{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:3WHYKKSLSSNHLOIZXF3PAXXJAM","short_pith_number":"pith:3WHYKKSL","canonical_record":{"source":{"id":"2106.06056","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-10T21:13:41Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"7b787e4bc21691690443065306e6cb5f7b9e6bc9ccfdc4a95faa1d0f9dda3693","abstract_canon_sha256":"cf721e3516eac6695ac387b9e7f8c5c5d2eb7d7c974a615707899b67ea002263"},"schema_version":"1.0"},"canonical_sha256":"dd8f852a4b949a75b919b976f05ee9033b62259e106ce7211de75d5dffa2eabf","source":{"kind":"arxiv","id":"2106.06056","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06056","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06056v1","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06056","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_12","alias_value":"3WHYKKSLSSNH","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_16","alias_value":"3WHYKKSLSSNHLOIZ","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_8","alias_value":"3WHYKKSL","created_at":"2026-07-05T02:48:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:3WHYKKSLSSNHLOIZXF3PAXXJAM","target":"record","payload":{"canonical_record":{"source":{"id":"2106.06056","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-10T21:13:41Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"7b787e4bc21691690443065306e6cb5f7b9e6bc9ccfdc4a95faa1d0f9dda3693","abstract_canon_sha256":"cf721e3516eac6695ac387b9e7f8c5c5d2eb7d7c974a615707899b67ea002263"},"schema_version":"1.0"},"canonical_sha256":"dd8f852a4b949a75b919b976f05ee9033b62259e106ce7211de75d5dffa2eabf","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:48:25.581840Z","signature_b64":"bgNM75TVPvHMMSKm4RfVpGf4MLbGVP/XYaotBVURV/+1oS5f2R7LGv7SBJqaBpW6rGBUqXJ7bO5w75hVAQeBCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"dd8f852a4b949a75b919b976f05ee9033b62259e106ce7211de75d5dffa2eabf","last_reissued_at":"2026-07-05T02:48:25.581381Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:48:25.581381Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.06056","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:48:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ujAZ1UFy7d73KyREVzkUy7A1kXVuAZB3VUZay2/dveTnOofGSdZmb1aqIPXxWu0IIFSrk0mJ1q7X42Dq8YQJBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:32:21.172155Z"},"content_sha256":"4e7d12287cd37c9ce5f6e7fa7ffb86713fb959373fc3a2d0c945c6ea4b3cdaeb","schema_version":"1.0","event_id":"sha256:4e7d12287cd37c9ce5f6e7fa7ffb86713fb959373fc3a2d0c945c6ea4b3cdaeb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:3WHYKKSLSSNHLOIZXF3PAXXJAM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Bo Li, Huichen Li, Jiawei Zhang, Linyi Li, Shuang Yang, Xiaolu Zhang","submitted_at":"2021-06-10T21:13:41Z","abstract_excerpt":"Boundary based blackbox attack has been recognized as practical and effective, given that an attacker only needs to access the final model prediction. However, the query efficiency of it is in general high especially for high dimensional image data. In this paper, we show that such efficiency highly depends on the scale at which the attack is applied, and attacking at the optimal scale significantly improves the efficiency. In particular, we propose a theoretical framework to analyze and show three key characteristics to improve the query efficiency. We prove that there exists an optimal scale"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06056","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.06056/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:48:25Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"SjdPYqGL2GRiI+T81f8HXBgXNDJ/bwpLWCQmPRfq8cB8iBvyXK7LImBM70j2c8eoa/E2dvwwK/HrFd2DjeVcAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T16:32:21.172549Z"},"content_sha256":"375efe066ebf763c80e3e6214d9e71698eca0fe641668a084e39f6ed1d79b7bc","schema_version":"1.0","event_id":"sha256:375efe066ebf763c80e3e6214d9e71698eca0fe641668a084e39f6ed1d79b7bc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/bundle.json","state_url":"https://pith.science/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T16:32:21Z","links