{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:7NYEEQYOVPFEGLKVNCZ4WGNDKP","short_pith_number":"pith:7NYEEQYO","canonical_record":{"source":{"id":"1902.02947","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-08T06:06:01Z","cross_cats_sorted":["cs.CR","cs.CV","cs.NE","stat.ML"],"title_canon_sha256":"0651b1ce1e5322937e075043ec0b1b010d1601567df8153197c2bd0e4987ef62","abstract_canon_sha256":"24b2620f4d4a4d5385af991f4993c1e006bc999563f2b736e151776c6a12f74a"},"schema_version":"1.0"},"canonical_sha256":"fb7042430eabca432d5568b3cb19a353fca2c524a9a1477ff1882371aa3c42c3","source":{"kind":"arxiv","id":"1902.02947","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.02947","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"arxiv_version","alias_value":"1902.02947v1","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.02947","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"pith_short_12","alias_value":"7NYEEQYOVPFE","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"7NYEEQYOVPFEGLKV","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"7NYEEQYO","created_at":"2026-05-18T12:33:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:7NYEEQYOVPFEGLKVNCZ4WGNDKP","target":"record","payload":{"canonical_record":{"source":{"id":"1902.02947","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-08T06:06:01Z","cross_cats_sorted":["cs.CR","cs.CV","cs.NE","stat.ML"],"title_canon_sha256":"0651b1ce1e5322937e075043ec0b1b010d1601567df8153197c2bd0e4987ef62","abstract_canon_sha256":"24b2620f4d4a4d5385af991f4993c1e006bc999563f2b736e151776c6a12f74a"},"schema_version":"1.0"},"canonical_sha256":"fb7042430eabca432d5568b3cb19a353fca2c524a9a1477ff1882371aa3c42c3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:54:28.755798Z","signature_b64":"7ZfONVjSBX/TVJWfZ+VoynkuG6734DJ6LpYMXruawFzrVbWcm1gCab6GWnjQuHg0SMTDnSOatg2T02jRsSfNBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fb7042430eabca432d5568b3cb19a353fca2c524a9a1477ff1882371aa3c42c3","last_reissued_at":"2026-05-17T23:54:28.755302Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:54:28.755302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1902.02947","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:54:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"wBd+v0T/gPW7omLYHEWAWy5SrXcW2o/EzwxCTFTpUg4L+h+0EoeeKb2esXQVmKbahWXgYn+wOFLUxS6x1LmlAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T20:36:05.121541Z"},"content_sha256":"01ff0080db53a28d5974822e8d5e8be1c9d60af94cf8c167f5f9c08693ef5881","schema_version":"1.0","event_id":"sha256:01ff0080db53a28d5974822e8d5e8be1c9d60af94cf8c167f5f9c08693ef5881"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:7NYEEQYOVPFEGLKVNCZ4WGNDKP","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.NE","stat.ML"],"primary_cat":"cs.LG","authors_text":"Danilo Vasconcellos Vargas, Jiawei Su","submitted_at":"2019-02-08T06:06:01Z","abstract_excerpt":"Deep neural networks were shown to be vulnerable to single pixel modifications. However, the reason behind such phenomena has never been elucidated. Here, we propose Propagation Maps which show the influence of the perturbation in each layer of the network. Propagation Maps reveal that even in extremely deep networks such as Resnet, modification in one pixel easily propagates until the last layer. In fact, this initial local perturbation is also shown to spread becoming a global one and reaching absolute difference values that are close to the maximum value of the original feature maps in a gi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.02947","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:54:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZFK8a+WrJUvP1/4AazMr76xE+MKdJZdOgej56gmH+lAPiMD3oBk9a0CvSvar5LMPOABbMAbiO+ggN/7vbP62Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-29T20:36:05.121900Z"},"content_sha256":"f05ed6498898c2a089449ba586b7ad1167ee3dc7f8077421bc2ea5447dcc39e6","schema_version":"1.0","event_id":"sha256:f05ed6498898c2a089449ba586b7ad1167ee3dc7f8077421bc2ea5447dcc39e6"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/bundle.json","state_url":"https://pith.science/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-29T20:36:05