{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:5ZDUT652ZWYULXQMYLNMW4C6VU","short_pith_number":"pith:5ZDUT652","canonical_record":{"source":{"id":"2407.19553","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-28T18:20:08Z","cross_cats_sorted":[],"title_canon_sha256":"50289e0fe64b4a718930f725df44e1e7203d43eb8d74b3cf9b8e5e9ce119d591","abstract_canon_sha256":"eea1d53e9c49db56b1a70dd1b0dc3a9fb20b10366fb0c8b1ef598987d3e87a62"},"schema_version":"1.0"},"canonical_sha256":"ee4749fbbacdb145de0cc2dacb705ead0c6310d71f3c4f2da0398f2c213fa84e","source":{"kind":"arxiv","id":"2407.19553","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.19553","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"arxiv_version","alias_value":"2407.19553v2","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.19553","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_12","alias_value":"5ZDUT652ZWYU","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_16","alias_value":"5ZDUT652ZWYULXQM","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_8","alias_value":"5ZDUT652","created_at":"2026-07-05T09:24:37Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:5ZDUT652ZWYULXQMYLNMW4C6VU","target":"record","payload":{"canonical_record":{"source":{"id":"2407.19553","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-28T18:20:08Z","cross_cats_sorted":[],"title_canon_sha256":"50289e0fe64b4a718930f725df44e1e7203d43eb8d74b3cf9b8e5e9ce119d591","abstract_canon_sha256":"eea1d53e9c49db56b1a70dd1b0dc3a9fb20b10366fb0c8b1ef598987d3e87a62"},"schema_version":"1.0"},"canonical_sha256":"ee4749fbbacdb145de0cc2dacb705ead0c6310d71f3c4f2da0398f2c213fa84e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:24:37.622306Z","signature_b64":"U3ZzZmKVc7p2swDE28WAQnhPhVn5fROPLiVWI8c3E6yZdk11cGIjctvnuF8Leon5zUxd2dfowbWeb1EaLN/iAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ee4749fbbacdb145de0cc2dacb705ead0c6310d71f3c4f2da0398f2c213fa84e","last_reissued_at":"2026-07-05T09:24:37.621722Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:24:37.621722Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.19553","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tzydeoxf9zSrcVr1eChb9GJI3Mk5pONyPGptdPYg9egCwdxDkFejQacMwiVItEgx0I3r4Kp50Y5PAqT8NyxQBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:21:16.304064Z"},"content_sha256":"366b5de37be3e14a9b36a5aeb9e0d383414651786f3d96ad7c9b365f073f13fb","schema_version":"1.0","event_id":"sha256:366b5de37be3e14a9b36a5aeb9e0d383414651786f3d96ad7c9b365f073f13fb"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:5ZDUT652ZWYULXQMYLNMW4C6VU","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exploring the Adversarial Robustness of CLIP for AI-generated Image Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Davide Cozzolino, Fabrizio Guillaro, Giovanni Poggi, Luisa Verdoliva, Vincenzo De Rosa","submitted_at":"2024-07-28T18:20:08Z","abstract_excerpt":"In recent years, many forensic detectors have been proposed to detect AI-generated images and prevent their use for malicious purposes. Convolutional neural networks (CNNs) have long been the dominant architecture in this field and have been the subject of intense study. However, recently proposed Transformer-based detectors have been shown to match or even outperform CNN-based detectors, especially in terms of generalization. In this paper, we study the adversarial robustness of AI-generated image detectors, focusing on Contrastive Language-Image Pretraining (CLIP)-based methods that rely on "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.19553","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.19553/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:24:37Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eR+NFCfDTgFptButxcQ1oBMvNFItjrerNKY29DheVA9v3QFiVyZiv1VikvHtSKBKdrxn+eADamKOb5oHcuMDDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T03:21:16.304592Z"},"content_sha256":"0f0a91f881523bb22a078d44bdf3c6ea1d995a57c0cfcb30c0fbd6fab1524966","schema_version":"1.0","event_id":"sha256:0f0a91f881523bb22a078d44bdf3c6ea1d995a57c0cfcb30c0fbd6fab1524966"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/bundle.json","state_url":"https://pith.science/