{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5FIJNWKYW6UFTFJ3HILVDVLDZM","short_pith_number":"pith:5FIJNWKY","canonical_record":{"source":{"id":"2305.16934","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-26T13:49:44Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG","cs.MM"],"title_canon_sha256":"4dc0bab33468e05295eeceaf345e927f4ac1245708a917121711141153cac56d","abstract_canon_sha256":"4b398d694a36f2ee536090cd5b7c3a923a6eeb9f9fc0268ccf0b20bb6054a471"},"schema_version":"1.0"},"canonical_sha256":"e95096d958b7a859953b3a1751d563cb1647a6ef0b9bae72d824da2c6399b8fe","source":{"kind":"arxiv","id":"2305.16934","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.16934","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"arxiv_version","alias_value":"2305.16934v2","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.16934","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_12","alias_value":"5FIJNWKYW6UF","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_16","alias_value":"5FIJNWKYW6UFTFJ3","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_8","alias_value":"5FIJNWKY","created_at":"2026-07-05T07:06:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5FIJNWKYW6UFTFJ3HILVDVLDZM","target":"record","payload":{"canonical_record":{"source":{"id":"2305.16934","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-26T13:49:44Z","cross_cats_sorted":["cs.CL","cs.CR","cs.LG","cs.MM"],"title_canon_sha256":"4dc0bab33468e05295eeceaf345e927f4ac1245708a917121711141153cac56d","abstract_canon_sha256":"4b398d694a36f2ee536090cd5b7c3a923a6eeb9f9fc0268ccf0b20bb6054a471"},"schema_version":"1.0"},"canonical_sha256":"e95096d958b7a859953b3a1751d563cb1647a6ef0b9bae72d824da2c6399b8fe","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:06:28.089520Z","signature_b64":"kmKYBmiBcXij0LzagQrUFCjOSXUd81s4WijXHEdp6rKjxeiIhRDokSCIepJBkdK2QRlYEVM/aUuMhpY3AoS5BQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"e95096d958b7a859953b3a1751d563cb1647a6ef0b9bae72d824da2c6399b8fe","last_reissued_at":"2026-07-05T07:06:28.089023Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:06:28.089023Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2305.16934","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NusuISdwPQjk0L3lnUHd57AXlP9Ap/vJTNdAWm77hMr5WSUOVOWYIaC/TFuZOw2l7cfbMFwMcxchCyMOEICzAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:53:00.886633Z"},"content_sha256":"3bd991485896fd25e02c4f464b4470c25d63f71706f8e452eabbcca7b8240884","schema_version":"1.0","event_id":"sha256:3bd991485896fd25e02c4f464b4470c25d63f71706f8e452eabbcca7b8240884"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5FIJNWKYW6UFTFJ3HILVDVLDZM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Evaluating Adversarial Robustness of Large Vision-Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CL","cs.CR","cs.LG","cs.MM"],"primary_cat":"cs.CV","authors_text":"Chao Du, Chongxuan Li, Min Lin, Ngai-Man Cheung, Tianyu Pang, Xiao Yang, Yunqing Zhao","submitted_at":"2023-05-26T13:49:44Z","abstract_excerpt":"Large vision-language models (VLMs) such as GPT-4 have achieved unprecedented performance in response generation, especially with visual inputs, enabling more creative and adaptable interaction than large language models such as ChatGPT. Nonetheless, multimodal generation exacerbates safety concerns, since adversaries may successfully evade the entire system by subtly manipulating the most vulnerable modality (e.g., vision). To this end, we propose evaluating the robustness of open-source large VLMs in the most realistic and high-risk setting, where adversaries have only black-box system acces"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.16934","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2305.16934/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:06:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nPNmJ/IlSkwjAcGmRwHLBnz3nF9ln4zKJEjsPw9pJFcOVfKaWM44Zjvg3ZiX8udWrvSMV2as9g1ile6XxH1eCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T05:53:00.887184Z"},"content_sha256":"98ac1282a6506b46460a8c7f010b10d12585f453473d0512a918c47d4d4d1b78","schema_version":"1.0","event_id":"sha256:98ac1282a6506b46460a8c7f010b10d12585f453473d0512a918c47d4d4d1b78"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/bundle.json","state_url":"https://pith.science