{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5YDH4FIPVMJCSGXUXCBOAVLJ2H","short_pith_number":"pith:5YDH4FIP","canonical_record":{"source":{"id":"2408.13985","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-26T02:35:37Z","cross_cats_sorted":[],"title_canon_sha256":"6ed59274950076e28ed24fe8312e55c5388474c568befc1ce21a01171b741614","abstract_canon_sha256":"7f89ec3506c4bd9198b291163c29499b5bf3d54c0a57e7129c29a6417bfcf22e"},"schema_version":"1.0"},"canonical_sha256":"ee067e150fab12291af4b882e05569d1db2e8f92962cdac91fb5863c3207a9ab","source":{"kind":"arxiv","id":"2408.13985","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.13985","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"arxiv_version","alias_value":"2408.13985v3","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.13985","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_12","alias_value":"5YDH4FIPVMJC","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_16","alias_value":"5YDH4FIPVMJCSGXU","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_8","alias_value":"5YDH4FIP","created_at":"2026-07-05T09:04:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5YDH4FIPVMJCSGXUXCBOAVLJ2H","target":"record","payload":{"canonical_record":{"source":{"id":"2408.13985","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-26T02:35:37Z","cross_cats_sorted":[],"title_canon_sha256":"6ed59274950076e28ed24fe8312e55c5388474c568befc1ce21a01171b741614","abstract_canon_sha256":"7f89ec3506c4bd9198b291163c29499b5bf3d54c0a57e7129c29a6417bfcf22e"},"schema_version":"1.0"},"canonical_sha256":"ee067e150fab12291af4b882e05569d1db2e8f92962cdac91fb5863c3207a9ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:04:39.511991Z","signature_b64":"cKvchiho/xNe3fpYfKVPLOdP6mh0h/SGCa49Kd0svCxXxsSITcAwN/pe5sPnumL5YIlt+IQz+ZwZVaVecyChDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee067e150fab12291af4b882e05569d1db2e8f92962cdac91fb5863c3207a9ab","last_reissued_at":"2026-07-05T09:04:39.511516Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:04:39.511516Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.13985","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:04:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4HxGWUwpBKWrd2ZQNQMN5rJXEY4Cx9aIMhfLJdXLl/G82ouoDUS2CU56koWC70vhllPcPjnmNFrbFuByn91XBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:27:09.778305Z"},"content_sha256":"78c40b11adbd377fe6df0575a345e22151302c2c8bfb0ed786a025d8fd0c5058","schema_version":"1.0","event_id":"sha256:78c40b11adbd377fe6df0575a345e22151302c2c8bfb0ed786a025d8fd0c5058"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5YDH4FIPVMJCSGXUXCBOAVLJ2H","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CL","authors_text":"Kehai Chen, Lemao Liu, Mingming Yang, Min Zhang, Xuefeng Bai, Yang Xiang, Zelin Li","submitted_at":"2024-08-26T02:35:37Z","abstract_excerpt":"With the great advancements in large language models (LLMs), adversarial attacks against LLMs have recently attracted increasing attention. We found that pre-existing adversarial attack methodologies exhibit limited transferability and are notably inefficient, particularly when applied to LLMs. In this paper, we analyze the core mechanisms of previous predominant adversarial attack methods, revealing that 1) the distributions of importance score differ markedly among victim models, restricting the transferability; 2) the sequential attack processes induces substantial time overheads. Based on "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.13985","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.13985/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:04:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"swIs8a6r2kGtZKaO91p6vrkop3I4wJGxVjJj2eZyx4sTOKDyjKgQo3ao5/P+9wFWgEgszpdA0+1p6fGVg/SRAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T20:27:09.778895Z"},"content_sha256":"a356aa6344b79e81a636ab40cb616bebe70e255a1a07c88614af88562a6d6f92","schema_version":"1.0","event_id":"sha256:a356aa6344b79e81a636ab40cb616bebe70e255a1a07c88614af88562a6d6f92"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/bundle.json","state_url":"https://pith.science/