{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:6Q2SLA7AG52LBWZ6YHYJSEASXL","short_pith_number":"pith:6Q2SLA7A","canonical_record":{"source":{"id":"1912.00049","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-29T19:29:32Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"f3a7c2285df5d4c597dd33cc4f5d543bd3828595b6a0d528e7c2894cbd627008","abstract_canon_sha256":"258f1deba59e16d3c30610d4ee687892b61be718604b02d22c7d2590e0ee4f5e"},"schema_version":"1.0"},"canonical_sha256":"f4352583e03774b0db3ec1f0991012bae220703a65a206c4c6b89c26192c645f","source":{"kind":"arxiv","id":"1912.00049","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.00049","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"arxiv_version","alias_value":"1912.00049v3","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.00049","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_12","alias_value":"6Q2SLA7AG52L","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_16","alias_value":"6Q2SLA7AG52LBWZ6","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_8","alias_value":"6Q2SLA7A","created_at":"2026-07-05T01:23:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:6Q2SLA7AG52LBWZ6YHYJSEASXL","target":"record","payload":{"canonical_record":{"source":{"id":"1912.00049","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-29T19:29:32Z","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"title_canon_sha256":"f3a7c2285df5d4c597dd33cc4f5d543bd3828595b6a0d528e7c2894cbd627008","abstract_canon_sha256":"258f1deba59e16d3c30610d4ee687892b61be718604b02d22c7d2590e0ee4f5e"},"schema_version":"1.0"},"canonical_sha256":"f4352583e03774b0db3ec1f0991012bae220703a65a206c4c6b89c26192c645f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:23:10.094600Z","signature_b64":"GzxDboNd03aKvB0Th4BS8wHqQGQGFVybAMv/1qLCI8Qcz9C1cCrJ1KqEMxZtxoPjJuh4McbzKGYO2CiWAietCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f4352583e03774b0db3ec1f0991012bae220703a65a206c4c6b89c26192c645f","last_reissued_at":"2026-07-05T01:23:10.094102Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:23:10.094102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1912.00049","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wOLG77QFxbVoxh8m8ebOkJv1je6RV65jSk378PPCUKGzFtlZCkFe6rdlaVPJGCOVAoIzlm6X0VpNjB80aqduBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:27:50.864121Z"},"content_sha256":"77ca050e4c16fee46286b9f3db316c85ff6d57f04b99ab28ec0c2414bc81f56e","schema_version":"1.0","event_id":"sha256:77ca050e4c16fee46286b9f3db316c85ff6d57f04b99ab28ec0c2414bc81f56e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:6Q2SLA7AG52LBWZ6YHYJSEASXL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Square Attack: a query-efficient black-box adversarial attack via random search","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","stat.ML"],"primary_cat":"cs.LG","authors_text":"Francesco Croce, Maksym Andriushchenko, Matthias Hein, Nicolas Flammarion","submitted_at":"2019-11-29T19:29:32Z","abstract_excerpt":"We propose the Square Attack, a score-based black-box $l_2$- and $l_\\infty$-adversarial attack that does not rely on local gradient information and thus is not affected by gradient masking. Square Attack is based on a randomized search scheme which selects localized square-shaped updates at random positions so that at each iteration the perturbation is situated approximately at the boundary of the feasible set. Our method is significantly more query efficient and achieves a higher success rate compared to the state-of-the-art methods, especially in the untargeted setting. In particular, on Ima"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.00049","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1912.00049/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:23:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"8NZ+FhWdBBGWDFtsqDinfjD9AC4DsGMIMvx+br9xrevDwVjURLl0E5rvmh/repVJI3w5NfHS37yThgUqb7KcBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T08:27:50.864510Z"},"content_sha256":"d34617c4e3baa3b495bf91e0faf8e8a53ac701b7f1264004cf00313a6a11032c","schema_version":"1.0","event_id":"sha256:d34617c4e3baa3b495bf91e0faf8e8a53ac701b7f1264004cf00313a6a11032c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/bundle.json","state_url":"https://pith