/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T05:53:00Z","links":{"resolver":"https://pith.science/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM","bundle":"https://pith.science/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/bundle.json","state":"https://pith.science/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5FIJNWKYW6UFTFJ3HILVDVLDZM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5FIJNWKYW6UFTFJ3HILVDVLDZM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4b398d694a36f2ee536090cd5b7c3a923a6eeb9f9fc0268ccf0b20bb6054a471","cross_cats_sorted":["cs.CL","cs.CR","cs.LG","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-26T13:49:44Z","title_canon_sha256":"4dc0bab33468e05295eeceaf345e927f4ac1245708a917121711141153cac56d"},"schema_version":"1.0","source":{"id":"2305.16934","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2305.16934","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"arxiv_version","alias_value":"2305.16934v2","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2305.16934","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_12","alias_value":"5FIJNWKYW6UF","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_16","alias_value":"5FIJNWKYW6UFTFJ3","created_at":"2026-07-05T07:06:28Z"},{"alias_kind":"pith_short_8","alias_value":"5FIJNWKY","created_at":"2026-07-05T07:06:28Z"}],"graph_snapshots":[{"event_id":"sha256:98ac1282a6506b46460a8c7f010b10d12585f453473d0512a918c47d4d4d1b78","target":"graph","created_at":"2026-07-05T07:06:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2305.16934/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Large vision-language models (VLMs) such as GPT-4 have achieved unprecedented performance in response generation, especially with visual inputs, enabling more creative and adaptable interaction than large language models such as ChatGPT. Nonetheless, multimodal generation exacerbates safety concerns, since adversaries may successfully evade the entire system by subtly manipulating the most vulnerable modality (e.g., vision). To this end, we propose evaluating the robustness of open-source large VLMs in the most realistic and high-risk setting, where adversaries have only black-box system acces","authors_text":"Chao Du, Chongxuan Li, Min Lin, Ngai-Man Cheung, Tianyu Pang, Xiao Yang, Yunqing Zhao","cross_cats":["cs.CL","cs.CR","cs.LG","cs.MM"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-26T13:49:44Z","title":"On Evaluating Adversarial Robustness of Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2305.16934","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3bd991485896fd25e02c4f464b4470c25d63f71706f8e452eabbcca7b8240884","target":"record","created_at":"2026-07-05T07:06:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4b398d694a36f2ee536090cd5b7c3a923a6eeb9f9fc0268ccf0b20bb6054a471","cross_cats_sorted":["cs.CL","cs.CR","cs.LG","cs.MM"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-05-26T13:49:44Z","title_canon_sha256":"4dc0bab33468e05295eeceaf345e927f4ac1245708a917121711141153cac56d"},"schema_version":"1.0","source":{"id":"2305.16934","kind":"arxiv","version":2}},"canonical_sha256":"e95096d958b7a859953b3a1751d563cb1647a6ef0b9bae72d824da2c6399b8fe","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"e95096d958b7a859953b3a1751d563cb1647a6ef0b9bae72d824da2c6399b8fe","first_computed_at":"2026-07-05T07:06:28.089023Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:06:28.089023Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kmKYBmiBcXij0LzagQrUFCjOSXUd81s4WijXHEdp6rKjxeiIhRDokSCIepJBkdK2QRlYEVM/aUuMhpY3AoS5BQ==","signature_status":"signed_v1","signed_at":"2026-07-05T07:06:28.089520Z","signed_message":"canonical_sha256_bytes"},"source_id":"2305.16934","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3bd991485896fd25e02c4f464b4470c25d63f71706f8e452eabbcca7b8240884","sha256:98ac1282a6506b46460a8c7f010b10d12585f453473d0512a918c47d4d4d1b78"],"state_sha256":"f34d3dcba73e97cc36948e3388ea8b6e8ee814e95231384e9c04ceb74ab6241a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"aCSI1keMfbHQ7hYUfZb/JYzKCVRtpsC1f2rZtCNEvuGYXNNz1VOMXrEK++59j880fDse/3l5ybY5RGUCw4heBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T05:53:00.892755Z","bundle_sha256":"4ed7514eb5ab29b8c420b454d67edf2a08069834cdec762bc477592a9c699fdd"}}