{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:5NGPQOPRYJLTO3WNEX4ORDQVOO","short_pith_number":"pith:5NGPQOPR","canonical_record":{"source":{"id":"2309.14700","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-26T06:31:32Z","cross_cats_sorted":[],"title_canon_sha256":"5f3fc0c29f93be4834b6f494314c681b1b241f9e757fb62753617ccfacef14d6","abstract_canon_sha256":"7de762eadacfd9df031fc5f2cd2a977a9168e8dafc5aca8f670169a9fafdba35"},"schema_version":"1.0"},"canonical_sha256":"eb4cf839f1c257376ecd25f8e88e1573b2cbeb4f7b01964e1e1637dead585438","source":{"kind":"arxiv","id":"2309.14700","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.14700","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"arxiv_version","alias_value":"2309.14700v1","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.14700","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_12","alias_value":"5NGPQOPRYJLT","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_16","alias_value":"5NGPQOPRYJLTO3WN","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_8","alias_value":"5NGPQOPR","created_at":"2026-07-05T06:54:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:5NGPQOPRYJLTO3WNEX4ORDQVOO","target":"record","payload":{"canonical_record":{"source":{"id":"2309.14700","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-26T06:31:32Z","cross_cats_sorted":[],"title_canon_sha256":"5f3fc0c29f93be4834b6f494314c681b1b241f9e757fb62753617ccfacef14d6","abstract_canon_sha256":"7de762eadacfd9df031fc5f2cd2a977a9168e8dafc5aca8f670169a9fafdba35"},"schema_version":"1.0"},"canonical_sha256":"eb4cf839f1c257376ecd25f8e88e1573b2cbeb4f7b01964e1e1637dead585438","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:54:28.783538Z","signature_b64":"CwWoSKiiMAdD9ddBtpM0App227U8L7GbtC1kF61MiTiWQmVdFUzDYrsk8xn7zifiqsmDXx1VOFtazLac2EAvDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"eb4cf839f1c257376ecd25f8e88e1573b2cbeb4f7b01964e1e1637dead585438","last_reissued_at":"2026-07-05T06:54:28.783102Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:54:28.783102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2309.14700","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:54:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vD1W7n+/IdekXqB2T7YWaB7DsufxKzW5ukLsM2AOQJdos97GodcY44KaI9z78Asy7uuhLv51wKcWAvvukUVMCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T19:06:41.794961Z"},"content_sha256":"a6be0fc31dbd70ed24da6e337da707a484a02574c3d11c26d1c31f1a41909706","schema_version":"1.0","event_id":"sha256:a6be0fc31dbd70ed24da6e337da707a484a02574c3d11c26d1c31f1a41909706"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:5NGPQOPRYJLTO3WNEX4ORDQVOO","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Structure Invariant Transformation for better Adversarial Transferability","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Jianping Zhang, Xiaosen Wang, Zeliang Zhang","submitted_at":"2023-09-26T06:31:32Z","abstract_excerpt":"Given the severe vulnerability of Deep Neural Networks (DNNs) against adversarial examples, there is an urgent need for an effective adversarial attack to identify the deficiencies of DNNs in security-sensitive applications. As one of the prevalent black-box adversarial attacks, the existing transfer-based attacks still cannot achieve comparable performance with the white-box attacks. Among these, input transformation based attacks have shown remarkable effectiveness in boosting transferability. In this work, we find that the existing input transformation based attacks transform the input imag"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.14700","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2309.14700/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:54:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xLdpGUU19SlMlM9/7TLbdYCmMCInnxarJkX41y90W9PxPGSqsys1rgiySr4sKdjQzm8cK/UXT79++zfw4JBYBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-18T19:06:41.795348Z"},"content_sha256":"32f1bc7856002974abc1d466106f1d2c84e9d33aed30b345367dbdc198120558","schema_version":"1.0","event_id":"sha256:32f1bc7856002974abc1d466106f1d2c84e9d33aed30b345367dbdc198120558"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/bundle.json","