{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2BJJTAR2EQUDE5MV7Q67HD5YPQ","short_pith_number":"pith:2BJJTAR2","canonical_record":{"source":{"id":"2311.17332","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:17:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"657a0c6eff0fcd28501d997a6cd44f48f1dc35b3cba13f53c53a2a7348c86f49","abstract_canon_sha256":"3b8ba3773e644020ec01e5478656045fe6f93c74d93cb1ab39b9fc7b8a6da91b"},"schema_version":"1.0"},"canonical_sha256":"d05299823a2428327595fc3df38fb87c1be380605dfcc2bbc16572f4e585052d","source":{"kind":"arxiv","id":"2311.17332","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.17332","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"arxiv_version","alias_value":"2311.17332v1","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.17332","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_12","alias_value":"2BJJTAR2EQUD","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_16","alias_value":"2BJJTAR2EQUDE5MV","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_8","alias_value":"2BJJTAR2","created_at":"2026-07-05T07:18:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2BJJTAR2EQUDE5MV7Q67HD5YPQ","target":"record","payload":{"canonical_record":{"source":{"id":"2311.17332","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:17:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"657a0c6eff0fcd28501d997a6cd44f48f1dc35b3cba13f53c53a2a7348c86f49","abstract_canon_sha256":"3b8ba3773e644020ec01e5478656045fe6f93c74d93cb1ab39b9fc7b8a6da91b"},"schema_version":"1.0"},"canonical_sha256":"d05299823a2428327595fc3df38fb87c1be380605dfcc2bbc16572f4e585052d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:18:01.607189Z","signature_b64":"xIbbJH8B6ug62dsiIiHYRzVt+Kc0QqVeEtsMfCe+4x4piWe27WD7WSgAz5/4sIlij4AKmFeQtGRO869+eY5fBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d05299823a2428327595fc3df38fb87c1be380605dfcc2bbc16572f4e585052d","last_reissued_at":"2026-07-05T07:18:01.606551Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:18:01.606551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2311.17332","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tsAN31V42//Hsq3oA8Z4eR+uEy7SXyBHeJq5xceXhowkfoUpK/1vRXJddQNsFA96fHlG1wm2+ZgXyC1GbIc0CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T11:13:16.401161Z"},"content_sha256":"f09038e74dfe2cde3f504828cd443cfb36cc0ff3e45126cb2700719fa1a8a455","schema_version":"1.0","event_id":"sha256:f09038e74dfe2cde3f504828cd443cfb36cc0ff3e45126cb2700719fa1a8a455"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2BJJTAR2EQUDE5MV7Q67HD5YPQ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Changhai Nie, Feng Han, Furao Shen, Jian Zhao, Xiaoliang Liu","submitted_at":"2023-11-29T03:17:14Z","abstract_excerpt":"Face recognition (FR) technology plays a crucial role in various applications, but its vulnerability to adversarial attacks poses significant security concerns. Existing research primarily focuses on transferability to different FR models, overlooking the direct transferability to victim's face images, which is a practical threat in real-world scenarios. In this study, we propose a novel adversarial attack method that considers both the transferability to the FR model and the victim's face image, called NeRFTAP. Leveraging NeRF-based 3D-GAN, we generate new view face images for the source and "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.17332","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.17332/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:18:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"F0w4c1pSBP9wDOuCtKx17AjkmIEtAarsKEM44Cibri2Zjt6xZY/pC5C+5w7AUFwYZsz9NOVVqYl6h9dZj6K/Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T11:13:16.402082Z"},"content_sha256":"3c5834164ee2a8d7fa789a75821de70b29cefa6da839c055f19c7c3612fea0b4","schema_version":"1.0","event_id":"sha256:3c5834164ee2a8d7fa789a75821de70b29cefa6da839c055f19c7c3612fea0b4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/bundle.json","state_url":"https://pith.science/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T11:13:16Z","links":{"resolver":"https://pith.science/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ","bundle":"https://pith.science/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/bundle.json","state":"https://pith.science/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2BJJTAR2EQUDE5MV7Q67HD5YPQ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2BJJTAR2EQUDE5MV7Q67HD5YPQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3b8ba3773e644020ec01e5478656045fe6f93c74d93cb1ab39b9fc7b8a6da91b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:17:14Z","title_canon_sha256":"657a0c6eff0fcd28501d997a6cd44f48f1dc35b3cba13f53c53a2a7348c86f49"},"schema_version":"1.0","source":{"id":"2311.17332","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2311.17332","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"arxiv_version","alias_value":"2311.17332v1","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.17332","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_12","alias_value":"2BJJTAR2EQUD","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_16","alias_value":"2BJJTAR2EQUDE5MV","created_at":"2026-07-05T07:18:01Z"},{"alias_kind":"pith_short_8","alias_value":"2BJJTAR2","created_at":"2026-07-05T07:18:01Z"}],"graph_snapshots":[{"event_id":"sha256:3c5834164ee2a8d7fa789a75821de70b29cefa6da839c055f19c7c3612fea0b4","target":"graph","created_at":"2026-07-05T07:18:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2311.17332/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Face recognition (FR) technology plays a crucial role in various applications, but its vulnerability to adversarial attacks poses significant security concerns. Existing research primarily focuses on transferability to different FR models, overlooking the direct transferability to victim's face images, which is a practical threat in real-world scenarios. In this study, we propose a novel adversarial attack method that considers both the transferability to the FR model and the victim's face image, called NeRFTAP. Leveraging NeRF-based 3D-GAN, we generate new view face images for the source and ","authors_text":"Changhai Nie, Feng Han, Furao Shen, Jian Zhao, Xiaoliang Liu","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:17:14Z","title":"NeRFTAP: Enhancing Transferability of Adversarial Patches on Face Recognition using Neural Radiance Fields"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.17332","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f09038e74dfe2cde3f504828cd443cfb36cc0ff3e45126cb2700719fa1a8a455","target":"record","created_at":"2026-07-05T07:18:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3b8ba3773e644020ec01e5478656045fe6f93c74d93cb1ab39b9fc7b8a6da91b","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-11-29T03:17:14Z","title_canon_sha256":"657a0c6eff0fcd28501d997a6cd44f48f1dc35b3cba13f53c53a2a7348c86f49"},"schema_version":"1.0","source":{"id":"2311.17332","kind":"arxiv","version":1}},"canonical_sha256":"d05299823a2428327595fc3df38fb87c1be380605dfcc2bbc16572f4e585052d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d05299823a2428327595fc3df38fb87c1be380605dfcc2bbc16572f4e585052d","first_computed_at":"2026-07-05T07:18:01.606551Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:18:01.606551Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xIbbJH8B6ug62dsiIiHYRzVt+Kc0QqVeEtsMfCe+4x4piWe27WD7WSgAz5/4sIlij4AKmFeQtGRO869+eY5fBw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:18:01.607189Z","signed_message":"canonical_sha256_bytes"},"source_id":"2311.17332","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f09038e74dfe2cde3f504828cd443cfb36cc0ff3e45126cb2700719fa1a8a455","sha256:3c5834164ee2a8d7fa789a75821de70b29cefa6da839c055f19c7c3612fea0b4"],"state_sha256":"02f5f311aadfa007d2d21ec4b27b173b8734041b22294054ae24a339d199d5c2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"M7aO90Eg01sVbhPdIfnXf6p0Ewin7fMyKq7c0mJhOHS3f99G58d1zYLb13bBGy5Z3m2/sdmYtA08DrixhgFPAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T11:13:16.407272Z","bundle_sha256":"95347d8ca79af1196d156170a4fdf734996df25ce70d4cda058b5985ef849168"}}