.science/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T08:27:50Z","links":{"resolver":"https://pith.science/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL","bundle":"https://pith.science/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/bundle.json","state":"https://pith.science/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/6Q2SLA7AG52LBWZ6YHYJSEASXL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:6Q2SLA7AG52LBWZ6YHYJSEASXL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"258f1deba59e16d3c30610d4ee687892b61be718604b02d22c7d2590e0ee4f5e","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-29T19:29:32Z","title_canon_sha256":"f3a7c2285df5d4c597dd33cc4f5d543bd3828595b6a0d528e7c2894cbd627008"},"schema_version":"1.0","source":{"id":"1912.00049","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1912.00049","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"arxiv_version","alias_value":"1912.00049v3","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1912.00049","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_12","alias_value":"6Q2SLA7AG52L","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_16","alias_value":"6Q2SLA7AG52LBWZ6","created_at":"2026-07-05T01:23:10Z"},{"alias_kind":"pith_short_8","alias_value":"6Q2SLA7A","created_at":"2026-07-05T01:23:10Z"}],"graph_snapshots":[{"event_id":"sha256:d34617c4e3baa3b495bf91e0faf8e8a53ac701b7f1264004cf00313a6a11032c","target":"graph","created_at":"2026-07-05T01:23:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1912.00049/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We propose the Square Attack, a score-based black-box $l_2$- and $l_\\infty$-adversarial attack that does not rely on local gradient information and thus is not affected by gradient masking. Square Attack is based on a randomized search scheme which selects localized square-shaped updates at random positions so that at each iteration the perturbation is situated approximately at the boundary of the feasible set. Our method is significantly more query efficient and achieves a higher success rate compared to the state-of-the-art methods, especially in the untargeted setting. In particular, on Ima","authors_text":"Francesco Croce, Maksym Andriushchenko, Matthias Hein, Nicolas Flammarion","cross_cats":["cs.CR","cs.CV","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-29T19:29:32Z","title":"Square Attack: a query-efficient black-box adversarial attack via random search"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1912.00049","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:77ca050e4c16fee46286b9f3db316c85ff6d57f04b99ab28ec0c2414bc81f56e","target":"record","created_at":"2026-07-05T01:23:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"258f1deba59e16d3c30610d4ee687892b61be718604b02d22c7d2590e0ee4f5e","cross_cats_sorted":["cs.CR","cs.CV","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-11-29T19:29:32Z","title_canon_sha256":"f3a7c2285df5d4c597dd33cc4f5d543bd3828595b6a0d528e7c2894cbd627008"},"schema_version":"1.0","source":{"id":"1912.00049","kind":"arxiv","version":3}},"canonical_sha256":"f4352583e03774b0db3ec1f0991012bae220703a65a206c4c6b89c26192c645f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f4352583e03774b0db3ec1f0991012bae220703a65a206c4c6b89c26192c645f","first_computed_at":"2026-07-05T01:23:10.094102Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:23:10.094102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GzxDboNd03aKvB0Th4BS8wHqQGQGFVybAMv/1qLCI8Qcz9C1cCrJ1KqEMxZtxoPjJuh4McbzKGYO2CiWAietCA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:23:10.094600Z","signed_message":"canonical_sha256_bytes"},"source_id":"1912.00049","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:77ca050e4c16fee46286b9f3db316c85ff6d57f04b99ab28ec0c2414bc81f56e","sha256:d34617c4e3baa3b495bf91e0faf8e8a53ac701b7f1264004cf00313a6a11032c"],"state_sha256":"e931c3aa30764c66009856c0ae88c4a0e1830d33cd8811e860edfd0809df5753"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lMt8rXrzHji9x8hL0/U5MIhmsxPDHGnWOXJ3b5+fwSb8p/v7TMLEHsoEhCFqPPATNuj5rLBxCS5JPYd2kBtKDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T08:27:50.866463Z","bundle_sha256":"7e08239569574365bb262cb43304d9c2ffa773f4584d87b598fbe62e1dcd878f"}}