{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:3V7OWUW35QD4X56SBH4TFRXCGO","short_pith_number":"pith:3V7OWUW3","canonical_record":{"source":{"id":"2011.11922","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-11-24T06:46:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"25ff48e1719002bc83ec68d60561e7f64ed3e862c8e59f91e844405373198a03","abstract_canon_sha256":"085ec30d3e6bd48f45363b942b72c80883787f7574f49904de9faac0c0ef9697"},"schema_version":"1.0"},"canonical_sha256":"dd7eeb52dbec07cbf7d209f932c6e233b97147961fd7ad6ccf841d2bc7a54458","source":{"kind":"arxiv","id":"2011.11922","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.11922","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"arxiv_version","alias_value":"2011.11922v2","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.11922","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_12","alias_value":"3V7OWUW35QD4","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_16","alias_value":"3V7OWUW35QD4X56S","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_8","alias_value":"3V7OWUW3","created_at":"2026-07-05T02:29:56Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:3V7OWUW35QD4X56SBH4TFRXCGO","target":"record","payload":{"canonical_record":{"source":{"id":"2011.11922","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-11-24T06:46:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"25ff48e1719002bc83ec68d60561e7f64ed3e862c8e59f91e844405373198a03","abstract_canon_sha256":"085ec30d3e6bd48f45363b942b72c80883787f7574f49904de9faac0c0ef9697"},"schema_version":"1.0"},"canonical_sha256":"dd7eeb52dbec07cbf7d209f932c6e233b97147961fd7ad6ccf841d2bc7a54458","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:29:56.014108Z","signature_b64":"o6liO5xfbObEsLMhnA5r85Ymmi4vG6kCaa9+3Ka8Fllai6580R2TMEYZt2x0p+VuCRvJP0Cc8YouJWvLxS+3Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd7eeb52dbec07cbf7d209f932c6e233b97147961fd7ad6ccf841d2bc7a54458","last_reissued_at":"2026-07-05T02:29:56.013671Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:29:56.013671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.11922","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:29:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lHuLEGbc0VRlpTHotKX0MthZN0wG1Y38F+fx1OBPqHJJSNfqjsnSXpHYbOybu7nHEp2XQwjbUMadyMmh88V8Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:13:00.499394Z"},"content_sha256":"3dd3b686cb45a00933f02684cef0903aa0f1ab2f8b07016af19ac7e0604b4fa0","schema_version":"1.0","event_id":"sha256:3dd3b686cb45a00933f02684cef0903aa0f1ab2f8b07016af19ac7e0604b4fa0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:3V7OWUW35QD4X56SBH4TFRXCGO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Adversarial Robustness of 3D Point Cloud Classification under Adaptive Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Jiachen Sun, Karl Koenig, Qi Alfred Chen, Yulong Cao, Z. Morley Mao","submitted_at":"2020-11-24T06:46:38Z","abstract_excerpt":"3D point clouds play pivotal roles in various safety-critical applications, such as autonomous driving, which desires the underlying deep neural networks to be robust to adversarial perturbations. Though a few defenses against adversarial point cloud classification have been proposed, it remains unknown whether they are truly robust to adaptive attacks. To this end, we perform the first security analysis of state-of-the-art defenses and design adaptive evaluations on them. Our 100% adaptive attack success rates show that current countermeasures are still vulnerable. Since adversarial training "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.11922","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.11922/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:29:56Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RryELz38bipoBa9Z/ogkQgXxPad5Cf47WfLRD0W1526bmEnHIJLeQpIAhotMgPCzKhoJf4qqpQzsFyQpKd+SCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T20:13:00.499899Z"},"content_sha256":"8006189921dbdf8d7f25d9d7fd7f465cdca959026559bdd64c6bc3e7a181d1bb","schema_version":"1.0","event_id":"sha256:8006189921dbdf8d7f25d9d7fd7f465cdca959026559bdd64c6bc3e7a181d1bb"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3V7OWUW35QD4X56SBH4TFRXCGO/bundle.json","state_url":"https://pith.science