{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:76LVW2YO44R6FOS3VKJZTRKVXJ","short_pith_number":"pith:76LVW2YO","canonical_record":{"source":{"id":"2409.00029","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-08-17T12:46:53Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"0fdfa15c82db348dfe72d96eb6015967bff98099ed1ac5800d88c96a82bc895a","abstract_canon_sha256":"9e2870499eec7c4139b5a69a2d9e97415be5339bae1732f933e4393bc9f4452f"},"schema_version":"1.0"},"canonical_sha256":"ff975b6b0ee723e2ba5baa9399c555ba5d3c573922a6e312c89199c155a49893","source":{"kind":"arxiv","id":"2409.00029","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.00029","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"arxiv_version","alias_value":"2409.00029v3","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.00029","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_12","alias_value":"76LVW2YO44R6","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_16","alias_value":"76LVW2YO44R6FOS3","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_8","alias_value":"76LVW2YO","created_at":"2026-07-05T11:48:20Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:76LVW2YO44R6FOS3VKJZTRKVXJ","target":"record","payload":{"canonical_record":{"source":{"id":"2409.00029","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-08-17T12:46:53Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"0fdfa15c82db348dfe72d96eb6015967bff98099ed1ac5800d88c96a82bc895a","abstract_canon_sha256":"9e2870499eec7c4139b5a69a2d9e97415be5339bae1732f933e4393bc9f4452f"},"schema_version":"1.0"},"canonical_sha256":"ff975b6b0ee723e2ba5baa9399c555ba5d3c573922a6e312c89199c155a49893","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:48:20.826748Z","signature_b64":"A2bC+uGgZg/T8qA7+zomXwRzqF0+hdsJksYi1JO8axOgJJkKzZXe2APaF63LH5aO8RBbpIvjWbpHrT8dWgKCDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"ff975b6b0ee723e2ba5baa9399c555ba5d3c573922a6e312c89199c155a49893","last_reissued_at":"2026-07-05T11:48:20.826275Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:48:20.826275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.00029","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DU9AoTIDHPTHDCLQTtcVYovkn01tT43wbmrbIg08F4LcVajcdVPOtR2Mnre7MzhkJMjd44rEjAfwP7R1qbxZDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:05:06.800305Z"},"content_sha256":"2a2a1e13805d14f847dc64aef16884c0db914a5a6132d75da05b6a047f9fdb31","schema_version":"1.0","event_id":"sha256:2a2a1e13805d14f847dc64aef16884c0db914a5a6132d75da05b6a047f9fdb31"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:76LVW2YO44R6FOS3VKJZTRKVXJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Jiawei Lian, Lap-Pui Chau, Lefan Wang, Mingyang Ma, Shaohui Mei, Xiaofei Wang, Yingjie Lu, Yi Wang","submitted_at":"2024-08-17T12:46:53Z","abstract_excerpt":"It has been widely substantiated that deep neural networks (DNNs) are susceptible and vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks by corrupting targeted objects (physical attack) or images (digital attack), which is intuitively acceptable and understandable in terms of the attack's effectiveness. In contrast, our focus lies in conducting background adversarial attacks in both digital and physical domains, without causing any disruptions to the targeted objects themselves. Specifically, an effective background adversarial attack framework is prop"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.00029","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.00029/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:48:20Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"j89GHnaB4ARvBqnbyJCsI8nzb4Ts9Gfaync0gIS0oHLBdWFtBXS35q/uCBbC8ITClH7h8+DWXMN4KD8J8VerAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T04:05:06.801429Z"},"content_sha256":"09da236ee534d4b0e76d5ea893450dc728a8dd896651419b89fde3a3335e67b8","schema_version":"1.0","event_id":"sha256:09da236ee534d4b0e76d5ea893450dc728a8dd896651419b89fde3a3335e67b8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/bundle.json","state_url":"https://pith.science/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