{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:56GNPD3VTXI3UKIPLWJIZHQZTP","short_pith_number":"pith:56GNPD3V","canonical_record":{"source":{"id":"2201.11528","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-27T14:04:27Z","cross_cats_sorted":[],"title_canon_sha256":"b67e89dd7928a8f9038883a3663fc93204ab1eb0551ddfdde04a6c007cf32cbb","abstract_canon_sha256":"743ff6017a30175df2b07c977e4b10779b26def5ca6c17b94067e1e09dd3a1f5"},"schema_version":"1.0"},"canonical_sha256":"ef8cd78f759dd1ba290f5d928c9e199bfce30f769444311571de389a8a45f383","source":{"kind":"arxiv","id":"2201.11528","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.11528","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"arxiv_version","alias_value":"2201.11528v4","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.11528","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_12","alias_value":"56GNPD3VTXI3","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_16","alias_value":"56GNPD3VTXI3UKIP","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_8","alias_value":"56GNPD3V","created_at":"2026-07-05T04:04:45Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:56GNPD3VTXI3UKIPLWJIZHQZTP","target":"record","payload":{"canonical_record":{"source":{"id":"2201.11528","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-27T14:04:27Z","cross_cats_sorted":[],"title_canon_sha256":"b67e89dd7928a8f9038883a3663fc93204ab1eb0551ddfdde04a6c007cf32cbb","abstract_canon_sha256":"743ff6017a30175df2b07c977e4b10779b26def5ca6c17b94067e1e09dd3a1f5"},"schema_version":"1.0"},"canonical_sha256":"ef8cd78f759dd1ba290f5d928c9e199bfce30f769444311571de389a8a45f383","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:04:45.728521Z","signature_b64":"ZMN9Xb8AiOkoaIDqXOD3PnPxXQsCMfKYsnUlgFM+W63BhMvwiQOFa5dK2KMqQ1TLb4SXSy6c3ILG/Gl7DJ8RCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ef8cd78f759dd1ba290f5d928c9e199bfce30f769444311571de389a8a45f383","last_reissued_at":"2026-07-05T04:04:45.728055Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:04:45.728055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2201.11528","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:04:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VQtfnamDLrxV3j6fM6HBBGdC654kuIE2h/yVQPwpE2MhkaK+2wfC+1H6okBxhhUxlM4gRzE+oWRqQdYUIvWgDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T19:00:19.961267Z"},"content_sha256":"09e2b3429eb56dffa5ea4b284971380f4e0d0cd3b600b1770468141ba33d08f2","schema_version":"1.0","event_id":"sha256:09e2b3429eb56dffa5ea4b284971380f4e0d0cd3b600b1770468141ba33d08f2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:56GNPD3VTXI3UKIPLWJIZHQZTP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hui Xue, Jingkuan Song, Lianli Gao, Qilong Zhang, Xiaodan Li, Yuan He, Yuefeng Chen","submitted_at":"2022-01-27T14:04:27Z","abstract_excerpt":"Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-model transferability, which mostly assume the substitute model is trained in the same domain as the target model. However, in reality, the relevant information of the deployed model is unlikely to leak. Hence, it is vital to build a more practical black-box threat model to overcome this limitation and evaluate the vulnerability of deployed models. In this paper, with only the knowledge of the ImageNet domain, we propose"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.11528","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2201.11528/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:04:45Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Ia+WMWkkM7b3pKA/lv+56C4lApUSFoqq5sr4JYVfZ4Z2c+7J1z5arWK3NT/BPIlqw2/Ri6mHIeX2S0pzYPbaBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T19:00:19.961668Z"},"content_sha256":"a0a904e0f7798a1aba5a6d0a2bba10a6103a6c39375ec80a4383a2d26e6f68b3","schema_version":"1.0","event_id":"sha256:a0a904e0f7798a1aba5a6d0a2bba10a6103a6c39375ec80a4383a2d26e6f68b3"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/bundle.json","state_url":"https://pith.science/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T19:00:19Z","links":{"resolver":"https://pith.science/pith/56GNPD3VTXI3UKIPLWJIZHQZTP","bundle":"https://pith.science/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/bundle.json","state":"https://pith.science/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/56GNPD3VTXI3UKIPLWJIZHQZTP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:56GNPD3VTXI3UKIPLWJIZHQZTP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"743ff6017a30175df2b07c977e4b10779b26def5ca6c17b94067e1e09dd3a1f5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-27T14:04:27Z","title_canon_sha256":"b67e89dd7928a8f9038883a3663fc93204ab1eb0551ddfdde04a6c007cf32cbb"},"schema_version":"1.0","source":{"id":"2201.11528","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2201.11528","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"arxiv_version","alias_value":"2201.11528v4","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2201.11528","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_12","alias_value":"56GNPD3VTXI3","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_16","alias_value":"56GNPD3VTXI3UKIP","created_at":"2026-07-05T04:04:45Z"},{"alias_kind":"pith_short_8","alias_value":"56GNPD3V","created_at":"2026-07-05T04:04:45Z"}],"graph_snapshots":[{"event_id":"sha256:a0a904e0f7798a1aba5a6d0a2bba10a6103a6c39375ec80a4383a2d26e6f68b3","target":"graph","created_at":"2026-07-05T04:04:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2201.11528/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial examples have posed a severe threat to deep neural networks due to their transferable nature. Currently, various works have paid great efforts to enhance the cross-model transferability, which mostly assume the substitute model is trained in the same domain as the target model. However, in reality, the relevant information of the deployed model is unlikely to leak. Hence, it is vital to build a more practical black-box threat model to overcome this limitation and evaluate the vulnerability of deployed models. In this paper, with only the knowledge of the ImageNet domain, we propose","authors_text":"Hui Xue, Jingkuan Song, Lianli Gao, Qilong Zhang, Xiaodan Li, Yuan He, Yuefeng Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-27T14:04:27Z","title":"Beyond ImageNet Attack: Towards Crafting Adversarial Examples for Black-box Domains"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2201.11528","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:09e2b3429eb56dffa5ea4b284971380f4e0d0cd3b600b1770468141ba33d08f2","target":"record","created_at":"2026-07-05T04:04:45Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"743ff6017a30175df2b07c977e4b10779b26def5ca6c17b94067e1e09dd3a1f5","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-01-27T14:04:27Z","title_canon_sha256":"b67e89dd7928a8f9038883a3663fc93204ab1eb0551ddfdde04a6c007cf32cbb"},"schema_version":"1.0","source":{"id":"2201.11528","kind":"arxiv","version":4}},"canonical_sha256":"ef8cd78f759dd1ba290f5d928c9e199bfce30f769444311571de389a8a45f383","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ef8cd78f759dd1ba290f5d928c9e199bfce30f769444311571de389a8a45f383","first_computed_at":"2026-07-05T04:04:45.728055Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:04:45.728055Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ZMN9Xb8AiOkoaIDqXOD3PnPxXQsCMfKYsnUlgFM+W63BhMvwiQOFa5dK2KMqQ1TLb4SXSy6c3ILG/Gl7DJ8RCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:04:45.728521Z","signed_message":"canonical_sha256_bytes"},"source_id":"2201.11528","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:09e2b3429eb56dffa5ea4b284971380f4e0d0cd3b600b1770468141ba33d08f2","sha256:a0a904e0f7798a1aba5a6d0a2bba10a6103a6c39375ec80a4383a2d26e6f68b3"],"state_sha256":"a1bfffb1008145323031a4c9a423c83fa608d0f91852fce586be05a627b1cee9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"QbZdEPuGdAWk4J/eGZicHMaL/JZNQ54aMoyqwcvqf5NePYrgIIG+WTtukymhBjs9MhHacFBgFJIS7fNn+KJLCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T19:00:19.963972Z","bundle_sha256":"0ccbb2f372e73c173f4bd8a4b25acb93db0a0f391e53915f276a4bb2f8cf4099"}}