{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:4GVQQGRHXGU5IZRS2MXF5IIXOC","short_pith_number":"pith:4GVQQGRH","canonical_record":{"source":{"id":"2208.10878","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-08-23T11:25:16Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d6d564ce33a70ad13cd514e32b27cbedc2c7110986932b0a5e315e510ce6073e","abstract_canon_sha256":"67b4db3fe849b46b7619e08fc749a63b5728234a520749967d8566b7db7c4ab0"},"schema_version":"1.0"},"canonical_sha256":"e1ab081a27b9a9d46632d32e5ea11770a1eefd75aaebb8d19ebe17f5e2a51b33","source":{"kind":"arxiv","id":"2208.10878","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10878","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10878v2","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10878","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_12","alias_value":"4GVQQGRHXGU5","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_16","alias_value":"4GVQQGRHXGU5IZRS","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_8","alias_value":"4GVQQGRH","created_at":"2026-07-05T08:09:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:4GVQQGRHXGU5IZRS2MXF5IIXOC","target":"record","payload":{"canonical_record":{"source":{"id":"2208.10878","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-08-23T11:25:16Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"d6d564ce33a70ad13cd514e32b27cbedc2c7110986932b0a5e315e510ce6073e","abstract_canon_sha256":"67b4db3fe849b46b7619e08fc749a63b5728234a520749967d8566b7db7c4ab0"},"schema_version":"1.0"},"canonical_sha256":"e1ab081a27b9a9d46632d32e5ea11770a1eefd75aaebb8d19ebe17f5e2a51b33","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:09:22.539548Z","signature_b64":"bDfTIypcqgOVR9hVXRassr+49i70UNJikwGwvgv6jZ88L6uuxgnEgMMVTet6TsM7dI2mz74Tx/U2kItn1PAuDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e1ab081a27b9a9d46632d32e5ea11770a1eefd75aaebb8d19ebe17f5e2a51b33","last_reissued_at":"2026-07-05T08:09:22.539166Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:09:22.539166Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2208.10878","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+eRjzZIouZz18R+fq5KfoCLpV2R51CGEV3XEZV7YS34heGjvykZQMIYWqsmkqdzneOrPWs17a1q6ZfM6q0PPBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:41:30.882873Z"},"content_sha256":"a28ba65d69f02f992de1aa3c6d72ed11d14bebdf7540c5e5b99f1b43370a65c3","schema_version":"1.0","event_id":"sha256:a28ba65d69f02f992de1aa3c6d72ed11d14bebdf7540c5e5b99f1b43370a65c3"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:4GVQQGRHXGU5IZRS2MXF5IIXOC","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Transferability Ranking of Adversarial Examples","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Guy Amit, Mosh Levy, Yisroel Mirsky, Yuval Elovici","submitted_at":"2022-08-23T11:25:16Z","abstract_excerpt":"Adversarial transferability in black-box scenarios presents a unique challenge: while attackers can employ surrogate models to craft adversarial examples, they lack assurance on whether these examples will successfully compromise the target model. Until now, the prevalent method to ascertain success has been trial and error-testing crafted samples directly on the victim model. This approach, however, risks detection with every attempt, forcing attackers to either perfect their first try or face exposure. Our paper introduces a ranking strategy that refines the transfer attack process, enabling"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10878","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2208.10878/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:09:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XQSc3s6EvoaNdHh3EiM8kGcqfMmmsoMZbgkvZ0kE6t2aiFDk/JWQfR728Dhdgt+27VZ8oTU+wLHKWq1d42uQDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-01T05:41:30.883608Z"},"content_sha256":"92e0b7051cdd397760fad129c3d409d6b19ec9ff26cd5051aeba005a892e7520","schema_version":"1.0","event_id":"sha256:92e0b7051cdd397760fad129c3d409d6b19ec9ff26cd5051aeba005a892e7520"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/bundle.json","state_url":"https://pith.science/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