T04:05:06Z","links":{"resolver":"https://pith.science/pith/76LVW2YO44R6FOS3VKJZTRKVXJ","bundle":"https://pith.science/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/bundle.json","state":"https://pith.science/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/76LVW2YO44R6FOS3VKJZTRKVXJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:76LVW2YO44R6FOS3VKJZTRKVXJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"9e2870499eec7c4139b5a69a2d9e97415be5339bae1732f933e4393bc9f4452f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-08-17T12:46:53Z","title_canon_sha256":"0fdfa15c82db348dfe72d96eb6015967bff98099ed1ac5800d88c96a82bc895a"},"schema_version":"1.0","source":{"id":"2409.00029","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.00029","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"arxiv_version","alias_value":"2409.00029v3","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.00029","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_12","alias_value":"76LVW2YO44R6","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_16","alias_value":"76LVW2YO44R6FOS3","created_at":"2026-07-05T11:48:20Z"},{"alias_kind":"pith_short_8","alias_value":"76LVW2YO","created_at":"2026-07-05T11:48:20Z"}],"graph_snapshots":[{"event_id":"sha256:09da236ee534d4b0e76d5ea893450dc728a8dd896651419b89fde3a3335e67b8","target":"graph","created_at":"2026-07-05T11:48:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.00029/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It has been widely substantiated that deep neural networks (DNNs) are susceptible and vulnerable to adversarial perturbations. Existing studies mainly focus on performing attacks by corrupting targeted objects (physical attack) or images (digital attack), which is intuitively acceptable and understandable in terms of the attack's effectiveness. In contrast, our focus lies in conducting background adversarial attacks in both digital and physical domains, without causing any disruptions to the targeted objects themselves. Specifically, an effective background adversarial attack framework is prop","authors_text":"Jiawei Lian, Lap-Pui Chau, Lefan Wang, Mingyang Ma, Shaohui Mei, Xiaofei Wang, Yingjie Lu, Yi Wang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-08-17T12:46:53Z","title":"Attack Anything: Blind DNNs via Universal Background Adversarial Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.00029","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2a2a1e13805d14f847dc64aef16884c0db914a5a6132d75da05b6a047f9fdb31","target":"record","created_at":"2026-07-05T11:48:20Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"9e2870499eec7c4139b5a69a2d9e97415be5339bae1732f933e4393bc9f4452f","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-08-17T12:46:53Z","title_canon_sha256":"0fdfa15c82db348dfe72d96eb6015967bff98099ed1ac5800d88c96a82bc895a"},"schema_version":"1.0","source":{"id":"2409.00029","kind":"arxiv","version":3}},"canonical_sha256":"ff975b6b0ee723e2ba5baa9399c555ba5d3c573922a6e312c89199c155a49893","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"ff975b6b0ee723e2ba5baa9399c555ba5d3c573922a6e312c89199c155a49893","first_computed_at":"2026-07-05T11:48:20.826275Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:48:20.826275Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"A2bC+uGgZg/T8qA7+zomXwRzqF0+hdsJksYi1JO8axOgJJkKzZXe2APaF63LH5aO8RBbpIvjWbpHrT8dWgKCDA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:48:20.826748Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.00029","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2a2a1e13805d14f847dc64aef16884c0db914a5a6132d75da05b6a047f9fdb31","sha256:09da236ee534d4b0e76d5ea893450dc728a8dd896651419b89fde3a3335e67b8"],"state_sha256":"b8b5f31809ef4b91ba19e3e2cab0aa9eddae2af83ddbbdd48fe970f1318bacc4"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0D7i5PFJy6SR/ESKYPpmhqTPYMNTahdOUIjD11fN0Thm45Wxm5X3rqAyHVMw3CQ1II9Yu/laQOPdr64epeaWAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T04:05:06.810093Z","bundle_sha256":"fe5fc0485c645d1ba8c2fb180d355c4c2cf83174e6e259c13ba2ffb5dbcea2b3"}}