{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:2F7TYZVOYWIYRJESDQTITJ3GM2","short_pith_number":"pith:2F7TYZVO","canonical_record":{"source":{"id":"1908.07000","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-19T18:01:48Z","cross_cats_sorted":[],"title_canon_sha256":"5a72efc01ad087e1c95225d55ba288bb7e9cfa76526e618a9cf62890b08b3797","abstract_canon_sha256":"88ba5611be6e9b74d8406e1250615454c25521be0603e6c2a8809710f7636fa4"},"schema_version":"1.0"},"canonical_sha256":"d17f3c66aec59188a4921c2689a7666696567ba9b544e97982988adbaabb8442","source":{"kind":"arxiv","id":"1908.07000","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07000","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07000v3","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07000","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_12","alias_value":"2F7TYZVOYWIY","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_16","alias_value":"2F7TYZVOYWIYRJES","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_8","alias_value":"2F7TYZVO","created_at":"2026-07-05T00:23:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:2F7TYZVOYWIYRJESDQTITJ3GM2","target":"record","payload":{"canonical_record":{"source":{"id":"1908.07000","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-19T18:01:48Z","cross_cats_sorted":[],"title_canon_sha256":"5a72efc01ad087e1c95225d55ba288bb7e9cfa76526e618a9cf62890b08b3797","abstract_canon_sha256":"88ba5611be6e9b74d8406e1250615454c25521be0603e6c2a8809710f7636fa4"},"schema_version":"1.0"},"canonical_sha256":"d17f3c66aec59188a4921c2689a7666696567ba9b544e97982988adbaabb8442","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:23:06.771133Z","signature_b64":"ZP1XI/eztfcqczBAGg31itze2isYEJQa9yCgY/y0UH2MAgv2YoamDF1rbsUYS1l96VIFYOIbq3L27GvvriBCBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d17f3c66aec59188a4921c2689a7666696567ba9b544e97982988adbaabb8442","last_reissued_at":"2026-07-05T00:23:06.770679Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:23:06.770679Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1908.07000","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:23:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f2stK8I8m9Y348CtemO63qp/PoSiHbJkvagfdYO/Vky8TOpUHXyoIvDC03kgpTpneOuSpERLVYUDeMvnjTJQBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:43:29.878366Z"},"content_sha256":"e51e8f7fb5e0a0ad81d2a7c01b91642c08662093f8d5cc5ffa4725274c531411","schema_version":"1.0","event_id":"sha256:e51e8f7fb5e0a0ad81d2a7c01b91642c08662093f8d5cc5ffa4725274c531411"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:2F7TYZVOYWIYRJESDQTITJ3GM2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"David Evans, Fnu Suya, Jianfeng Chi, Yuan Tian","submitted_at":"2019-08-19T18:01:48Z","abstract_excerpt":"We study adversarial examples in a black-box setting where the adversary only has API access to the target model and each query is expensive. Prior work on black-box adversarial examples follows one of two main strategies: (1) transfer attacks use white-box attacks on local models to find candidate adversarial examples that transfer to the target model, and (2) optimization-based attacks use queries to the target model and apply optimization techniques to search for adversarial examples. We propose hybrid attacks that combine both strategies, using candidate adversarial examples from local mod"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07000","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1908.07000/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:23:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ANAfZNi/jt5O0jNH9WrBh6SDcngy4T4nlRFppj6G1rfvek+jpTBO02c3HshzWj8KsTVb4z/86xzQVpokfPG8Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T11:43:29.878964Z"},"content_sha256":"5a5b72c563b613d97a3529fe05d52a8ea715dd4a58f8b1b574ab0e0553807c42","schema_version":"1.0","event_id":"sha256:5a5b72c563b613d97a3529fe05d52a8ea715dd4a58f8b1b574ab0e0553807c42"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/bundle.json","state_url":"https://pith.science/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T11:43:29Z","links":{"resolver":"https://pith.science/pith/2F7TYZVOYWIYRJESDQTITJ3GM2","bundle":"https://pith.science/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/bundle.json","state":"https://pith.science/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2F7TYZVOYWIYRJESDQTITJ3GM2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:2F7TYZVOYWIYRJESDQTITJ3GM2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"88ba5611be6e9b74d8406e1250615454c25521be0603e6c2a8809710f7636fa4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-19T18:01:48Z","title_canon_sha256":"5a72efc01ad087e1c95225d55ba288bb7e9cfa76526e618a9cf62890b08b3797"},"schema_version":"1.0","source":{"id":"1908.07000","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1908.07000","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"arxiv_version","alias_value":"1908.07000v3","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1908.07000","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_12","alias_value":"2F7TYZVOYWIY","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_16","alias_value":"2F7TYZVOYWIYRJES","created_at":"2026-07-05T00:23:06Z"},{"alias_kind":"pith_short_8","alias_value":"2F7TYZVO","created_at":"2026-07-05T00:23:06Z"}],"graph_snapshots":[{"event_id":"sha256:5a5b72c563b613d97a3529fe05d52a8ea715dd4a58f8b1b574ab0e0553807c42","target":"graph","created_at":"2026-07-05T00:23:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1908.07000/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We study adversarial examples in a black-box setting where the adversary only has API access to the target model and each query is expensive. Prior work on black-box adversarial examples follows one of two main strategies: (1) transfer attacks use white-box attacks on local models to find candidate adversarial examples that transfer to the target model, and (2) optimization-based attacks use queries to the target model and apply optimization techniques to search for adversarial examples. We propose hybrid attacks that combine both strategies, using candidate adversarial examples from local mod","authors_text":"David Evans, Fnu Suya, Jianfeng Chi, Yuan Tian","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-19T18:01:48Z","title":"Hybrid Batch Attacks: Finding Black-box Adversarial Examples with Limited Queries"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1908.07000","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e51e8f7fb5e0a0ad81d2a7c01b91642c08662093f8d5cc5ffa4725274c531411","target":"record","created_at":"2026-07-05T00:23:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"88ba5611be6e9b74d8406e1250615454c25521be0603e6c2a8809710f7636fa4","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-08-19T18:01:48Z","title_canon_sha256":"5a72efc01ad087e1c95225d55ba288bb7e9cfa76526e618a9cf62890b08b3797"},"schema_version":"1.0","source":{"id":"1908.07000","kind":"arxiv","version":3}},"canonical_sha256":"d17f3c66aec59188a4921c2689a7666696567ba9b544e97982988adbaabb8442","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d17f3c66aec59188a4921c2689a7666696567ba9b544e97982988adbaabb8442","first_computed_at":"2026-07-05T00:23:06.770679Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:23:06.770679Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZP1XI/eztfcqczBAGg31itze2isYEJQa9yCgY/y0UH2MAgv2YoamDF1rbsUYS1l96VIFYOIbq3L27GvvriBCBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T00:23:06.771133Z","signed_message":"canonical_sha256_bytes"},"source_id":"1908.07000","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e51e8f7fb5e0a0ad81d2a7c01b91642c08662093f8d5cc5ffa4725274c531411","sha256:5a5b72c563b613d97a3529fe05d52a8ea715dd4a58f8b1b574ab0e0553807c42"],"state_sha256":"78008337f366762c00f9d6d8dd796ddef175c0711f49129216da6c1d54864438"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZaZaWgvyFR5a8AjrsQreIPgQ8HtdemPq2RvzVLKEJI3njq1ihJvQtJfHC4cAJjcVnx/KE+Z9L7/VlZjqRmvWCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T11:43:29.882681Z","bundle_sha256":"016621525b45e3bfd3e6a3b03be0b399bf52cc1204829536f09dd3fc5ecfa902"}}