{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:2LUNW42A7DC6M3QFM7KYGCW26O","short_pith_number":"pith:2LUNW42A","canonical_record":{"source":{"id":"1911.00660","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-02T06:03:51Z","cross_cats_sorted":[],"title_canon_sha256":"75138d2495ffa71e7da0d65a522f5593c6655980cae66dbad96fc6ddb3036597","abstract_canon_sha256":"901a7887710ab130e97e1ee8781b66a1181f909a06744b2580a1a0b006ba0cc2"},"schema_version":"1.0"},"canonical_sha256":"d2e8db7340f8c5e66e0567d5830adaf38649b568294dfd7060eeab76a0ce595d","source":{"kind":"arxiv","id":"1911.00660","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.00660","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"arxiv_version","alias_value":"1911.00660v2","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.00660","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_12","alias_value":"2LUNW42A7DC6","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_16","alias_value":"2LUNW42A7DC6M3QF","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_8","alias_value":"2LUNW42A","created_at":"2026-07-05T01:04:29Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:2LUNW42A7DC6M3QFM7KYGCW26O","target":"record","payload":{"canonical_record":{"source":{"id":"1911.00660","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-02T06:03:51Z","cross_cats_sorted":[],"title_canon_sha256":"75138d2495ffa71e7da0d65a522f5593c6655980cae66dbad96fc6ddb3036597","abstract_canon_sha256":"901a7887710ab130e97e1ee8781b66a1181f909a06744b2580a1a0b006ba0cc2"},"schema_version":"1.0"},"canonical_sha256":"d2e8db7340f8c5e66e0567d5830adaf38649b568294dfd7060eeab76a0ce595d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:04:29.362408Z","signature_b64":"zYD/INV9Ktyu3fupvYj2UYyLRYxsc6MPtk9pbRaRZhfqj8NDFpIe8EnArkRoRwqCicEAo1TTgMacgnKsYXQTAw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d2e8db7340f8c5e66e0567d5830adaf38649b568294dfd7060eeab76a0ce595d","last_reissued_at":"2026-07-05T01:04:29.361925Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:04:29.361925Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1911.00660","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:04:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"23O+BVdj5Dm6Ah0jzxYLaZkxd/kZUeqD03Re9rbN1VoyysF37ZhxObjg5qC8NXQsKYu2WyZNUwhx9ThFspYnAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:33:59.782171Z"},"content_sha256":"f141b8de1ace7ee9a27f492b2e9a223b072124e620de469165c10fd73494784c","schema_version":"1.0","event_id":"sha256:f141b8de1ace7ee9a27f492b2e9a223b072124e620de469165c10fd73494784c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:2LUNW42A7DC6M3QFM7KYGCW26O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Security of Facial Forensics Models Against Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Fuming Fang, Huy H. Nguyen, Isao Echizen, Junichi Yamagishi, Rong Huang","submitted_at":"2019-11-02T06:03:51Z","abstract_excerpt":"Deep neural networks (DNNs) have been used in digital forensics to identify fake facial images. We investigated several DNN-based forgery forensics models (FFMs) to examine whether they are secure against adversarial attacks. We experimentally demonstrated the existence of individual adversarial perturbations (IAPs) and universal adversarial perturbations (UAPs) that can lead a well-performed FFM to misbehave. Based on iterative procedure, gradient information is used to generate two kinds of IAPs that can be used to fabricate classification and segmentation outputs. In contrast, UAPs are gene"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.00660","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1911.00660/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:04:29Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NU2qNyhYKLtzKSAW/cFp6/c3Cw5hYiOUKoSZiVRXL21CEjtv7QI6XnfCDIN7AZ0Oca8hMtoKixvtY2JuGbwmCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T18:33:59.782681Z"},"content_sha256":"9358e04bb2d99af48a5208d0eb5096d5a852c1c2d52768a9973c3aac4ae1d611","schema_version":"1.0","event_id":"sha256:9358e04bb2d99af48a5208d0eb5096d5a852c1c2d52768a9973c3aac4ae1d611"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2LUNW42A7DC6M3QFM7KYGCW26O/bundle.json","state_url":"https://pith