{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:3TX6CIWIT53WAA3KSABPULSDLW","short_pith_number":"pith:3TX6CIWI","canonical_record":{"source":{"id":"2211.08384","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-15T18:30:18Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5e35e5e7efd1c397ba3e00356df495b843b483c73a948a9207ff4f127cc06ba6","abstract_canon_sha256":"d5e622000b2d7db9eef7d4ca3910261cd7573c0c9d1147bed90c868074000e85"},"schema_version":"1.0"},"canonical_sha256":"dcefe122c89f7760036a9002fa2e435d9b7962df57e01b2dbc823baae70e4fbc","source":{"kind":"arxiv","id":"2211.08384","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.08384","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"arxiv_version","alias_value":"2211.08384v1","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.08384","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_12","alias_value":"3TX6CIWIT53W","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_16","alias_value":"3TX6CIWIT53WAA3K","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_8","alias_value":"3TX6CIWI","created_at":"2026-07-05T05:16:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:3TX6CIWIT53WAA3KSABPULSDLW","target":"record","payload":{"canonical_record":{"source":{"id":"2211.08384","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-15T18:30:18Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"5e35e5e7efd1c397ba3e00356df495b843b483c73a948a9207ff4f127cc06ba6","abstract_canon_sha256":"d5e622000b2d7db9eef7d4ca3910261cd7573c0c9d1147bed90c868074000e85"},"schema_version":"1.0"},"canonical_sha256":"dcefe122c89f7760036a9002fa2e435d9b7962df57e01b2dbc823baae70e4fbc","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:16:28.654986Z","signature_b64":"kQhreLH2cz9AynJs++0IGpcPcgEHc0fcUgj0X9B5kR/2QKckqJTsrxYAlO+txQfXTGKEyivFhcCGKFQ7c+I6BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dcefe122c89f7760036a9002fa2e435d9b7962df57e01b2dbc823baae70e4fbc","last_reissued_at":"2026-07-05T05:16:28.654587Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:16:28.654587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.08384","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:16:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wje3krmHVBPT3LTdcdtV0Z874p/8mTB1x7z2HHo2EUbnM+CV2Q2tXsYgKeM11M4PqKkHofk3cLZdGx6Hl6msBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:56:13.396339Z"},"content_sha256":"44895e5a3c92e84d78d39249a815e906e768ce31a297ba9d9fda9b093ed034ed","schema_version":"1.0","event_id":"sha256:44895e5a3c92e84d78d39249a815e906e768ce31a297ba9d9fda9b093ed034ed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:3TX6CIWIT53WAA3KSABPULSDLW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Universal Distributional Decision-based Black-box Adversarial Attack with Reinforcement Learning","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Likun Fang, Michael Beigl, Michael Hefenbrock, Till Riedel, Yexu Zhou, Yiran Huang","submitted_at":"2022-11-15T18:30:18Z","abstract_excerpt":"The vulnerability of the high-performance machine learning models implies a security risk in applications with real-world consequences. Research on adversarial attacks is beneficial in guiding the development of machine learning models on the one hand and finding targeted defenses on the other. However, most of the adversarial attacks today leverage the gradient or logit information from the models to generate adversarial perturbation. Works in the more realistic domain: decision-based attacks, which generate adversarial perturbation solely based on observing the output label of the targeted m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.08384","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.08384/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:16:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ifa0ysn2xZaVqOn+xDyfgc6+Du44R5FxbpwWKlw8SUMS9bGMLgLhHGKyb/+CnN7QDJCDlM8YBLvIGiQl4nFrCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-16T10:56:13.396890Z"},"content_sha256":"6947a0cb9664d4effd6799ec2f7a4b30fcb5c32ff4246adb2e145b71c9192f46","schema_version":"1.0","event_id":"sha256:6947a0cb9664d4effd6799ec2f7a4b30fcb5c32ff4246adb2e145b71c9192f46"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3TX6CIWIT53WAA3KSABPULSDLW/bundle.json","state_url":"https://