":{"resolver":"https://pith.science/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM","bundle":"https://pith.science/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/bundle.json","state":"https://pith.science/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/3WHYKKSLSSNHLOIZXF3PAXXJAM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:3WHYKKSLSSNHLOIZXF3PAXXJAM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"cf721e3516eac6695ac387b9e7f8c5c5d2eb7d7c974a615707899b67ea002263","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-10T21:13:41Z","title_canon_sha256":"7b787e4bc21691690443065306e6cb5f7b9e6bc9ccfdc4a95faa1d0f9dda3693"},"schema_version":"1.0","source":{"id":"2106.06056","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.06056","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"arxiv_version","alias_value":"2106.06056v1","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.06056","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_12","alias_value":"3WHYKKSLSSNH","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_16","alias_value":"3WHYKKSLSSNHLOIZ","created_at":"2026-07-05T02:48:25Z"},{"alias_kind":"pith_short_8","alias_value":"3WHYKKSL","created_at":"2026-07-05T02:48:25Z"}],"graph_snapshots":[{"event_id":"sha256:375efe066ebf763c80e3e6214d9e71698eca0fe641668a084e39f6ed1d79b7bc","target":"graph","created_at":"2026-07-05T02:48:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.06056/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Boundary based blackbox attack has been recognized as practical and effective, given that an attacker only needs to access the final model prediction. However, the query efficiency of it is in general high especially for high dimensional image data. In this paper, we show that such efficiency highly depends on the scale at which the attack is applied, and attacking at the optimal scale significantly improves the efficiency. In particular, we propose a theoretical framework to analyze and show three key characteristics to improve the query efficiency. We prove that there exists an optimal scale","authors_text":"Bo Li, Huichen Li, Jiawei Zhang, Linyi Li, Shuang Yang, Xiaolu Zhang","cross_cats":["cs.CR","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-10T21:13:41Z","title":"Progressive-Scale Boundary Blackbox Attack via Projective Gradient Estimation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.06056","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:4e7d12287cd37c9ce5f6e7fa7ffb86713fb959373fc3a2d0c945c6ea4b3cdaeb","target":"record","created_at":"2026-07-05T02:48:25Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"cf721e3516eac6695ac387b9e7f8c5c5d2eb7d7c974a615707899b67ea002263","cross_cats_sorted":["cs.CR","cs.CV"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2021-06-10T21:13:41Z","title_canon_sha256":"7b787e4bc21691690443065306e6cb5f7b9e6bc9ccfdc4a95faa1d0f9dda3693"},"schema_version":"1.0","source":{"id":"2106.06056","kind":"arxiv","version":1}},"canonical_sha256":"dd8f852a4b949a75b919b976f05ee9033b62259e106ce7211de75d5dffa2eabf","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"dd8f852a4b949a75b919b976f05ee9033b62259e106ce7211de75d5dffa2eabf","first_computed_at":"2026-07-05T02:48:25.581381Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:48:25.581381Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bgNM75TVPvHMMSKm4RfVpGf4MLbGVP/XYaotBVURV/+1oS5f2R7LGv7SBJqaBpW6rGBUqXJ7bO5w75hVAQeBCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:48:25.581840Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.06056","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:4e7d12287cd37c9ce5f6e7fa7ffb86713fb959373fc3a2d0c945c6ea4b3cdaeb","sha256:375efe066ebf763c80e3e6214d9e71698eca0fe641668a084e39f6ed1d79b7bc"],"state_sha256":"d5ee17820a7637cd1c21c4504f65c4869e1add9478d665885c60b65b292576f7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ExRmvbC+P6Z4BuoYK3eWLXaRczZfEvypro6Fyl81arVTPc1Dz/PlMMnC6PqFdnGbQlanHmxfqNzr7M54xSFpAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T16:32:21.175390Z","bundle_sha256":"a10a8ac3f5c1950abf8e5c5fb92a218488d8d17c335aa66a21b2ae2a41a4171f"}}