{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:A2JP7E23U7PLMKEQH5GMDENHC3","short_pith_number":"pith:A2JP7E23","canonical_record":{"source":{"id":"2303.01245","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-20T09:48:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a3582e450b16854f2cf37463c690667722c29a23ad614e9e8d226bac37fe9f16","abstract_canon_sha256":"68d31ca38c02d899049ed9d978c110df9493bcde83ffa3c006ab7e7878eb801f"},"schema_version":"1.0"},"canonical_sha256":"0692ff935ba7deb628903f4cc191a716f1a5ee6825e754b43991be51105780a3","source":{"kind":"arxiv","id":"2303.01245","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.01245","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2303.01245v1","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.01245","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"A2JP7E23U7PL","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"A2JP7E23U7PLMKEQ","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"A2JP7E23","created_at":"2026-07-05T05:47:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:A2JP7E23U7PLMKEQH5GMDENHC3","target":"record","payload":{"canonical_record":{"source":{"id":"2303.01245","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-20T09:48:11Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a3582e450b16854f2cf37463c690667722c29a23ad614e9e8d226bac37fe9f16","abstract_canon_sha256":"68d31ca38c02d899049ed9d978c110df9493bcde83ffa3c006ab7e7878eb801f"},"schema_version":"1.0"},"canonical_sha256":"0692ff935ba7deb628903f4cc191a716f1a5ee6825e754b43991be51105780a3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:47:28.714154Z","signature_b64":"d0VGprDOf4zP5X8zektEA4/rSNni4Y/RZmNvehJpnOizOQAEaFGKfILcRALH6joBrSRdwGVc3e4iyEosYPD7DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0692ff935ba7deb628903f4cc191a716f1a5ee6825e754b43991be51105780a3","last_reissued_at":"2026-07-05T05:47:28.713750Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:47:28.713750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.01245","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cCFQSvKhztf3/BGBmCHkk+jSnnPT+SENek/z6mPMymuKoYPOj0KLGJj6l0xW5GMXCf2EfSWFs9y23Vz87WEPDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T21:31:43.063019Z"},"content_sha256":"af4c5299b40b29b8952a2754fd25c2a1c6ff0c2e4f6c4367e5597d94d5cbb466","schema_version":"1.0","event_id":"sha256:af4c5299b40b29b8952a2754fd25c2a1c6ff0c2e4f6c4367e5597d94d5cbb466"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:A2JP7E23U7PLMKEQH5GMDENHC3","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"An Incremental Gray-box Physical Adversarial Attack on Neural Network Training","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Bassem Ouni, Moayad Aloqaily, Mohsen Guizani, Rabiah Al-qudah, Thierry Lestable","submitted_at":"2023-02-20T09:48:11Z","abstract_excerpt":"Neural networks have demonstrated remarkable success in learning and solving complex tasks in a variety of fields. Nevertheless, the rise of those networks in modern computing has been accompanied by concerns regarding their vulnerability to adversarial attacks. In this work, we propose a novel gradient-free, gray box, incremental attack that targets the training process of neural networks. The proposed attack, which implicitly poisons the intermediate data structures that retain the training instances between training epochs acquires its high-risk property from attacking data structures that "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.01245","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.01245/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:47:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DuM4Dj8/71OG1BWdqxgcFiPfGxmdbVTt+No5rxEcBE1XxwpaZ6rSCaPeIC83gy0zcX78yDrI63S7F/hfQPNvDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-26T21:31:43.063411Z"},"content_sha256":"27c976582ad52d6114d3a3b80d2983b6366985ef507a5e53a0d96b7f5bdc076e","schema_version":"1.0","event_id":"sha256:27c976582ad52d6114d3a3b80d2983b6366985ef507a5e53a0d96b7f5bdc076e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/A2JP7E23U7PLMKEQH5GMDENHC3/bundle.json","state_url":"https://pith.science/pith/A2JP7E23U7PLMKEQH5GMDENHC3/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