{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:2H4DTOOCPKDYDABIIOZMK25RYR","short_pith_number":"pith:2H4DTOOC","canonical_record":{"source":{"id":"1904.00979","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-01T17:31:02Z","cross_cats_sorted":[],"title_canon_sha256":"d7c37e13529213184ed33bf5894e70e613a98dce2716c58fd4650d3b97789f71","abstract_canon_sha256":"be88e898b5d9293cc5c3561c68c88aa0fb0669c931d1e753a58062ce2f7d3ace"},"schema_version":"1.0"},"canonical_sha256":"d1f839b9c27a8781802843b2c56bb1c461f00c981fdc69a5771f0678c036ab76","source":{"kind":"arxiv","id":"1904.00979","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.00979","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"arxiv_version","alias_value":"1904.00979v2","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.00979","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_12","alias_value":"2H4DTOOCPKDY","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_16","alias_value":"2H4DTOOCPKDYDABI","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_8","alias_value":"2H4DTOOC","created_at":"2026-07-05T01:23:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:2H4DTOOCPKDYDABIIOZMK25RYR","target":"record","payload":{"canonical_record":{"source":{"id":"1904.00979","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-01T17:31:02Z","cross_cats_sorted":[],"title_canon_sha256":"d7c37e13529213184ed33bf5894e70e613a98dce2716c58fd4650d3b97789f71","abstract_canon_sha256":"be88e898b5d9293cc5c3561c68c88aa0fb0669c931d1e753a58062ce2f7d3ace"},"schema_version":"1.0"},"canonical_sha256":"d1f839b9c27a8781802843b2c56bb1c461f00c981fdc69a5771f0678c036ab76","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:23:33.947644Z","signature_b64":"RZHolVX9G//bP/plFx/RIQXWGFAwjYZLaGoX4P4TStSl5R7g3D1FVQ+kKSxH5o8OEhqnFXZnNFulQ72CbS+sBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d1f839b9c27a8781802843b2c56bb1c461f00c981fdc69a5771f0678c036ab76","last_reissued_at":"2026-07-05T01:23:33.947219Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:23:33.947219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.00979","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WI4HurlbaUzx5/oA4R1pdzkubBcGlIgbq6UqQPZwyVwpTTbefe+AFrubM+16UcSi4Id0YFHAccTeZD5RBbPmAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:09:34.910431Z"},"content_sha256":"778c08cff288b628aacdc66ad683c21cac6ef8669dd64e899b8043d9eb316a28","schema_version":"1.0","event_id":"sha256:778c08cff288b628aacdc66ad683c21cac6ef8669dd64e899b8043d9eb316a28"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:2H4DTOOCPKDYDABIIOZMK25RYR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Alan L. Yuille, Cihang Xie, Song Bai, Xiaohui Shen, Yingwei Li, Zhenyu Liao","submitted_at":"2019-04-01T17:31:02Z","abstract_excerpt":"This paper focuses on learning transferable adversarial examples specifically against defense models (models to defense adversarial attacks). In particular, we show that a simple universal perturbation can fool a series of state-of-the-art defenses.\n  Adversarial examples generated by existing attacks are generally hard to transfer to defense models. We observe the property of regional homogeneity in adversarial perturbations and suggest that the defenses are less robust to regionally homogeneous perturbations. Therefore, we propose an effective transforming paradigm and a customized gradient "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.00979","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1904.00979/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kt+dgBUfJYNpAHDCbnOe+F3oHyW/kCvlE5/U8+7dWEONnOgJWpEK8NsYPh93F5yKW9LCLEP8EZHOJ39fmvJaDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T04:09:34.910832Z"},"content_sha256":"24d7b6c8dc6dbba5795b098ffb5d29f72cf347aff85c846e84e6e5daf7cc6933","schema_version":"1.0","event_id":"sha256:24d7b6c8dc6dbba5795b098ffb5d29f72cf347aff85c846e84e6e5daf7cc6933"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2H4DTOOCPKDYDABIIOZMK25RYR/bundle.json","state_url":"https://pith.science/pith/2H4DTOOCPKDYDABIIOZMK25RYR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2H4DTOOCPKDYDABIIOZMK25RYR