pith.science/pith/3TX6CIWIT53WAA3KSABPULSDLW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3TX6CIWIT53WAA3KSABPULSDLW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-16T10:56:13Z","links":{"resolver":"https://pith.science/pith/3TX6CIWIT53WAA3KSABPULSDLW","bundle":"https://pith.science/pith/3TX6CIWIT53WAA3KSABPULSDLW/bundle.json","state":"https://pith.science/pith/3TX6CIWIT53WAA3KSABPULSDLW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3TX6CIWIT53WAA3KSABPULSDLW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:3TX6CIWIT53WAA3KSABPULSDLW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d5e622000b2d7db9eef7d4ca3910261cd7573c0c9d1147bed90c868074000e85","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-15T18:30:18Z","title_canon_sha256":"5e35e5e7efd1c397ba3e00356df495b843b483c73a948a9207ff4f127cc06ba6"},"schema_version":"1.0","source":{"id":"2211.08384","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.08384","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"arxiv_version","alias_value":"2211.08384v1","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.08384","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_12","alias_value":"3TX6CIWIT53W","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_16","alias_value":"3TX6CIWIT53WAA3K","created_at":"2026-07-05T05:16:28Z"},{"alias_kind":"pith_short_8","alias_value":"3TX6CIWI","created_at":"2026-07-05T05:16:28Z"}],"graph_snapshots":[{"event_id":"sha256:6947a0cb9664d4effd6799ec2f7a4b30fcb5c32ff4246adb2e145b71c9192f46","target":"graph","created_at":"2026-07-05T05:16:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.08384/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The vulnerability of the high-performance machine learning models implies a security risk in applications with real-world consequences. Research on adversarial attacks is beneficial in guiding the development of machine learning models on the one hand and finding targeted defenses on the other. However, most of the adversarial attacks today leverage the gradient or logit information from the models to generate adversarial perturbation. Works in the more realistic domain: decision-based attacks, which generate adversarial perturbation solely based on observing the output label of the targeted m","authors_text":"Likun Fang, Michael Beigl, Michael Hefenbrock, Till Riedel, Yexu Zhou, Yiran Huang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-15T18:30:18Z","title":"Universal Distributional Decision-based Black-box Adversarial Attack with Reinforcement Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.08384","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:44895e5a3c92e84d78d39249a815e906e768ce31a297ba9d9fda9b093ed034ed","target":"record","created_at":"2026-07-05T05:16:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d5e622000b2d7db9eef7d4ca3910261cd7573c0c9d1147bed90c868074000e85","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2022-11-15T18:30:18Z","title_canon_sha256":"5e35e5e7efd1c397ba3e00356df495b843b483c73a948a9207ff4f127cc06ba6"},"schema_version":"1.0","source":{"id":"2211.08384","kind":"arxiv","version":1}},"canonical_sha256":"dcefe122c89f7760036a9002fa2e435d9b7962df57e01b2dbc823baae70e4fbc","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dcefe122c89f7760036a9002fa2e435d9b7962df57e01b2dbc823baae70e4fbc","first_computed_at":"2026-07-05T05:16:28.654587Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:16:28.654587Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kQhreLH2cz9AynJs++0IGpcPcgEHc0fcUgj0X9B5kR/2QKckqJTsrxYAlO+txQfXTGKEyivFhcCGKFQ7c+I6BA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:16:28.654986Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.08384","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:44895e5a3c92e84d78d39249a815e906e768ce31a297ba9d9fda9b093ed034ed","sha256:6947a0cb9664d4effd6799ec2f7a4b30fcb5c32ff4246adb2e145b71c9192f46"],"state_sha256":"83ef41a6be1b324bd89fe7019e686e9465f52efbfb8bb0c5a70bbd1528756767"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Q5Gv9AwDg5xtfovFBNM8gFQn5DPsGdqjTorOacjCF+bkAVR0jqdqjB6XyIhyhTbcoXUfFHxjD9bIBhD+r7VbAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-16T10:56:13.448837Z","bundle_sha256":"03237723588f4001e466afecf4132807d560e8a967588a8702f3ad0159b42a67"}}