{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:4G6FNSY47D7F65GZ6A4ODYMNWR","short_pith_number":"pith:4G6FNSY4","canonical_record":{"source":{"id":"2506.18591","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-23T12:51:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"de4c048dee72f322b3f1d578479493dd648917b3bea7cc8a5934581923956693","abstract_canon_sha256":"02eaf2cc3fff8f60d707701411a261c12fbe111f11a6cd9cb6713923e73ce668"},"schema_version":"1.0"},"canonical_sha256":"e1bc56cb1cf8fe5f74d9f038e1e18db4477586cb3cc80eae88063f50db3ddc44","source":{"kind":"arxiv","id":"2506.18591","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18591","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18591v1","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18591","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_12","alias_value":"4G6FNSY47D7F","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_16","alias_value":"4G6FNSY47D7F65GZ","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_8","alias_value":"4G6FNSY4","created_at":"2026-07-05T11:26:06Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:4G6FNSY47D7F65GZ6A4ODYMNWR","target":"record","payload":{"canonical_record":{"source":{"id":"2506.18591","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-23T12:51:10Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"de4c048dee72f322b3f1d578479493dd648917b3bea7cc8a5934581923956693","abstract_canon_sha256":"02eaf2cc3fff8f60d707701411a261c12fbe111f11a6cd9cb6713923e73ce668"},"schema_version":"1.0"},"canonical_sha256":"e1bc56cb1cf8fe5f74d9f038e1e18db4477586cb3cc80eae88063f50db3ddc44","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:26:06.403603Z","signature_b64":"yHUnwMZmu4wuelRT06cAm56TSNxV1DyhIZGl+aPvIoQxKmJE7vgibHYBY8T5uQOyFmwxQGLXmFQ2adQ2cNhVCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e1bc56cb1cf8fe5f74d9f038e1e18db4477586cb3cc80eae88063f50db3ddc44","last_reissued_at":"2026-07-05T11:26:06.403082Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:26:06.403082Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2506.18591","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cIibdOXvzMFEQgakYQTZHIE5EOPSxKNd3FSmmsTv38DgPxkl5Ta2pYq65Q4MgPN2pU0jkFk3DnSporJF3tdVAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:05:59.370628Z"},"content_sha256":"bb488169cf443c8317d26af18688e30ac5535092a10ea6ebc07d44bae5bde700","schema_version":"1.0","event_id":"sha256:bb488169cf443c8317d26af18688e30ac5535092a10ea6ebc07d44bae5bde700"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:4G6FNSY47D7F65GZ6A4ODYMNWR","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"SpaNN: Detecting Multiple Adversarial Patches on CNNs by Spanning Saliency Thresholds","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Gy\\\"orgy D\\'an, Henrik Sandberg, Mauricio Byrd Victorica","submitted_at":"2025-06-23T12:51:10Z","abstract_excerpt":"State-of-the-art convolutional neural network models for object detection and image classification are vulnerable to physically realizable adversarial perturbations, such as patch attacks. Existing defenses have focused, implicitly or explicitly, on single-patch attacks, leaving their sensitivity to the number of patches as an open question or rendering them computationally infeasible or inefficient against attacks consisting of multiple patches in the worst cases. In this work, we propose SpaNN, an attack detector whose computational complexity is independent of the expected number of adversa"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18591","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.18591/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:26:06Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Gthz7P9HEbSgd9ehIXKg1tg6CbtIxsQpmkK7mf4AOD1v1l2QH1j4v0I8EJyAWp3o2NDkl4pYAcBLlWvChxudAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T17:05:59.371198Z"},"content_sha256":"e3ee7ac0d26433008dc727a3d64de2c0378765a0ca250374253910dad6cb2b3d","schema_version":"1.0","event_id":"sha256:e3ee7ac0d26433008dc727a3d64de2c0378765a0ca250374253910dad6cb2b3d"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/bundle.json","state_url":"https://pith.science/