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T04:09:34Z","links":{"resolver":"https://pith.science/pith/2H4DTOOCPKDYDABIIOZMK25RYR","bundle":"https://pith.science/pith/2H4DTOOCPKDYDABIIOZMK25RYR/bundle.json","state":"https://pith.science/pith/2H4DTOOCPKDYDABIIOZMK25RYR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2H4DTOOCPKDYDABIIOZMK25RYR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:2H4DTOOCPKDYDABIIOZMK25RYR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"be88e898b5d9293cc5c3561c68c88aa0fb0669c931d1e753a58062ce2f7d3ace","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-01T17:31:02Z","title_canon_sha256":"d7c37e13529213184ed33bf5894e70e613a98dce2716c58fd4650d3b97789f71"},"schema_version":"1.0","source":{"id":"1904.00979","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.00979","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"arxiv_version","alias_value":"1904.00979v2","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.00979","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_12","alias_value":"2H4DTOOCPKDY","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_16","alias_value":"2H4DTOOCPKDYDABI","created_at":"2026-07-05T01:23:33Z"},{"alias_kind":"pith_short_8","alias_value":"2H4DTOOC","created_at":"2026-07-05T01:23:33Z"}],"graph_snapshots":[{"event_id":"sha256:24d7b6c8dc6dbba5795b098ffb5d29f72cf347aff85c846e84e6e5daf7cc6933","target":"graph","created_at":"2026-07-05T01:23:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1904.00979/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper focuses on learning transferable adversarial examples specifically against defense models (models to defense adversarial attacks). In particular, we show that a simple universal perturbation can fool a series of state-of-the-art defenses.\n  Adversarial examples generated by existing attacks are generally hard to transfer to defense models. We observe the property of regional homogeneity in adversarial perturbations and suggest that the defenses are less robust to regionally homogeneous perturbations. Therefore, we propose an effective transforming paradigm and a customized gradient ","authors_text":"Alan L. Yuille, Cihang Xie, Song Bai, Xiaohui Shen, Yingwei Li, Zhenyu Liao","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-01T17:31:02Z","title":"Regional Homogeneity: Towards Learning Transferable Universal Adversarial Perturbations Against Defenses"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.00979","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:778c08cff288b628aacdc66ad683c21cac6ef8669dd64e899b8043d9eb316a28","target":"record","created_at":"2026-07-05T01:23:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"be88e898b5d9293cc5c3561c68c88aa0fb0669c931d1e753a58062ce2f7d3ace","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-01T17:31:02Z","title_canon_sha256":"d7c37e13529213184ed33bf5894e70e613a98dce2716c58fd4650d3b97789f71"},"schema_version":"1.0","source":{"id":"1904.00979","kind":"arxiv","version":2}},"canonical_sha256":"d1f839b9c27a8781802843b2c56bb1c461f00c981fdc69a5771f0678c036ab76","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d1f839b9c27a8781802843b2c56bb1c461f00c981fdc69a5771f0678c036ab76","first_computed_at":"2026-07-05T01:23:33.947219Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:23:33.947219Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"RZHolVX9G//bP/plFx/RIQXWGFAwjYZLaGoX4P4TStSl5R7g3D1FVQ+kKSxH5o8OEhqnFXZnNFulQ72CbS+sBQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:23:33.947644Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.00979","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:778c08cff288b628aacdc66ad683c21cac6ef8669dd64e899b8043d9eb316a28","sha256:24d7b6c8dc6dbba5795b098ffb5d29f72cf347aff85c846e84e6e5daf7cc6933"],"state_sha256":"18a9aa0993ed4f6e4f1a4da3795bbaa1493b9b8fcbb2ab2464336a247c90a0ae"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"guOYDr+BBGONQOorb91gpWlOQO3j5cAx+wGeSbtljyRohpv2Pvlgtu2IxBZWD6rGekqVaxH3yZHDsZYRw6ZBAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T04:09:34.912730Z","bundle_sha256":"15a6ef93033511f564a6853d9cc1a6bd152b2ad331d204b2e1e8c63e1bb3a338"}}