/pith/3V7OWUW35QD4X56SBH4TFRXCGO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3V7OWUW35QD4X56SBH4TFRXCGO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T20:13:00Z","links":{"resolver":"https://pith.science/pith/3V7OWUW35QD4X56SBH4TFRXCGO","bundle":"https://pith.science/pith/3V7OWUW35QD4X56SBH4TFRXCGO/bundle.json","state":"https://pith.science/pith/3V7OWUW35QD4X56SBH4TFRXCGO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3V7OWUW35QD4X56SBH4TFRXCGO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:3V7OWUW35QD4X56SBH4TFRXCGO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"085ec30d3e6bd48f45363b942b72c80883787f7574f49904de9faac0c0ef9697","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-11-24T06:46:38Z","title_canon_sha256":"25ff48e1719002bc83ec68d60561e7f64ed3e862c8e59f91e844405373198a03"},"schema_version":"1.0","source":{"id":"2011.11922","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.11922","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"arxiv_version","alias_value":"2011.11922v2","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.11922","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_12","alias_value":"3V7OWUW35QD4","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_16","alias_value":"3V7OWUW35QD4X56S","created_at":"2026-07-05T02:29:56Z"},{"alias_kind":"pith_short_8","alias_value":"3V7OWUW3","created_at":"2026-07-05T02:29:56Z"}],"graph_snapshots":[{"event_id":"sha256:8006189921dbdf8d7f25d9d7fd7f465cdca959026559bdd64c6bc3e7a181d1bb","target":"graph","created_at":"2026-07-05T02:29:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.11922/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"3D point clouds play pivotal roles in various safety-critical applications, such as autonomous driving, which desires the underlying deep neural networks to be robust to adversarial perturbations. Though a few defenses against adversarial point cloud classification have been proposed, it remains unknown whether they are truly robust to adaptive attacks. To this end, we perform the first security analysis of state-of-the-art defenses and design adaptive evaluations on them. Our 100% adaptive attack success rates show that current countermeasures are still vulnerable. Since adversarial training ","authors_text":"Jiachen Sun, Karl Koenig, Qi Alfred Chen, Yulong Cao, Z. Morley Mao","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-11-24T06:46:38Z","title":"On Adversarial Robustness of 3D Point Cloud Classification under Adaptive Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.11922","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3dd3b686cb45a00933f02684cef0903aa0f1ab2f8b07016af19ac7e0604b4fa0","target":"record","created_at":"2026-07-05T02:29:56Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"085ec30d3e6bd48f45363b942b72c80883787f7574f49904de9faac0c0ef9697","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2020-11-24T06:46:38Z","title_canon_sha256":"25ff48e1719002bc83ec68d60561e7f64ed3e862c8e59f91e844405373198a03"},"schema_version":"1.0","source":{"id":"2011.11922","kind":"arxiv","version":2}},"canonical_sha256":"dd7eeb52dbec07cbf7d209f932c6e233b97147961fd7ad6ccf841d2bc7a54458","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dd7eeb52dbec07cbf7d209f932c6e233b97147961fd7ad6ccf841d2bc7a54458","first_computed_at":"2026-07-05T02:29:56.013671Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:29:56.013671Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o6liO5xfbObEsLMhnA5r85Ymmi4vG6kCaa9+3Ka8Fllai6580R2TMEYZt2x0p+VuCRvJP0Cc8YouJWvLxS+3Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:29:56.014108Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.11922","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3dd3b686cb45a00933f02684cef0903aa0f1ab2f8b07016af19ac7e0604b4fa0","sha256:8006189921dbdf8d7f25d9d7fd7f465cdca959026559bdd64c6bc3e7a181d1bb"],"state_sha256":"1c3eec3357d752e7561a55ae1167946077bfe0a4adcd9ba7e5b7f990785d2860"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tHnPBKLxhzNVLel1214bqdCL1bUKRAlpodEIkjDaVWSd5mJEDINGCgrxORG7KerfGZYSi9gdEVKFDjC6pvN+BA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T20:13:00.504920Z","bundle_sha256":"44bc5a661d75b3cccec2551ad930cfbd80d93561f7536e16cc6a6795c04baa0b"}}