{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:YUB52U6QI5ZNJ2FAVX3OWU5NYA","short_pith_number":"pith:YUB52U6Q","schema_version":"1.0","canonical_sha256":"c503dd53d04772d4e8a0adf6eb53adc014937e51b81c5886a8fcd3e72c85161d","source":{"kind":"arxiv","id":"2205.00199","version":2},"attestation_state":"computed","paper":{"title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Min Yang, Mi Zhang, Xudong Pan, Yifan Yan, Yining Wang","submitted_at":"2022-04-30T08:33:32Z","abstract_excerpt":"Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret identity messages into the prediction behaviors or the internals (e.g., weights and neuron activation) of the target model. Sacrificing less functionality and involving more knowledge about the target model, the latter branch of watermarking schemes (i.e., white-box model watermarking) is claimed to be accurate, credible and secure against most known watermark rem"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2205.00199","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CR","submitted_at":"2022-04-30T08:33:32Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"f52812b060e42609bdff42ecc05ff5d717c962496489cab368c4159939ca4b74","abstract_canon_sha256":"dfca18b315880a2dc7938bc2919b18317be39f2b8e3a99f2d9abecf9d841daa7"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:24:40.443103Z","signature_b64":"3XXI1+6nurkZ2xsJgoaFBBFlJCrebazOyqTgifc/r+LC5Scibovi8ZKEOrhGkMw/BiwVj2G8I8KZDPwOBeR9CQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c503dd53d04772d4e8a0adf6eb53adc014937e51b81c5886a8fcd3e72c85161d","last_reissued_at":"2026-07-05T04:24:40.442671Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:24:40.442671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Cracking White-box DNN Watermarks via Invariant Neuron Transforms","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Min Yang, Mi Zhang, Xudong Pan, Yifan Yan, Yining Wang","submitted_at":"2022-04-30T08:33:32Z","abstract_excerpt":"Recently, how to protect the Intellectual Property (IP) of deep neural networks (DNN) becomes a major concern for the AI industry. To combat potential model piracy, recent works explore various watermarking strategies to embed secret identity messages into the prediction behaviors or the internals (e.g., weights and neuron activation) of the target model. Sacrificing less functionality and involving more knowledge about the target model, the latter branch of watermarking schemes (i.e., white-box model watermarking) is claimed to be accurate, credible and secure against most known watermark rem"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.00199","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.00199/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2205.00199","created_at":"2026-07-05T04:24:40.442731+00:00"},{"alias_kind":"arxiv_version","alias_value":"2205.00199v2","created_at":"2026-07-05T04:24:40.442731+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.00199","created_at":"2026-07-05T04:24:40.442731+00:00"},{"alias_kind":"pith_short_12","alias_value":"YUB52U6QI5ZN","created_at":"2026-07-05T04:24:40.442731+00:00"},{"alias_kind":"pith_short_16","alias_value":"YUB52U6QI5ZNJ2FA","created_at":"2026-07-05T04:24:40.442731+00:00"},{"alias_kind":"pith_short_8","alias_value":"YUB52U6Q","created_at":"2026-07-05T04:24:40.442731+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA","json":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA.json","graph_json":"https://pith.science/api/pith-number/YUB52U6QI5ZNJ2FAVX3OWU5NYA/graph.json","events_json":"https://pith.science/api/pith-number/YUB52U6QI5ZNJ2FAVX3OWU5NYA/events.json","paper":"https://pith.science/paper/YUB52U6Q"},"agent_actions":{"view_html":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA","download_json":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA.json","view_paper":"https://pith.science/paper/YUB52U6Q","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2205.00199&json=true","fetch_graph":"https://pith.science/api/pith-number/YUB52U6QI5ZNJ2FAVX3OWU5NYA/graph.json","fetch_events":"https://pith.science/api/pith-number/YUB52U6QI5ZNJ2FAVX3OWU5NYA/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA/action/timestamp_anchor","attest_storage":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA/action/storage_attestation","attest_author":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA/action/author_attestation","sign_citation":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA/action/citation_signature","submit_replication":"https://pith.science/pith/YUB52U6QI5ZNJ2FAVX3OWU5NYA/action/replication_record"}},"created_at":"2026-07-05T04:24:40.442731+00:00","updated_at":"2026-07-05T04:24:40.442731+00:00"}