-01T05:41:30Z","links":{"resolver":"https://pith.science/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC","bundle":"https://pith.science/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/bundle.json","state":"https://pith.science/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/state.json","well_known_bundle":"https://pith.science/.well-known/pith/4GVQQGRHXGU5IZRS2MXF5IIXOC/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:4GVQQGRHXGU5IZRS2MXF5IIXOC","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"67b4db3fe849b46b7619e08fc749a63b5728234a520749967d8566b7db7c4ab0","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-08-23T11:25:16Z","title_canon_sha256":"d6d564ce33a70ad13cd514e32b27cbedc2c7110986932b0a5e315e510ce6073e"},"schema_version":"1.0","source":{"id":"2208.10878","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2208.10878","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"arxiv_version","alias_value":"2208.10878v2","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2208.10878","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_12","alias_value":"4GVQQGRHXGU5","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_16","alias_value":"4GVQQGRHXGU5IZRS","created_at":"2026-07-05T08:09:22Z"},{"alias_kind":"pith_short_8","alias_value":"4GVQQGRH","created_at":"2026-07-05T08:09:22Z"}],"graph_snapshots":[{"event_id":"sha256:92e0b7051cdd397760fad129c3d409d6b19ec9ff26cd5051aeba005a892e7520","target":"graph","created_at":"2026-07-05T08:09:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2208.10878/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial transferability in black-box scenarios presents a unique challenge: while attackers can employ surrogate models to craft adversarial examples, they lack assurance on whether these examples will successfully compromise the target model. Until now, the prevalent method to ascertain success has been trial and error-testing crafted samples directly on the victim model. This approach, however, risks detection with every attempt, forcing attackers to either perfect their first try or face exposure. Our paper introduces a ranking strategy that refines the transfer attack process, enabling","authors_text":"Guy Amit, Mosh Levy, Yisroel Mirsky, Yuval Elovici","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-08-23T11:25:16Z","title":"Transferability Ranking of Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2208.10878","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a28ba65d69f02f992de1aa3c6d72ed11d14bebdf7540c5e5b99f1b43370a65c3","target":"record","created_at":"2026-07-05T08:09:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"67b4db3fe849b46b7619e08fc749a63b5728234a520749967d8566b7db7c4ab0","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2022-08-23T11:25:16Z","title_canon_sha256":"d6d564ce33a70ad13cd514e32b27cbedc2c7110986932b0a5e315e510ce6073e"},"schema_version":"1.0","source":{"id":"2208.10878","kind":"arxiv","version":2}},"canonical_sha256":"e1ab081a27b9a9d46632d32e5ea11770a1eefd75aaebb8d19ebe17f5e2a51b33","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e1ab081a27b9a9d46632d32e5ea11770a1eefd75aaebb8d19ebe17f5e2a51b33","first_computed_at":"2026-07-05T08:09:22.539166Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:09:22.539166Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"bDfTIypcqgOVR9hVXRassr+49i70UNJikwGwvgv6jZ88L6uuxgnEgMMVTet6TsM7dI2mz74Tx/U2kItn1PAuDg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:09:22.539548Z","signed_message":"canonical_sha256_bytes"},"source_id":"2208.10878","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a28ba65d69f02f992de1aa3c6d72ed11d14bebdf7540c5e5b99f1b43370a65c3","sha256:92e0b7051cdd397760fad129c3d409d6b19ec9ff26cd5051aeba005a892e7520"],"state_sha256":"70644ec81e407a978ab138471d74b294e3aea6070632c8b3ab3cd0bc6b3e04c7"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bPiMfTXi+x/ab7sJqRMkzQuyDv/iWMjck1dwmnPBQ8QTcq6jOZCuuB4DqCDuwNMfGmONQNXvzPsltm6Rc5GCCw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-01T05:41:30.888773Z","bundle_sha256":"5fe75b64847996eec2415ffe2b27be5a2dcd8931225c858484259ef076c0e096"}}