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T03:21:16Z","links":{"resolver":"https://pith.science/pith/5ZDUT652ZWYULXQMYLNMW4C6VU","bundle":"https://pith.science/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/bundle.json","state":"https://pith.science/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/state.json","well_known_bundle":"https://pith.science/.well-known/pith/5ZDUT652ZWYULXQMYLNMW4C6VU/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:5ZDUT652ZWYULXQMYLNMW4C6VU","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"eea1d53e9c49db56b1a70dd1b0dc3a9fb20b10366fb0c8b1ef598987d3e87a62","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-28T18:20:08Z","title_canon_sha256":"50289e0fe64b4a718930f725df44e1e7203d43eb8d74b3cf9b8e5e9ce119d591"},"schema_version":"1.0","source":{"id":"2407.19553","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.19553","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"arxiv_version","alias_value":"2407.19553v2","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.19553","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_12","alias_value":"5ZDUT652ZWYU","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_16","alias_value":"5ZDUT652ZWYULXQM","created_at":"2026-07-05T09:24:37Z"},{"alias_kind":"pith_short_8","alias_value":"5ZDUT652","created_at":"2026-07-05T09:24:37Z"}],"graph_snapshots":[{"event_id":"sha256:0f0a91f881523bb22a078d44bdf3c6ea1d995a57c0cfcb30c0fbd6fab1524966","target":"graph","created_at":"2026-07-05T09:24:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.19553/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, many forensic detectors have been proposed to detect AI-generated images and prevent their use for malicious purposes. Convolutional neural networks (CNNs) have long been the dominant architecture in this field and have been the subject of intense study. However, recently proposed Transformer-based detectors have been shown to match or even outperform CNN-based detectors, especially in terms of generalization. In this paper, we study the adversarial robustness of AI-generated image detectors, focusing on Contrastive Language-Image Pretraining (CLIP)-based methods that rely on ","authors_text":"Davide Cozzolino, Fabrizio Guillaro, Giovanni Poggi, Luisa Verdoliva, Vincenzo De Rosa","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-28T18:20:08Z","title":"Exploring the Adversarial Robustness of CLIP for AI-generated Image Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.19553","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:366b5de37be3e14a9b36a5aeb9e0d383414651786f3d96ad7c9b365f073f13fb","target":"record","created_at":"2026-07-05T09:24:37Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"eea1d53e9c49db56b1a70dd1b0dc3a9fb20b10366fb0c8b1ef598987d3e87a62","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-07-28T18:20:08Z","title_canon_sha256":"50289e0fe64b4a718930f725df44e1e7203d43eb8d74b3cf9b8e5e9ce119d591"},"schema_version":"1.0","source":{"id":"2407.19553","kind":"arxiv","version":2}},"canonical_sha256":"ee4749fbbacdb145de0cc2dacb705ead0c6310d71f3c4f2da0398f2c213fa84e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ee4749fbbacdb145de0cc2dacb705ead0c6310d71f3c4f2da0398f2c213fa84e","first_computed_at":"2026-07-05T09:24:37.621722Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:24:37.621722Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"U3ZzZmKVc7p2swDE28WAQnhPhVn5fROPLiVWI8c3E6yZdk11cGIjctvnuF8Leon5zUxd2dfowbWeb1EaLN/iAA==","signature_status":"signed_v1","signed_at":"2026-07-05T09:24:37.622306Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.19553","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:366b5de37be3e14a9b36a5aeb9e0d383414651786f3d96ad7c9b365f073f13fb","sha256:0f0a91f881523bb22a078d44bdf3c6ea1d995a57c0cfcb30c0fbd6fab1524966"],"state_sha256":"4b8c4c4d59538e188eb4795914a4ef60ae15a24fefb76ba485f28c8a0d50140d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"J/LD00dfU1o4T8WYutjccQ2Lxuh1bwx/D4Sxc/Gehta18wOHFVlvXo0BwWzZuP++3g5SARPnIH95GJFVSPGACA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T03:21:16.309988Z","bundle_sha256":"135a8b0439da7dadb1fabf4bb97fd81992f763bc96422dafef1fdfa42c061532"}}