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T20:27:09Z","links":{"resolver":"https://pith.science/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H","bundle":"https://pith.science/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/bundle.json","state":"https://pith.science/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5YDH4FIPVMJCSGXUXCBOAVLJ2H/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5YDH4FIPVMJCSGXUXCBOAVLJ2H","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7f89ec3506c4bd9198b291163c29499b5bf3d54c0a57e7129c29a6417bfcf22e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-26T02:35:37Z","title_canon_sha256":"6ed59274950076e28ed24fe8312e55c5388474c568befc1ce21a01171b741614"},"schema_version":"1.0","source":{"id":"2408.13985","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.13985","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"arxiv_version","alias_value":"2408.13985v3","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.13985","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_12","alias_value":"5YDH4FIPVMJC","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_16","alias_value":"5YDH4FIPVMJCSGXU","created_at":"2026-07-05T09:04:39Z"},{"alias_kind":"pith_short_8","alias_value":"5YDH4FIP","created_at":"2026-07-05T09:04:39Z"}],"graph_snapshots":[{"event_id":"sha256:a356aa6344b79e81a636ab40cb616bebe70e255a1a07c88614af88562a6d6f92","target":"graph","created_at":"2026-07-05T09:04:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.13985/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"With the great advancements in large language models (LLMs), adversarial attacks against LLMs have recently attracted increasing attention. We found that pre-existing adversarial attack methodologies exhibit limited transferability and are notably inefficient, particularly when applied to LLMs. In this paper, we analyze the core mechanisms of previous predominant adversarial attack methods, revealing that 1) the distributions of importance score differ markedly among victim models, restricting the transferability; 2) the sequential attack processes induces substantial time overheads. Based on ","authors_text":"Kehai Chen, Lemao Liu, Mingming Yang, Min Zhang, Xuefeng Bai, Yang Xiang, Zelin Li","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-26T02:35:37Z","title":"TF-Attack: Transferable and Fast Adversarial Attacks on Large Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.13985","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:78c40b11adbd377fe6df0575a345e22151302c2c8bfb0ed786a025d8fd0c5058","target":"record","created_at":"2026-07-05T09:04:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7f89ec3506c4bd9198b291163c29499b5bf3d54c0a57e7129c29a6417bfcf22e","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CL","submitted_at":"2024-08-26T02:35:37Z","title_canon_sha256":"6ed59274950076e28ed24fe8312e55c5388474c568befc1ce21a01171b741614"},"schema_version":"1.0","source":{"id":"2408.13985","kind":"arxiv","version":3}},"canonical_sha256":"ee067e150fab12291af4b882e05569d1db2e8f92962cdac91fb5863c3207a9ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee067e150fab12291af4b882e05569d1db2e8f92962cdac91fb5863c3207a9ab","first_computed_at":"2026-07-05T09:04:39.511516Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:04:39.511516Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cKvchiho/xNe3fpYfKVPLOdP6mh0h/SGCa49Kd0svCxXxsSITcAwN/pe5sPnumL5YIlt+IQz+ZwZVaVecyChDg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:04:39.511991Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.13985","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:78c40b11adbd377fe6df0575a345e22151302c2c8bfb0ed786a025d8fd0c5058","sha256:a356aa6344b79e81a636ab40cb616bebe70e255a1a07c88614af88562a6d6f92"],"state_sha256":"a7f72285c95a2fc618660b569145e2fe499aa7518a2e798d81a1c673d1f960b6"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a1ZX3bwk/k/nxLvnp6UvkVl1AOZHdRyJbtggdJrgwBMLptq9WVa2oRGcQ9p28Y9o/Bj54jFxS5+4+9nXr/uiAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T20:27:09.784436Z","bundle_sha256":"1356791a1eb44755dbecddce0be1ce3c4700a84cf74b8980da515d585f474dec"}}