{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:4FF5HXQWPMSN4LADXNALOZ3FZZ","short_pith_number":"pith:4FF5HXQW","canonical_record":{"source":{"id":"2307.14061","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-26T09:19:21Z","cross_cats_sorted":[],"title_canon_sha256":"4b1351275199de641bb26e0d8dcc540373655267cbfd42c17dc487536f91a815","abstract_canon_sha256":"2da0ed02f40edba3200f85e7c173a1c87d0c567ffdc16951bffdd8cf53d164ec"},"schema_version":"1.0"},"canonical_sha256":"e14bd3de167b24de2c03bb40b76765ce796b9c235ae8419fbf9684e7852403af","source":{"kind":"arxiv","id":"2307.14061","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.14061","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"arxiv_version","alias_value":"2307.14061v1","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.14061","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_12","alias_value":"4FF5HXQWPMSN","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_16","alias_value":"4FF5HXQWPMSN4LAD","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_8","alias_value":"4FF5HXQW","created_at":"2026-07-05T06:34:57Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:4FF5HXQWPMSN4LADXNALOZ3FZZ","target":"record","payload":{"canonical_record":{"source":{"id":"2307.14061","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-26T09:19:21Z","cross_cats_sorted":[],"title_canon_sha256":"4b1351275199de641bb26e0d8dcc540373655267cbfd42c17dc487536f91a815","abstract_canon_sha256":"2da0ed02f40edba3200f85e7c173a1c87d0c567ffdc16951bffdd8cf53d164ec"},"schema_version":"1.0"},"canonical_sha256":"e14bd3de167b24de2c03bb40b76765ce796b9c235ae8419fbf9684e7852403af","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:34:57.037031Z","signature_b64":"t3sxbvyNykg9gaOCqeurN4wlL7z6qLLHQKAoS/azwhR0zwqhGQduNCwnUig3txdyYG8XoLzJehB/OkN6gdnjDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e14bd3de167b24de2c03bb40b76765ce796b9c235ae8419fbf9684e7852403af","last_reissued_at":"2026-07-05T06:34:57.036638Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:34:57.036638Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.14061","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:34:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wINCK15rJwmaJVIyKyNkXwmCMg95LrJ5lM1jXfBYLa+NRJlrz90g+q7X0f+mXRefanepMRc2zG74KDrVXkx/Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:36:47.021336Z"},"content_sha256":"f799a1c1bb9403e3f375532568468c89a25f2240c388e1fcf7ef0eda9ad7a4c9","schema_version":"1.0","event_id":"sha256:f799a1c1bb9403e3f375532568468c89a25f2240c388e1fcf7ef0eda9ad7a4c9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:4FF5HXQWPMSN4LADXNALOZ3FZZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Dong Lu, Feng Zheng, Hongchang Gao, Teng Wang, Weili Guan, Zhiqiang Wang","submitted_at":"2023-07-26T09:19:21Z","abstract_excerpt":"Vision-language pre-training (VLP) models have shown vulnerability to adversarial examples in multimodal tasks. Furthermore, malicious adversaries can be deliberately transferred to attack other black-box models. However, existing work has mainly focused on investigating white-box attacks. In this paper, we present the first study to investigate the adversarial transferability of recent VLP models. We observe that existing methods exhibit much lower transferability, compared to the strong attack performance in white-box settings. The transferability degradation is partly caused by the under-ut"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.14061","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.14061/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:34:57Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FuI7VXHfT3FUbMQ/MZDfjxvGQf0iesoVyzTKDPJ6DPOrsnWlJFYU2QZknmMH4kidkzf/XYlt9vevTP4OHxYfCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T00:36:47.021721Z"},"content_sha256":"e5214473274df9ffcdb03382ffd6dbbb2d84aa46a8e6f167640c26e0930585c0","schema_version":"1.0","event_id":"sha256:e5214473274df9ffcdb03382ffd6dbbb2d84aa46a8e6f167640c26e0930585c0"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/bundle.json","state_url":"https://pith.science/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