{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5FFBLSG3CVM3KB4QGWNY3PSWR5","short_pith_number":"pith:5FFBLSG3","canonical_record":{"source":{"id":"2402.15570","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T19:12:53Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ba661f83637ad795d4236a766f2d1b4daa0d444a24065bf87fcf427fa169f1ef","abstract_canon_sha256":"63a2f07e00fa6eb86e4eb556f95ba9345fcf31c92d5214f64d4117f798fd30e2"},"schema_version":"1.0"},"canonical_sha256":"e94a15c8db1559b50790359b8dbe568f467b124065ba15562c34482dad3fdfbb","source":{"kind":"arxiv","id":"2402.15570","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15570","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15570v1","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15570","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_12","alias_value":"5FFBLSG3CVM3","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_16","alias_value":"5FFBLSG3CVM3KB4Q","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_8","alias_value":"5FFBLSG3","created_at":"2026-07-05T07:48:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5FFBLSG3CVM3KB4QGWNY3PSWR5","target":"record","payload":{"canonical_record":{"source":{"id":"2402.15570","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T19:12:53Z","cross_cats_sorted":["cs.AI","cs.CL"],"title_canon_sha256":"ba661f83637ad795d4236a766f2d1b4daa0d444a24065bf87fcf427fa169f1ef","abstract_canon_sha256":"63a2f07e00fa6eb86e4eb556f95ba9345fcf31c92d5214f64d4117f798fd30e2"},"schema_version":"1.0"},"canonical_sha256":"e94a15c8db1559b50790359b8dbe568f467b124065ba15562c34482dad3fdfbb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:48:54.822391Z","signature_b64":"rwhJnGWW3W6dEx1Jbats5m2cmm5ATDxu+6o7semJFFsjQZq9jxnGAijB+2aExJrfDpFYcI1w+GT9nYnqQUNcCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e94a15c8db1559b50790359b8dbe568f467b124065ba15562c34482dad3fdfbb","last_reissued_at":"2026-07-05T07:48:54.821909Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:48:54.821909Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.15570","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:48:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Znnu1eZBxF7r2h/DdXTOMWRRxL2CgOAsIJ1CkrDHU9pM8ugWlnLRAtw5k24iE1fLJl4xd0TA1iHeDUMtv+5jDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:29:39.108948Z"},"content_sha256":"3493b3c0e707ebeed5d89ebc9a2f4a3322a6c2b9d828374cfa9a50a7ccb1d50a","schema_version":"1.0","event_id":"sha256:3493b3c0e707ebeed5d89ebc9a2f4a3322a6c2b9d828374cfa9a50a7ccb1d50a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5FFBLSG3CVM3KB4QGWNY3PSWR5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Fast Adversarial Attacks on Language Models In One GPU Minute","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CL"],"primary_cat":"cs.CR","authors_text":"Atoosa Chegini, Gaurang Sriramanan, Priyatham Kattakinda, Shoumik Saha, Soheil Feizi, Vinu Sankar Sadasivan","submitted_at":"2024-02-23T19:12:53Z","abstract_excerpt":"In this paper, we introduce a novel class of fast, beam search-based adversarial attack (BEAST) for Language Models (LMs). BEAST employs interpretable parameters, enabling attackers to balance between attack speed, success rate, and the readability of adversarial prompts. The computational efficiency of BEAST facilitates us to investigate its applications on LMs for jailbreaking, eliciting hallucinations, and privacy attacks. Our gradient-free targeted attack can jailbreak aligned LMs with high attack success rates within one minute. For instance, BEAST can jailbreak Vicuna-7B-v1.5 under one m"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15570","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.15570/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:48:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jcme+zD1uToCkn6xlDJmS5sokoltLzwqDCsXpcJogbyXw/syL3tJvm30BiESf3Tj9ftEd4FR2ZQKVaZp1VCnBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T13:29:39.109489Z"},"content_sha256":"1111bdc3dd3eb1ded086b50e3cdfb2fef7c30556570059f9c30e3c1dc8a3a218","schema_version":"1.0","event_id":"sha256:1111bdc3dd3eb1ded086b50e3cdfb2fef7c30556570059f9c30e3c1dc8a3a218"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/bundle.