{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:2W72LDVMRJ4JA5N3W52JU2IQLC","short_pith_number":"pith:2W72LDVM","canonical_record":{"source":{"id":"2009.11508","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-24T06:22:56Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"2540a8c252c4cf086694e5a9410dfce937a6fe32bca5f020d01fe16f96e1bdde","abstract_canon_sha256":"096e889ddb27b7fd095b4bb4fd78071bd98caf9d149f05522add95c4fba20816"},"schema_version":"1.0"},"canonical_sha256":"d5bfa58eac8a789075bbb7749a6910588b8b0d24ac44110ca51966b6c5db0069","source":{"kind":"arxiv","id":"2009.11508","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.11508","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"arxiv_version","alias_value":"2009.11508v2","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.11508","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_12","alias_value":"2W72LDVMRJ4J","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_16","alias_value":"2W72LDVMRJ4JA5N3","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_8","alias_value":"2W72LDVM","created_at":"2026-07-05T01:37:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:2W72LDVMRJ4JA5N3W52JU2IQLC","target":"record","payload":{"canonical_record":{"source":{"id":"2009.11508","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-24T06:22:56Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"2540a8c252c4cf086694e5a9410dfce937a6fe32bca5f020d01fe16f96e1bdde","abstract_canon_sha256":"096e889ddb27b7fd095b4bb4fd78071bd98caf9d149f05522add95c4fba20816"},"schema_version":"1.0"},"canonical_sha256":"d5bfa58eac8a789075bbb7749a6910588b8b0d24ac44110ca51966b6c5db0069","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:37:56.952491Z","signature_b64":"ZKyhYauAk5t7ojxlgwJ4XnJ4W/iHHVG4Utzcrwp2m1IqaqMWJVt/xdHLaMtiK1OlSV1hHNxtnqWn+muJyJChBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d5bfa58eac8a789075bbb7749a6910588b8b0d24ac44110ca51966b6c5db0069","last_reissued_at":"2026-07-05T01:37:56.952057Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:37:56.952057Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2009.11508","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:37:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UnsGuxmg61HgzIlPKGjlvvzljb+6M6FaleXxJ6HQX+QQXAR5L/mMwzci4fcEtbzbpEy+rHK24KroZVDEMQM4BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T07:54:10.538102Z"},"content_sha256":"a11d6bf7c1ccb5e6c46803b5498f28c2dde55336ca18fb4f75b395a0e41000f7","schema_version":"1.0","event_id":"sha256:a11d6bf7c1ccb5e6c46803b5498f28c2dde55336ca18fb4f75b395a0e41000f7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:2W72LDVMRJ4JA5N3W52JU2IQLC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Query Efficiency of Black-box Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Shu-Tao Xia, Weiwei Guo, Yang Bai, Yisen Wang, Yong Jiang, Yuyuan Zeng","submitted_at":"2020-09-24T06:22:56Z","abstract_excerpt":"Deep neural networks (DNNs) have demonstrated excellent performance on various tasks, however they are under the risk of adversarial examples that can be easily generated when the target model is accessible to an attacker (white-box setting). As plenty of machine learning models have been deployed via online services that only provide query outputs from inaccessible models (e.g. Google Cloud Vision API2), black-box adversarial attacks (inaccessible target model) are of critical security concerns in practice rather than white-box ones. However, existing query-based black-box adversarial attacks"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.11508","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2009.11508/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:37:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3ZXnkt1Udf3tbgkSQED8MtE6NblV3hS12Oh8DQwE3jQkF4M8B1bsZqcPGnaDuuo1S1xvf0DtAO7YmKg8LSUTAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T07:54:10.538487Z"},"content_sha256":"ffa19deb6810a250c0f4d946b078e38305563d0f0f6220d3ea1a5f501f6da977","schema_version":"1.0","event_id":"sha256:ffa19deb6810a250c0f4d946b078e38305563d0f0f6220d3ea1a5f501f6da977"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