T00:36:47Z","links":{"resolver":"https://pith.science/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ","bundle":"https://pith.science/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/bundle.json","state":"https://pith.science/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4FF5HXQWPMSN4LADXNALOZ3FZZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:4FF5HXQWPMSN4LADXNALOZ3FZZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2da0ed02f40edba3200f85e7c173a1c87d0c567ffdc16951bffdd8cf53d164ec","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-26T09:19:21Z","title_canon_sha256":"4b1351275199de641bb26e0d8dcc540373655267cbfd42c17dc487536f91a815"},"schema_version":"1.0","source":{"id":"2307.14061","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.14061","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"arxiv_version","alias_value":"2307.14061v1","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.14061","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_12","alias_value":"4FF5HXQWPMSN","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_16","alias_value":"4FF5HXQWPMSN4LAD","created_at":"2026-07-05T06:34:57Z"},{"alias_kind":"pith_short_8","alias_value":"4FF5HXQW","created_at":"2026-07-05T06:34:57Z"}],"graph_snapshots":[{"event_id":"sha256:e5214473274df9ffcdb03382ffd6dbbb2d84aa46a8e6f167640c26e0930585c0","target":"graph","created_at":"2026-07-05T06:34:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.14061/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-language pre-training (VLP) models have shown vulnerability to adversarial examples in multimodal tasks. Furthermore, malicious adversaries can be deliberately transferred to attack other black-box models. However, existing work has mainly focused on investigating white-box attacks. In this paper, we present the first study to investigate the adversarial transferability of recent VLP models. We observe that existing methods exhibit much lower transferability, compared to the strong attack performance in white-box settings. The transferability degradation is partly caused by the under-ut","authors_text":"Dong Lu, Feng Zheng, Hongchang Gao, Teng Wang, Weili Guan, Zhiqiang Wang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-26T09:19:21Z","title":"Set-level Guidance Attack: Boosting Adversarial Transferability of Vision-Language Pre-training Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.14061","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f799a1c1bb9403e3f375532568468c89a25f2240c388e1fcf7ef0eda9ad7a4c9","target":"record","created_at":"2026-07-05T06:34:57Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2da0ed02f40edba3200f85e7c173a1c87d0c567ffdc16951bffdd8cf53d164ec","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-07-26T09:19:21Z","title_canon_sha256":"4b1351275199de641bb26e0d8dcc540373655267cbfd42c17dc487536f91a815"},"schema_version":"1.0","source":{"id":"2307.14061","kind":"arxiv","version":1}},"canonical_sha256":"e14bd3de167b24de2c03bb40b76765ce796b9c235ae8419fbf9684e7852403af","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e14bd3de167b24de2c03bb40b76765ce796b9c235ae8419fbf9684e7852403af","first_computed_at":"2026-07-05T06:34:57.036638Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:34:57.036638Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"t3sxbvyNykg9gaOCqeurN4wlL7z6qLLHQKAoS/azwhR0zwqhGQduNCwnUig3txdyYG8XoLzJehB/OkN6gdnjDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:34:57.037031Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.14061","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f799a1c1bb9403e3f375532568468c89a25f2240c388e1fcf7ef0eda9ad7a4c9","sha256:e5214473274df9ffcdb03382ffd6dbbb2d84aa46a8e6f167640c26e0930585c0"],"state_sha256":"dc55239f32f803b64b293c64ec26f7b6b917d52b4d0fdf802e0803e57c4609d1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ckcDjV3Z+B7GMh7u38Pav0P1EVyZXLqTTao149BYOlP1YRcdfY/Z1IaZpfOnyienNoZ2cE4SpBnmJleHD+KGAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T00:36:47.024539Z","bundle_sha256":"f21746032b4b66dd546ea5330267fc676ba1aa6bd8e7413e2c9ee0bca99a384d"}}