json","state_url":"https://pith.science/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T13:29:39Z","links":{"resolver":"https://pith.science/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5","bundle":"https://pith.science/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/bundle.json","state":"https://pith.science/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5FFBLSG3CVM3KB4QGWNY3PSWR5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5FFBLSG3CVM3KB4QGWNY3PSWR5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63a2f07e00fa6eb86e4eb556f95ba9345fcf31c92d5214f64d4117f798fd30e2","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T19:12:53Z","title_canon_sha256":"ba661f83637ad795d4236a766f2d1b4daa0d444a24065bf87fcf427fa169f1ef"},"schema_version":"1.0","source":{"id":"2402.15570","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.15570","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.15570v1","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.15570","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_12","alias_value":"5FFBLSG3CVM3","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_16","alias_value":"5FFBLSG3CVM3KB4Q","created_at":"2026-07-05T07:48:54Z"},{"alias_kind":"pith_short_8","alias_value":"5FFBLSG3","created_at":"2026-07-05T07:48:54Z"}],"graph_snapshots":[{"event_id":"sha256:1111bdc3dd3eb1ded086b50e3cdfb2fef7c30556570059f9c30e3c1dc8a3a218","target":"graph","created_at":"2026-07-05T07:48:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.15570/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we introduce a novel class of fast, beam search-based adversarial attack (BEAST) for Language Models (LMs). BEAST employs interpretable parameters, enabling attackers to balance between attack speed, success rate, and the readability of adversarial prompts. The computational efficiency of BEAST facilitates us to investigate its applications on LMs for jailbreaking, eliciting hallucinations, and privacy attacks. Our gradient-free targeted attack can jailbreak aligned LMs with high attack success rates within one minute. For instance, BEAST can jailbreak Vicuna-7B-v1.5 under one m","authors_text":"Atoosa Chegini, Gaurang Sriramanan, Priyatham Kattakinda, Shoumik Saha, Soheil Feizi, Vinu Sankar Sadasivan","cross_cats":["cs.AI","cs.CL"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T19:12:53Z","title":"Fast Adversarial Attacks on Language Models In One GPU Minute"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.15570","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3493b3c0e707ebeed5d89ebc9a2f4a3322a6c2b9d828374cfa9a50a7ccb1d50a","target":"record","created_at":"2026-07-05T07:48:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63a2f07e00fa6eb86e4eb556f95ba9345fcf31c92d5214f64d4117f798fd30e2","cross_cats_sorted":["cs.AI","cs.CL"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2024-02-23T19:12:53Z","title_canon_sha256":"ba661f83637ad795d4236a766f2d1b4daa0d444a24065bf87fcf427fa169f1ef"},"schema_version":"1.0","source":{"id":"2402.15570","kind":"arxiv","version":1}},"canonical_sha256":"e94a15c8db1559b50790359b8dbe568f467b124065ba15562c34482dad3fdfbb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e94a15c8db1559b50790359b8dbe568f467b124065ba15562c34482dad3fdfbb","first_computed_at":"2026-07-05T07:48:54.821909Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:48:54.821909Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rwhJnGWW3W6dEx1Jbats5m2cmm5ATDxu+6o7semJFFsjQZq9jxnGAijB+2aExJrfDpFYcI1w+GT9nYnqQUNcCw==","signature_status":"signed_v1","signed_at":"2026-07-05T07:48:54.822391Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.15570","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3493b3c0e707ebeed5d89ebc9a2f4a3322a6c2b9d828374cfa9a50a7ccb1d50a","sha256:1111bdc3dd3eb1ded086b50e3cdfb2fef7c30556570059f9c30e3c1dc8a3a218"],"state_sha256":"c343341d3bc4b1547d78d53e3255c9421aa43348626a1d60cf4b5857c3188fc6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KO6m3zsvEQWpiRQW/aLKr928yZuFcT8GYGDq+m/n8pAbRMT4mO+8HJpwtvzjHcm2Yj4tFbrIAvwpqS3ko6sKCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T13:29:39.114354Z","bundle_sha256":"c10eb36888882d3ada39179aa1ece6f6b2f77c0c1660b1f4697c36317e62a478"}}