/A2JP7E23U7PLMKEQH5GMDENHC3/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-26T21:31:43Z","links":{"resolver":"https://pith.science/pith/A2JP7E23U7PLMKEQH5GMDENHC3","bundle":"https://pith.science/pith/A2JP7E23U7PLMKEQH5GMDENHC3/bundle.json","state":"https://pith.science/pith/A2JP7E23U7PLMKEQH5GMDENHC3/state.json","well_known_bundle":"https://pith.science/.well-known/pith/A2JP7E23U7PLMKEQH5GMDENHC3/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:A2JP7E23U7PLMKEQH5GMDENHC3","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"68d31ca38c02d899049ed9d978c110df9493bcde83ffa3c006ab7e7878eb801f","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-20T09:48:11Z","title_canon_sha256":"a3582e450b16854f2cf37463c690667722c29a23ad614e9e8d226bac37fe9f16"},"schema_version":"1.0","source":{"id":"2303.01245","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.01245","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"arxiv_version","alias_value":"2303.01245v1","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.01245","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_12","alias_value":"A2JP7E23U7PL","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_16","alias_value":"A2JP7E23U7PLMKEQ","created_at":"2026-07-05T05:47:28Z"},{"alias_kind":"pith_short_8","alias_value":"A2JP7E23","created_at":"2026-07-05T05:47:28Z"}],"graph_snapshots":[{"event_id":"sha256:27c976582ad52d6114d3a3b80d2983b6366985ef507a5e53a0d96b7f5bdc076e","target":"graph","created_at":"2026-07-05T05:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.01245/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Neural networks have demonstrated remarkable success in learning and solving complex tasks in a variety of fields. Nevertheless, the rise of those networks in modern computing has been accompanied by concerns regarding their vulnerability to adversarial attacks. In this work, we propose a novel gradient-free, gray box, incremental attack that targets the training process of neural networks. The proposed attack, which implicitly poisons the intermediate data structures that retain the training instances between training epochs acquires its high-risk property from attacking data structures that ","authors_text":"Bassem Ouni, Moayad Aloqaily, Mohsen Guizani, Rabiah Al-qudah, Thierry Lestable","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-20T09:48:11Z","title":"An Incremental Gray-box Physical Adversarial Attack on Neural Network Training"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.01245","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:af4c5299b40b29b8952a2754fd25c2a1c6ff0c2e4f6c4367e5597d94d5cbb466","target":"record","created_at":"2026-07-05T05:47:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"68d31ca38c02d899049ed9d978c110df9493bcde83ffa3c006ab7e7878eb801f","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2023-02-20T09:48:11Z","title_canon_sha256":"a3582e450b16854f2cf37463c690667722c29a23ad614e9e8d226bac37fe9f16"},"schema_version":"1.0","source":{"id":"2303.01245","kind":"arxiv","version":1}},"canonical_sha256":"0692ff935ba7deb628903f4cc191a716f1a5ee6825e754b43991be51105780a3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0692ff935ba7deb628903f4cc191a716f1a5ee6825e754b43991be51105780a3","first_computed_at":"2026-07-05T05:47:28.713750Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:47:28.713750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"d0VGprDOf4zP5X8zektEA4/rSNni4Y/RZmNvehJpnOizOQAEaFGKfILcRALH6joBrSRdwGVc3e4iyEosYPD7DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:47:28.714154Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.01245","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:af4c5299b40b29b8952a2754fd25c2a1c6ff0c2e4f6c4367e5597d94d5cbb466","sha256:27c976582ad52d6114d3a3b80d2983b6366985ef507a5e53a0d96b7f5bdc076e"],"state_sha256":"a98f94b2ed3582b04355cf85c85c80d709eb95487831aa24ac23dd374e928a43"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pNht7Hpam6EiY7HsR72sut6mGQB1TxQ/g1g2cKlFDu/+zi98haJTDj3fPQKVHldNZlTr3IBONWwLjCTd3iVNAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-26T21:31:43.065640Z","bundle_sha256":"b7136ad8e26f32ae013cf0155c0274c0ce1ff18789824352c0c52f9f3746c5d7"}}