{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:7PO7BLHMY4MFAH7O7FWKODF5KX","short_pith_number":"pith:7PO7BLHM","schema_version":"1.0","canonical_sha256":"fbddf0acecc718501feef96ca70cbd55ed4efd0ad80511472d54f3f60c6dd896","source":{"kind":"arxiv","id":"2311.12981","version":3},"attestation_state":"computed","paper":{"title":"SD-NAE: Generating Natural Adversarial Examples with Stable Diffusion","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hai Li, Jingyang Zhang, Yiran Chen, Yueqian Lin","submitted_at":"2023-11-21T20:33:17Z","abstract_excerpt":"Natural Adversarial Examples (NAEs), images arising naturally from the environment and capable of deceiving classifiers, are instrumental in robustly evaluating and identifying vulnerabilities in trained models. In this work, unlike prior works that passively collect NAEs from real images, we propose to actively synthesize NAEs using the state-of-the-art Stable Diffusion. Specifically, our method formulates a controlled optimization process, where we perturb the token embedding that corresponds to a specified class to generate NAEs. This generation process is guided by the gradient of loss fro"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2311.12981","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.CV","submitted_at":"2023-11-21T20:33:17Z","cross_cats_sorted":[],"title_canon_sha256":"8b42b4d0a59bf9afc14b883d84a54116c37cb51f9ca77a922bdffbf67b33e4a8","abstract_canon_sha256":"9df524b336443e56328d5c5d7fb92dd9a70b8ae00c10d91e962f97943b948dbb"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:18:46.290340Z","signature_b64":"Hb/ugfutx2nvCZJQN/zmqC2jKmRztZsoZ4W3Bt+wcVlvhy6H0zH1LPkAnMwR4uPyA1ATFENUhzELvjmMj+KICg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"fbddf0acecc718501feef96ca70cbd55ed4efd0ad80511472d54f3f60c6dd896","last_reissued_at":"2026-07-05T08:18:46.289760Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:18:46.289760Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"SD-NAE: Generating Natural Adversarial Examples with Stable Diffusion","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Hai Li, Jingyang Zhang, Yiran Chen, Yueqian Lin","submitted_at":"2023-11-21T20:33:17Z","abstract_excerpt":"Natural Adversarial Examples (NAEs), images arising naturally from the environment and capable of deceiving classifiers, are instrumental in robustly evaluating and identifying vulnerabilities in trained models. In this work, unlike prior works that passively collect NAEs from real images, we propose to actively synthesize NAEs using the state-of-the-art Stable Diffusion. Specifically, our method formulates a controlled optimization process, where we perturb the token embedding that corresponds to a specified class to generate NAEs. This generation process is guided by the gradient of loss fro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2311.12981","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2311.12981/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2311.12981","created_at":"2026-07-05T08:18:46.289829+00:00"},{"alias_kind":"arxiv_version","alias_value":"2311.12981v3","created_at":"2026-07-05T08:18:46.289829+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2311.12981","created_at":"2026-07-05T08:18:46.289829+00:00"},{"alias_kind":"pith_short_12","alias_value":"7PO7BLHMY4MF","created_at":"2026-07-05T08:18:46.289829+00:00"},{"alias_kind":"pith_short_16","alias_value":"7PO7BLHMY4MFAH7O","created_at":"2026-07-05T08:18:46.289829+00:00"},{"alias_kind":"pith_short_8","alias_value":"7PO7BLHM","created_at":"2026-07-05T08:18:46.289829+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2412.09910","citing_title":"Prompt2Perturb (P2P): Text-Guided Diffusion-Based Adversarial Attacks on Breast Ultrasound Images","ref_index":36,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX","json":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX.json","graph_json":"https://pith.science/api/pith-number/7PO7BLHMY4MFAH7O7FWKODF5KX/graph.json","events_json":"https://pith.science/api/pith-number/7PO7BLHMY4MFAH7O7FWKODF5KX/events.json","paper":"https://pith.science/paper/7PO7BLHM"},"agent_actions":{"view_html":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX","download_json":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX.json","view_paper":"https://pith.science/paper/7PO7BLHM","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2311.12981&json=true","fetch_graph":"https://pith.science/api/pith-number/7PO7BLHMY4MFAH7O7FWKODF5KX/graph.json","fetch_events":"https://pith.science/api/pith-number/7PO7BLHMY4MFAH7O7FWKODF5KX/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX/action/timestamp_anchor","attest_storage":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX/action/storage_attestation","attest_author":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX/action/author_attestation","sign_citation":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX/action/citation_signature","submit_replication":"https://pith.science/pith/7PO7BLHMY4MFAH7O7FWKODF5KX/action/replication_record"}},"created_at":"2026-07-05T08:18:46.289829+00:00","updated_at":"2026-07-05T08:18:46.289829+00:00"}