{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:2GEHOLJYGQ65URDVN6DURBNJEH","short_pith_number":"pith:2GEHOLJY","canonical_record":{"source":{"id":"2312.14440","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-12-22T05:10:32Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"04934e70c39ae7f374279d86e3feb1553c31992e5c141a61b32b0bb0768ae89c","abstract_canon_sha256":"2e89a1bed2711843fedc3f4609bc327510578e108a9a47e89bc5c96780158a1e"},"schema_version":"1.0"},"canonical_sha256":"d188772d38343dda44756f874885a921cf9a8cd510fdb0e77699cc1b757b148f","source":{"kind":"arxiv","id":"2312.14440","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.14440","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"arxiv_version","alias_value":"2312.14440v3","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.14440","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_12","alias_value":"2GEHOLJYGQ65","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_16","alias_value":"2GEHOLJYGQ65URDV","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_8","alias_value":"2GEHOLJY","created_at":"2026-07-05T08:44:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:2GEHOLJYGQ65URDVN6DURBNJEH","target":"record","payload":{"canonical_record":{"source":{"id":"2312.14440","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-12-22T05:10:32Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"04934e70c39ae7f374279d86e3feb1553c31992e5c141a61b32b0bb0768ae89c","abstract_canon_sha256":"2e89a1bed2711843fedc3f4609bc327510578e108a9a47e89bc5c96780158a1e"},"schema_version":"1.0"},"canonical_sha256":"d188772d38343dda44756f874885a921cf9a8cd510fdb0e77699cc1b757b148f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:44:50.214699Z","signature_b64":"P0U7pgJd9g8I0EsgWFSn8i4PLkm+nKJMQzkBFPJ92wY5bTBmU4TEr5HauS/ce1KdwyK/W7wvmfFPJqYQIU4eDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d188772d38343dda44756f874885a921cf9a8cd510fdb0e77699cc1b757b148f","last_reissued_at":"2026-07-05T08:44:50.214295Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:44:50.214295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.14440","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:44:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+r5AJwoJFV0tVsmMm4GCkXc/hge6LNTOdwqJq25hf9Elq3W1XMZPc1DK7CsL6sfFnIG1Z4RM+qIulcBfyARwDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:36:11.870762Z"},"content_sha256":"12269e2c2d928def4987a129ab767b51ee40ae441592beb055eced517479a25c","schema_version":"1.0","event_id":"sha256:12269e2c2d928def4987a129ab767b51ee40ae441592beb055eced517479a25c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:2GEHOLJYGQ65URDVN6DURBNJEH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Greg Ver Steeg, Haz Sameen Shahgir, Xianghao Kong, Yue Dong","submitted_at":"2023-12-22T05:10:32Z","abstract_excerpt":"The widespread use of Text-to-Image (T2I) models in content generation requires careful examination of their safety, including their robustness to adversarial attacks. Despite extensive research on adversarial attacks, the reasons for their effectiveness remain underexplored. This paper presents an empirical study on adversarial attacks against T2I models, focusing on analyzing factors associated with attack success rates (ASR). We introduce a new attack objective - entity swapping using adversarial suffixes and two gradient-based attack algorithms. Human and automatic evaluations reveal the a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.14440","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.14440/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:44:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pwEKnyVwg6Q4fBMtoKgjtv2twHYXAJfiz3ZsgMfbI2e7FC6cjHk+oTt2+2ji5ElBtxtQfZRglxr1Yz93SCL8AA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T12:36:11.871399Z"},"content_sha256":"ae46e03751560b9edd1fec46f41861c759e2d1a08b5f1404baaf027b84ae8181","schema_version":"1.0","event_id":"sha256:ae46e03751560b9edd1fec46f41861c759e2d1a08b5f1404baaf027b84ae8181"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2GEHOLJYGQ65URDVN6DURBNJEH/bundle.json","state_url":"https://pith.science/pith/2GEHOLJYGQ65URDVN6DURBNJEH