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T17:05:59Z","links":{"resolver":"https://pith.science/pith/4G6FNSY47D7F65GZ6A4ODYMNWR","bundle":"https://pith.science/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/bundle.json","state":"https://pith.science/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4G6FNSY47D7F65GZ6A4ODYMNWR/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:4G6FNSY47D7F65GZ6A4ODYMNWR","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"02eaf2cc3fff8f60d707701411a261c12fbe111f11a6cd9cb6713923e73ce668","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-23T12:51:10Z","title_canon_sha256":"de4c048dee72f322b3f1d578479493dd648917b3bea7cc8a5934581923956693"},"schema_version":"1.0","source":{"id":"2506.18591","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2506.18591","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"arxiv_version","alias_value":"2506.18591v1","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.18591","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_12","alias_value":"4G6FNSY47D7F","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_16","alias_value":"4G6FNSY47D7F65GZ","created_at":"2026-07-05T11:26:06Z"},{"alias_kind":"pith_short_8","alias_value":"4G6FNSY4","created_at":"2026-07-05T11:26:06Z"}],"graph_snapshots":[{"event_id":"sha256:e3ee7ac0d26433008dc727a3d64de2c0378765a0ca250374253910dad6cb2b3d","target":"graph","created_at":"2026-07-05T11:26:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2506.18591/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"State-of-the-art convolutional neural network models for object detection and image classification are vulnerable to physically realizable adversarial perturbations, such as patch attacks. Existing defenses have focused, implicitly or explicitly, on single-patch attacks, leaving their sensitivity to the number of patches as an open question or rendering them computationally infeasible or inefficient against attacks consisting of multiple patches in the worst cases. In this work, we propose SpaNN, an attack detector whose computational complexity is independent of the expected number of adversa","authors_text":"Gy\\\"orgy D\\'an, Henrik Sandberg, Mauricio Byrd Victorica","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-23T12:51:10Z","title":"SpaNN: Detecting Multiple Adversarial Patches on CNNs by Spanning Saliency Thresholds"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.18591","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:bb488169cf443c8317d26af18688e30ac5535092a10ea6ebc07d44bae5bde700","target":"record","created_at":"2026-07-05T11:26:06Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"02eaf2cc3fff8f60d707701411a261c12fbe111f11a6cd9cb6713923e73ce668","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-06-23T12:51:10Z","title_canon_sha256":"de4c048dee72f322b3f1d578479493dd648917b3bea7cc8a5934581923956693"},"schema_version":"1.0","source":{"id":"2506.18591","kind":"arxiv","version":1}},"canonical_sha256":"e1bc56cb1cf8fe5f74d9f038e1e18db4477586cb3cc80eae88063f50db3ddc44","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e1bc56cb1cf8fe5f74d9f038e1e18db4477586cb3cc80eae88063f50db3ddc44","first_computed_at":"2026-07-05T11:26:06.403082Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:26:06.403082Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"yHUnwMZmu4wuelRT06cAm56TSNxV1DyhIZGl+aPvIoQxKmJE7vgibHYBY8T5uQOyFmwxQGLXmFQ2adQ2cNhVCg==","signature_status":"signed_v1","signed_at":"2026-07-05T11:26:06.403603Z","signed_message":"canonical_sha256_bytes"},"source_id":"2506.18591","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:bb488169cf443c8317d26af18688e30ac5535092a10ea6ebc07d44bae5bde700","sha256:e3ee7ac0d26433008dc727a3d64de2c0378765a0ca250374253910dad6cb2b3d"],"state_sha256":"811d176cedbcc88ef476f75227ba8bc20655c976749a8c8910d442a6bf1dffd7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6zd7z+xkVWAt2YIi2dYXl5C7G4ZgW4Yik3tvKlfldXJFXM3QRsCK0WDu8juPmTnvcnqte7l7pudfG5KCOOrsBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T17:05:59.394628Z","bundle_sha256":"ad663e2d2d9cbb461061bf184eff891fb7a8481bda99831b028ee1274533d57c"}}