{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:3GMBQD4SZQSCHPQC7C26MW5XYT","short_pith_number":"pith:3GMBQD4S","canonical_record":{"source":{"id":"1807.09937","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-26T03:25:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"6dbe306a394be95391b0dd07299c31a1783265f606916bb01d2540e40a44248c","abstract_canon_sha256":"c1d7db2b61d063fc430038d74f9136200382a7dc845b869194d42fc92a938259"},"schema_version":"1.0"},"canonical_sha256":"d998180f92cc2423be02f8b5e65bb7c4c76bc4964c053716c48e619c0eb1cc6c","source":{"kind":"arxiv","id":"1807.09937","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.09937","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"arxiv_version","alias_value":"1807.09937v1","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.09937","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"pith_short_12","alias_value":"3GMBQD4SZQSC","created_at":"2026-05-18T12:32:02Z"},{"alias_kind":"pith_short_16","alias_value":"3GMBQD4SZQSCHPQC","created_at":"2026-05-18T12:32:02Z"},{"alias_kind":"pith_short_8","alias_value":"3GMBQD4S","created_at":"2026-05-18T12:32:02Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:3GMBQD4SZQSCHPQC7C26MW5XYT","target":"record","payload":{"canonical_record":{"source":{"id":"1807.09937","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-26T03:25:15Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"6dbe306a394be95391b0dd07299c31a1783265f606916bb01d2540e40a44248c","abstract_canon_sha256":"c1d7db2b61d063fc430038d74f9136200382a7dc845b869194d42fc92a938259"},"schema_version":"1.0"},"canonical_sha256":"d998180f92cc2423be02f8b5e65bb7c4c76bc4964c053716c48e619c0eb1cc6c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:09:46.013766Z","signature_b64":"sTtIWS93j+WbRUfo+SzWqOp5EInptW0UyUoAF2eVDLoCJ3NVIU1sIAMh2bImhpJoi6/GW7RZ7+ipTTFtGHDFCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"d998180f92cc2423be02f8b5e65bb7c4c76bc4964c053716c48e619c0eb1cc6c","last_reissued_at":"2026-05-18T00:09:46.013062Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:09:46.013062Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1807.09937","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:09:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GgVPa+oahUc/wWm7MYFX+21aeyHMvt2l2c5jh7pakkjw1xXuM5WobH4CEZJVCj75brjxwNwfEydzlfhfiUDOCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T11:21:26.768260Z"},"content_sha256":"26114e0940f30d95e8b034160b1502cc97b15c889e59a7d3b8593dc4a044da7a","schema_version":"1.0","event_id":"sha256:26114e0940f30d95e8b034160b1502cc97b15c889e59a7d3b8593dc4a044da7a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:3GMBQD4SZQSCHPQC7C26MW5XYT","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"HiDDeN: Hiding Data With Deep Networks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Jiren Zhu, Justin Johnson, Li Fei-Fei, Russell Kaplan","submitted_at":"2018-07-26T03:25:15Z","abstract_excerpt":"Recent work has shown that deep neural networks are highly sensitive to tiny perturbations of input images, giving rise to adversarial examples. Though this property is usually considered a weakness of learned models, we explore whether it can be beneficial. We find that neural networks can learn to use invisible perturbations to encode a rich amount of useful information. In fact, one can exploit this capability for the task of data hiding. We jointly train encoder and decoder networks, where given an input message and cover image, the encoder produces a visually indistinguishable encoded