{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2021:6ZZVFPNQQFZ7NBJRL2XBKNCBIK","short_pith_number":"pith:6ZZVFPNQ","schema_version":"1.0","canonical_sha256":"f67352bdb08173f685315eae15344142a91d302144ca26155fb77785f01af943","source":{"kind":"arxiv","id":"2109.11125","version":2},"attestation_state":"computed","paper":{"title":"Adversarial Transfer Attacks With Unknown Data and Class Overlap","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Andr\\'e Nguyen, Cynthia Matuszek, Edward Raff, Luke E. Richards, Ryan Capps, Steven Forsythe","submitted_at":"2021-09-23T03:41:34Z","abstract_excerpt":"The ability to transfer adversarial attacks from one model (the surrogate) to another model (the victim) has been an issue of concern within the machine learning (ML) community. The ability to successfully evade unseen models represents an uncomfortable level of ease toward implementing attacks. In this work we note that as studied, current transfer attack research has an unrealistic advantage for the attacker: the attacker has the exact same training data as the victim. We present the first study of transferring adversarial attacks focusing on the data available to attacker and victim under i"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2109.11125","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2021-09-23T03:41:34Z","cross_cats_sorted":["cs.CR","cs.CV"],"title_canon_sha256":"dd67de998b62d86ab964d54c91e954c566decff4a65bdd8693fd9f4634d5404b","abstract_canon_sha256":"2c8683850fc5fff4ea1df0472b455334fdf922bdeba33b6e4ee95d51776b82f9"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:17:16.598413Z","signature_b64":"Qz3XJZy8rqOsvT8DGYHCS2BWV4qS3kojOAedve5s8kK8FVyXxCboRKfZ/I9+GRkXdbPNEyAanKAVRbfgsDjMCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f67352bdb08173f685315eae15344142a91d302144ca26155fb77785f01af943","last_reissued_at":"2026-07-05T03:17:16.597938Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:17:16.597938Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Adversarial Transfer Attacks With Unknown Data and Class Overlap","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV"],"primary_cat":"cs.LG","authors_text":"Andr\\'e Nguyen, Cynthia Matuszek, Edward Raff, Luke E. Richards, Ryan Capps, Steven Forsythe","submitted_at":"2021-09-23T03:41:34Z","abstract_excerpt":"The ability to transfer adversarial attacks from one model (the surrogate) to another model (the victim) has been an issue of concern within the machine learning (ML) community. The ability to successfully evade unseen models represents an uncomfortable level of ease toward implementing attacks. In this work we note that as studied, current transfer attack research has an unrealistic advantage for the attacker: the attacker has the exact same training data as the victim. We present the first study of transferring adversarial attacks focusing on the data available to attacker and victim under i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.11125","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2109.11125/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2109.11125","created_at":"2026-07-05T03:17:16.598005+00:00"},{"alias_kind":"arxiv_version","alias_value":"2109.11125v2","created_at":"2026-07-05T03:17:16.598005+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.11125","created_at":"2026-07-05T03:17:16.598005+00:00"},{"alias_kind":"pith_short_12","alias_value":"6ZZVFPNQQFZ7","created_at":"2026-07-05T03:17:16.598005+00:00"},{"alias_kind":"pith_short_16","alias_value":"6ZZVFPNQQFZ7NBJR","created_at":"2026-07-05T03:17:16.598005+00:00"},{"alias_kind":"pith_short_8","alias_value":"6ZZVFPNQ","created_at":"2026-07-05T03:17:16.598005+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK","json":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK.json","graph_json":"https://pith.science/api/pith-number/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/graph.json","events_json":"https://pith.science/api/pith-number/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/events.json","paper":"https://pith.science/paper/6ZZVFPNQ"},"agent_actions":{"view_html":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK","download_json":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK.json","view_paper":"https://pith.science/paper/6ZZVFPNQ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2109.11125&json=true","fetch_graph":"https://pith.science/api/pith-number/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/graph.json","fetch_events":"https://pith.science/api/pith-number/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/action/timestamp_anchor","attest_storage":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/action/storage_attestation","attest_author":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/action/author_attestation","sign_citation":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/action/citation_signature","submit_replication":"https://pith.science/pith/6ZZVFPNQQFZ7NBJRL2XBKNCBIK/action/replication_record"}},"created_at":"2026-07-05T03:17:16.598005+00:00","updated_at":"2026-07-05T03:17:16.598005+00:00"}