Z","links":{"resolver":"https://pith.science/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP","bundle":"https://pith.science/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/bundle.json","state":"https://pith.science/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/state.json","well_known_bundle":"https://pith.science/.well-known/pith/7NYEEQYOVPFEGLKVNCZ4WGNDKP/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:7NYEEQYOVPFEGLKVNCZ4WGNDKP","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24b2620f4d4a4d5385af991f4993c1e006bc999563f2b736e151776c6a12f74a","cross_cats_sorted":["cs.CR","cs.CV","cs.NE","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-08T06:06:01Z","title_canon_sha256":"0651b1ce1e5322937e075043ec0b1b010d1601567df8153197c2bd0e4987ef62"},"schema_version":"1.0","source":{"id":"1902.02947","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1902.02947","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"arxiv_version","alias_value":"1902.02947v1","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.02947","created_at":"2026-05-17T23:54:28Z"},{"alias_kind":"pith_short_12","alias_value":"7NYEEQYOVPFE","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"7NYEEQYOVPFEGLKV","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"7NYEEQYO","created_at":"2026-05-18T12:33:12Z"}],"graph_snapshots":[{"event_id":"sha256:f05ed6498898c2a089449ba586b7ad1167ee3dc7f8077421bc2ea5447dcc39e6","target":"graph","created_at":"2026-05-17T23:54:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep neural networks were shown to be vulnerable to single pixel modifications. However, the reason behind such phenomena has never been elucidated. Here, we propose Propagation Maps which show the influence of the perturbation in each layer of the network. Propagation Maps reveal that even in extremely deep networks such as Resnet, modification in one pixel easily propagates until the last layer. In fact, this initial local perturbation is also shown to spread becoming a global one and reaching absolute difference values that are close to the maximum value of the original feature maps in a gi","authors_text":"Danilo Vasconcellos Vargas, Jiawei Su","cross_cats":["cs.CR","cs.CV","cs.NE","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-08T06:06:01Z","title":"Understanding the One-Pixel Attack: Propagation Maps and Locality Analysis"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.02947","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:01ff0080db53a28d5974822e8d5e8be1c9d60af94cf8c167f5f9c08693ef5881","target":"record","created_at":"2026-05-17T23:54:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24b2620f4d4a4d5385af991f4993c1e006bc999563f2b736e151776c6a12f74a","cross_cats_sorted":["cs.CR","cs.CV","cs.NE","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-02-08T06:06:01Z","title_canon_sha256":"0651b1ce1e5322937e075043ec0b1b010d1601567df8153197c2bd0e4987ef62"},"schema_version":"1.0","source":{"id":"1902.02947","kind":"arxiv","version":1}},"canonical_sha256":"fb7042430eabca432d5568b3cb19a353fca2c524a9a1477ff1882371aa3c42c3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"fb7042430eabca432d5568b3cb19a353fca2c524a9a1477ff1882371aa3c42c3","first_computed_at":"2026-05-17T23:54:28.755302Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:54:28.755302Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"7ZfONVjSBX/TVJWfZ+VoynkuG6734DJ6LpYMXruawFzrVbWcm1gCab6GWnjQuHg0SMTDnSOatg2T02jRsSfNBg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:54:28.755798Z","signed_message":"canonical_sha256_bytes"},"source_id":"1902.02947","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:01ff0080db53a28d5974822e8d5e8be1c9d60af94cf8c167f5f9c08693ef5881","sha256:f05ed6498898c2a089449ba586b7ad1167ee3dc7f8077421bc2ea5447dcc39e6"],"state_sha256":"efe880d63c68b08c29d717d74e6cf1d90fdcc86bdae1dd9d59ec2c4336a9ef23"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"AVImptebh9dY/QMDsKEefb+Sp+i+f829W8qvpkZf2bnCYaF4Y02cqxYgKxeFCjazbyuRkwgjWJ2G47tXYzLuBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-29T20:36:05.124157Z","bundle_sha256":"c7266e331dcdcad5bbc82d2ef67db54603231ecca54d018d47ad387100d438c3"}}