/bundle.json","state_url":"https://pith.science/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T07:54:10Z","links":{"resolver":"https://pith.science/pith/2W72LDVMRJ4JA5N3W52JU2IQLC","bundle":"https://pith.science/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/bundle.json","state":"https://pith.science/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/2W72LDVMRJ4JA5N3W52JU2IQLC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:2W72LDVMRJ4JA5N3W52JU2IQLC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"096e889ddb27b7fd095b4bb4fd78071bd98caf9d149f05522add95c4fba20816","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-24T06:22:56Z","title_canon_sha256":"2540a8c252c4cf086694e5a9410dfce937a6fe32bca5f020d01fe16f96e1bdde"},"schema_version":"1.0","source":{"id":"2009.11508","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2009.11508","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"arxiv_version","alias_value":"2009.11508v2","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2009.11508","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_12","alias_value":"2W72LDVMRJ4J","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_16","alias_value":"2W72LDVMRJ4JA5N3","created_at":"2026-07-05T01:37:56Z"},{"alias_kind":"pith_short_8","alias_value":"2W72LDVM","created_at":"2026-07-05T01:37:56Z"}],"graph_snapshots":[{"event_id":"sha256:ffa19deb6810a250c0f4d946b078e38305563d0f0f6220d3ea1a5f501f6da977","target":"graph","created_at":"2026-07-05T01:37:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2009.11508/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) have demonstrated excellent performance on various tasks, however they are under the risk of adversarial examples that can be easily generated when the target model is accessible to an attacker (white-box setting). As plenty of machine learning models have been deployed via online services that only provide query outputs from inaccessible models (e.g. Google Cloud Vision API2), black-box adversarial attacks (inaccessible target model) are of critical security concerns in practice rather than white-box ones. However, existing query-based black-box adversarial attacks","authors_text":"Shu-Tao Xia, Weiwei Guo, Yang Bai, Yisen Wang, Yong Jiang, Yuyuan Zeng","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-24T06:22:56Z","title":"Improving Query Efficiency of Black-box Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2009.11508","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a11d6bf7c1ccb5e6c46803b5498f28c2dde55336ca18fb4f75b395a0e41000f7","target":"record","created_at":"2026-07-05T01:37:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"096e889ddb27b7fd095b4bb4fd78071bd98caf9d149f05522add95c4fba20816","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-09-24T06:22:56Z","title_canon_sha256":"2540a8c252c4cf086694e5a9410dfce937a6fe32bca5f020d01fe16f96e1bdde"},"schema_version":"1.0","source":{"id":"2009.11508","kind":"arxiv","version":2}},"canonical_sha256":"d5bfa58eac8a789075bbb7749a6910588b8b0d24ac44110ca51966b6c5db0069","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d5bfa58eac8a789075bbb7749a6910588b8b0d24ac44110ca51966b6c5db0069","first_computed_at":"2026-07-05T01:37:56.952057Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:37:56.952057Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZKyhYauAk5t7ojxlgwJ4XnJ4W/iHHVG4Utzcrwp2m1IqaqMWJVt/xdHLaMtiK1OlSV1hHNxtnqWn+muJyJChBg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:37:56.952491Z","signed_message":"canonical_sha256_bytes"},"source_id":"2009.11508","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a11d6bf7c1ccb5e6c46803b5498f28c2dde55336ca18fb4f75b395a0e41000f7","sha256:ffa19deb6810a250c0f4d946b078e38305563d0f0f6220d3ea1a5f501f6da977"],"state_sha256":"2bffd5a2d070fbc1e1359db1ade728344a741f6651d9012e294153d1e2ba2130"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BO12Q3thMQWNSCTQrcbcq8uKb78/canpbkoj0c5ThPESIfoOpOy8QyIn88kmkiGb2rssK6DsrytH+heYzymsCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T07:54:10.540673Z","bundle_sha256":"a532b09a1dafd68eec7bbc7c36ec90865802685eb636bdb0053d2299061dbc0f"}}