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2GEHOLJYGQ65URDVN6DURBNJEH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T12:36:11Z","links":{"resolver":"https://pith.science/pith/2GEHOLJYGQ65URDVN6DURBNJEH","bundle":"https://pith.science/pith/2GEHOLJYGQ65URDVN6DURBNJEH/bundle.json","state":"https://pith.science/pith/2GEHOLJYGQ65URDVN6DURBNJEH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2GEHOLJYGQ65URDVN6DURBNJEH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:2GEHOLJYGQ65URDVN6DURBNJEH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2e89a1bed2711843fedc3f4609bc327510578e108a9a47e89bc5c96780158a1e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-12-22T05:10:32Z","title_canon_sha256":"04934e70c39ae7f374279d86e3feb1553c31992e5c141a61b32b0bb0768ae89c"},"schema_version":"1.0","source":{"id":"2312.14440","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.14440","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"arxiv_version","alias_value":"2312.14440v3","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.14440","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_12","alias_value":"2GEHOLJYGQ65","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_16","alias_value":"2GEHOLJYGQ65URDV","created_at":"2026-07-05T08:44:50Z"},{"alias_kind":"pith_short_8","alias_value":"2GEHOLJY","created_at":"2026-07-05T08:44:50Z"}],"graph_snapshots":[{"event_id":"sha256:ae46e03751560b9edd1fec46f41861c759e2d1a08b5f1404baaf027b84ae8181","target":"graph","created_at":"2026-07-05T08:44:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.14440/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The widespread use of Text-to-Image (T2I) models in content generation requires careful examination of their safety, including their robustness to adversarial attacks. Despite extensive research on adversarial attacks, the reasons for their effectiveness remain underexplored. This paper presents an empirical study on adversarial attacks against T2I models, focusing on analyzing factors associated with attack success rates (ASR). We introduce a new attack objective - entity swapping using adversarial suffixes and two gradient-based attack algorithms. Human and automatic evaluations reveal the a","authors_text":"Greg Ver Steeg, Haz Sameen Shahgir, Xianghao Kong, Yue Dong","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-12-22T05:10:32Z","title":"Asymmetric Bias in Text-to-Image Generation with Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.14440","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:12269e2c2d928def4987a129ab767b51ee40ae441592beb055eced517479a25c","target":"record","created_at":"2026-07-05T08:44:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2e89a1bed2711843fedc3f4609bc327510578e108a9a47e89bc5c96780158a1e","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-12-22T05:10:32Z","title_canon_sha256":"04934e70c39ae7f374279d86e3feb1553c31992e5c141a61b32b0bb0768ae89c"},"schema_version":"1.0","source":{"id":"2312.14440","kind":"arxiv","version":3}},"canonical_sha256":"d188772d38343dda44756f874885a921cf9a8cd510fdb0e77699cc1b757b148f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d188772d38343dda44756f874885a921cf9a8cd510fdb0e77699cc1b757b148f","first_computed_at":"2026-07-05T08:44:50.214295Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:44:50.214295Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P0U7pgJd9g8I0EsgWFSn8i4PLkm+nKJMQzkBFPJ92wY5bTBmU4TEr5HauS/ce1KdwyK/W7wvmfFPJqYQIU4eDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:44:50.214699Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.14440","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:12269e2c2d928def4987a129ab767b51ee40ae441592beb055eced517479a25c","sha256:ae46e03751560b9edd1fec46f41861c759e2d1a08b5f1404baaf027b84ae8181"],"state_sha256":"8b6f3aafd6cc553acb109867e4eb236b89264128f4a681e02e8c7a73c73cfb67"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tpSZgExTbgVtWWEmnhuxRtX9S7Ob9N+2wHjmFGljlR127e2xuMvIpzlZ2x91QjUJJNPoSa6KqPtoKBfukUKBBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T12:36:11.875926Z","bundle_sha256":"8e554c8c7cdef5cb6436b73b58bd9d08755a33606533d7fb6ed446d3244cf1e5"}}