.science/pith/2LUNW42A7DC6M3QFM7KYGCW26O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2LUNW42A7DC6M3QFM7KYGCW26O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T18:33:59Z","links":{"resolver":"https://pith.science/pith/2LUNW42A7DC6M3QFM7KYGCW26O","bundle":"https://pith.science/pith/2LUNW42A7DC6M3QFM7KYGCW26O/bundle.json","state":"https://pith.science/pith/2LUNW42A7DC6M3QFM7KYGCW26O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2LUNW42A7DC6M3QFM7KYGCW26O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:2LUNW42A7DC6M3QFM7KYGCW26O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"901a7887710ab130e97e1ee8781b66a1181f909a06744b2580a1a0b006ba0cc2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-02T06:03:51Z","title_canon_sha256":"75138d2495ffa71e7da0d65a522f5593c6655980cae66dbad96fc6ddb3036597"},"schema_version":"1.0","source":{"id":"1911.00660","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1911.00660","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"arxiv_version","alias_value":"1911.00660v2","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1911.00660","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_12","alias_value":"2LUNW42A7DC6","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_16","alias_value":"2LUNW42A7DC6M3QF","created_at":"2026-07-05T01:04:29Z"},{"alias_kind":"pith_short_8","alias_value":"2LUNW42A","created_at":"2026-07-05T01:04:29Z"}],"graph_snapshots":[{"event_id":"sha256:9358e04bb2d99af48a5208d0eb5096d5a852c1c2d52768a9973c3aac4ae1d611","target":"graph","created_at":"2026-07-05T01:04:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1911.00660/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have been used in digital forensics to identify fake facial images. We investigated several DNN-based forgery forensics models (FFMs) to examine whether they are secure against adversarial attacks. We experimentally demonstrated the existence of individual adversarial perturbations (IAPs) and universal adversarial perturbations (UAPs) that can lead a well-performed FFM to misbehave. Based on iterative procedure, gradient information is used to generate two kinds of IAPs that can be used to fabricate classification and segmentation outputs. In contrast, UAPs are gene","authors_text":"Fuming Fang, Huy H. Nguyen, Isao Echizen, Junichi Yamagishi, Rong Huang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-02T06:03:51Z","title":"Security of Facial Forensics Models Against Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1911.00660","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f141b8de1ace7ee9a27f492b2e9a223b072124e620de469165c10fd73494784c","target":"record","created_at":"2026-07-05T01:04:29Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"901a7887710ab130e97e1ee8781b66a1181f909a06744b2580a1a0b006ba0cc2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-11-02T06:03:51Z","title_canon_sha256":"75138d2495ffa71e7da0d65a522f5593c6655980cae66dbad96fc6ddb3036597"},"schema_version":"1.0","source":{"id":"1911.00660","kind":"arxiv","version":2}},"canonical_sha256":"d2e8db7340f8c5e66e0567d5830adaf38649b568294dfd7060eeab76a0ce595d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d2e8db7340f8c5e66e0567d5830adaf38649b568294dfd7060eeab76a0ce595d","first_computed_at":"2026-07-05T01:04:29.361925Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:04:29.361925Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"zYD/INV9Ktyu3fupvYj2UYyLRYxsc6MPtk9pbRaRZhfqj8NDFpIe8EnArkRoRwqCicEAo1TTgMacgnKsYXQTAw==","signature_status":"signed_v1","signed_at":"2026-07-05T01:04:29.362408Z","signed_message":"canonical_sha256_bytes"},"source_id":"1911.00660","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f141b8de1ace7ee9a27f492b2e9a223b072124e620de469165c10fd73494784c","sha256:9358e04bb2d99af48a5208d0eb5096d5a852c1c2d52768a9973c3aac4ae1d611"],"state_sha256":"a20203606d97098c1cfff9819f6037065a2551cc1324c58b1a7e0dcddacaac19"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NTxdNP9Cf8vezcnlk/gZBdpAeKOHMoPCwjrMfLpQyLllKf5O37KXGsFu1DGm/vX6hnph161jkk8p/KnNbkrRCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T18:33:59.789139Z","bundle_sha256":"b6ea7bf5c97d21f5a2575ea6e8541e030a2224ef245fde96b379056a24f2ad4a"}}