ima"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.09937","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:09:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"or6FOkuqj8TleYDKTp9ZVGwr2b3Q2uUnbW4r3Eb1RmZjGvYGq9OwdueryeA7O4r/xXOJ8UTURwQ0NcTmzyLuCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-27T11:21:26.768982Z"},"content_sha256":"237baa5b9c10e3383ac532b4e866304706c8941bcede05b92cff69c7b6594a6b","schema_version":"1.0","event_id":"sha256:237baa5b9c10e3383ac532b4e866304706c8941bcede05b92cff69c7b6594a6b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/bundle.json","state_url":"https://pith.science/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-27T11:21:26Z","links":{"resolver":"https://pith.science/pith/3GMBQD4SZQSCHPQC7C26MW5XYT","bundle":"https://pith.science/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/bundle.json","state":"https://pith.science/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3GMBQD4SZQSCHPQC7C26MW5XYT/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:3GMBQD4SZQSCHPQC7C26MW5XYT","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c1d7db2b61d063fc430038d74f9136200382a7dc845b869194d42fc92a938259","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-26T03:25:15Z","title_canon_sha256":"6dbe306a394be95391b0dd07299c31a1783265f606916bb01d2540e40a44248c"},"schema_version":"1.0","source":{"id":"1807.09937","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.09937","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"arxiv_version","alias_value":"1807.09937v1","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.09937","created_at":"2026-05-18T00:09:46Z"},{"alias_kind":"pith_short_12","alias_value":"3GMBQD4SZQSC","created_at":"2026-05-18T12:32:02Z"},{"alias_kind":"pith_short_16","alias_value":"3GMBQD4SZQSCHPQC","created_at":"2026-05-18T12:32:02Z"},{"alias_kind":"pith_short_8","alias_value":"3GMBQD4S","created_at":"2026-05-18T12:32:02Z"}],"graph_snapshots":[{"event_id":"sha256:237baa5b9c10e3383ac532b4e866304706c8941bcede05b92cff69c7b6594a6b","target":"graph","created_at":"2026-05-18T00:09:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Recent work has shown that deep neural networks are highly sensitive to tiny perturbations of input images, giving rise to adversarial examples. Though this property is usually considered a weakness of learned models, we explore whether it can be beneficial. We find that neural networks can learn to use invisible perturbations to encode a rich amount of useful information. In fact, one can exploit this capability for the task of data hiding. We jointly train encoder and decoder networks, where given an input message and cover image, the encoder produces a visually indistinguishable encoded ima","authors_text":"Jiren Zhu, Justin Johnson, Li Fei-Fei, Russell Kaplan","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-26T03:25:15Z","title":"HiDDeN: Hiding Data With Deep Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.09937","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:26114e0940f30d95e8b034160b1502cc97b15c889e59a7d3b8593dc4a044da7a","target":"record","created_at":"2026-05-18T00:09:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c1d7db2b61d063fc430038d74f9136200382a7dc845b869194d42fc92a938259","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-26T03:25:15Z","title_canon_sha256":"6dbe306a394be95391b0dd07299c31a1783265f606916bb01d2540e40a44248c"},"schema_version":"1.0","source":{"id":"1807.09937","kind":"arxiv","version":1}},"canonical_sha256":"d998180f92cc2423be02f8b5e65bb7c4c76bc4964c053716c48e619c0eb1cc6c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"d998180f92cc2423be02f8b5e65bb7c4c76bc4964c053716c48e619c0eb1cc6c","first_computed_at":"2026-05-18T00:09:46.013062Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:09:46.013062Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sTtIWS93j+WbRUfo+SzWqOp5EInptW0UyUoAF2eVDLoCJ3NVIU1sIAMh2bImhpJoi6/GW7RZ7+ipTTFtGHDFCg==","signature_status":"signed_v1","signed_at":"2026-05-18T00:09:46.013766Z","signed_message":"canonical_sha256_bytes"},"source_id":"1807.09937","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:26114e0940f30d95e8b034160b1502cc97b15c889e59a7d3b8593dc4a044da7a","sha256:237baa5b9c10e3383ac532b4e866304706c8941bcede05b92cff69c7b6594a6b"],"state_sha256":"5b073eeaaf6577d76bbf75fdfc74d14bfe9af23c385328ebbed635d6ce82976c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"snqEJ/gie8iib7fLLfOEFa8N6xiiVjM2jxOeVrg/P4+4COsvWfOOVmlHu9HWCj9+q40xjXn5s1OE3/7nAicfAw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-27T11:21:26.772995Z","bundle_sha256":"d4c8fae45dfaf8af2e7f9c7e44196bb944df8a1644ac64b833fe4dc38a7711b3"}}