7c60ccaf15fe8642f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tHoVV3tiCWaoxpLoWy8zO0jvB08OFyq414tC6So5Vzh5iXbBKM0UVLP5w6eXeKEhQDXJ9ixl2he+Du9uFD7lCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:04:28.447147Z","bundle_sha256":"a74c8ae5d6c28b90ca43b85e724125a40c833ca64fa9258b6aae75143343cd9e"}}