state_url":"https://pith.science/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-18T19:06:41Z","links":{"resolver":"https://pith.science/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO","bundle":"https://pith.science/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/bundle.json","state":"https://pith.science/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5NGPQOPRYJLTO3WNEX4ORDQVOO/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:5NGPQOPRYJLTO3WNEX4ORDQVOO","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7de762eadacfd9df031fc5f2cd2a977a9168e8dafc5aca8f670169a9fafdba35","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-26T06:31:32Z","title_canon_sha256":"5f3fc0c29f93be4834b6f494314c681b1b241f9e757fb62753617ccfacef14d6"},"schema_version":"1.0","source":{"id":"2309.14700","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2309.14700","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"arxiv_version","alias_value":"2309.14700v1","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2309.14700","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_12","alias_value":"5NGPQOPRYJLT","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_16","alias_value":"5NGPQOPRYJLTO3WN","created_at":"2026-07-05T06:54:28Z"},{"alias_kind":"pith_short_8","alias_value":"5NGPQOPR","created_at":"2026-07-05T06:54:28Z"}],"graph_snapshots":[{"event_id":"sha256:32f1bc7856002974abc1d466106f1d2c84e9d33aed30b345367dbdc198120558","target":"graph","created_at":"2026-07-05T06:54:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2309.14700/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Given the severe vulnerability of Deep Neural Networks (DNNs) against adversarial examples, there is an urgent need for an effective adversarial attack to identify the deficiencies of DNNs in security-sensitive applications. As one of the prevalent black-box adversarial attacks, the existing transfer-based attacks still cannot achieve comparable performance with the white-box attacks. Among these, input transformation based attacks have shown remarkable effectiveness in boosting transferability. In this work, we find that the existing input transformation based attacks transform the input imag","authors_text":"Jianping Zhang, Xiaosen Wang, Zeliang Zhang","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-26T06:31:32Z","title":"Structure Invariant Transformation for better Adversarial Transferability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2309.14700","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a6be0fc31dbd70ed24da6e337da707a484a02574c3d11c26d1c31f1a41909706","target":"record","created_at":"2026-07-05T06:54:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7de762eadacfd9df031fc5f2cd2a977a9168e8dafc5aca8f670169a9fafdba35","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-09-26T06:31:32Z","title_canon_sha256":"5f3fc0c29f93be4834b6f494314c681b1b241f9e757fb62753617ccfacef14d6"},"schema_version":"1.0","source":{"id":"2309.14700","kind":"arxiv","version":1}},"canonical_sha256":"eb4cf839f1c257376ecd25f8e88e1573b2cbeb4f7b01964e1e1637dead585438","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"eb4cf839f1c257376ecd25f8e88e1573b2cbeb4f7b01964e1e1637dead585438","first_computed_at":"2026-07-05T06:54:28.783102Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:54:28.783102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CwWoSKiiMAdD9ddBtpM0App227U8L7GbtC1kF61MiTiWQmVdFUzDYrsk8xn7zifiqsmDXx1VOFtazLac2EAvDA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:54:28.783538Z","signed_message":"canonical_sha256_bytes"},"source_id":"2309.14700","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a6be0fc31dbd70ed24da6e337da707a484a02574c3d11c26d1c31f1a41909706","sha256:32f1bc7856002974abc1d466106f1d2c84e9d33aed30b345367dbdc198120558"],"state_sha256":"f75af0a68b72f0812bc9ff68eff93d651f2bd3071a2089f0cd97a7091f9686b1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PvynCvpDP94ywIEfpwu1jKJy1VSe0CKBodafE6b9Ptr5OfgIoxvsnXKq/xUXSdotzZY/blelWLQdx2Xdj3V1Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-18T19:06:41.797458Z","bundle_sha256":"3cd7415db2f798f3a5a2760e5fdec8843582bf77e5ca6d95bab695846ed14fe3"}}