{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:AI3VL24E5PUQOCNSQHIHFP3436","short_pith_number":"pith:AI3VL24E","canonical_record":{"source":{"id":"2211.03509","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-11-07T12:56:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"059c186995e565355962b297441d284187ff443176bbc6f51d451d259bcb5809","abstract_canon_sha256":"83845dfab35ff014e33a6aea2ef41a5ff04975b5a06a5f79d82cc056e1e28469"},"schema_version":"1.0"},"canonical_sha256":"023755eb84ebe90709b281d072bf7cdfa6dec16695a85a449c5196c2dd744b0b","source":{"kind":"arxiv","id":"2211.03509","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.03509","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"arxiv_version","alias_value":"2211.03509v1","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.03509","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_12","alias_value":"AI3VL24E5PUQ","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_16","alias_value":"AI3VL24E5PUQOCNS","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_8","alias_value":"AI3VL24E","created_at":"2026-07-05T05:13:49Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:AI3VL24E5PUQOCNSQHIHFP3436","target":"record","payload":{"canonical_record":{"source":{"id":"2211.03509","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-11-07T12:56:14Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"059c186995e565355962b297441d284187ff443176bbc6f51d451d259bcb5809","abstract_canon_sha256":"83845dfab35ff014e33a6aea2ef41a5ff04975b5a06a5f79d82cc056e1e28469"},"schema_version":"1.0"},"canonical_sha256":"023755eb84ebe90709b281d072bf7cdfa6dec16695a85a449c5196c2dd744b0b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:13:49.553522Z","signature_b64":"hhu8ROTTGRMbqCqVnFgy4KF3Q5AFnYM0fi213TYCg6n36HG2TW7imHlVANUbDsOILvocRXJ0OnU8j007cGIFDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"023755eb84ebe90709b281d072bf7cdfa6dec16695a85a449c5196c2dd744b0b","last_reissued_at":"2026-07-05T05:13:49.553131Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:13:49.553131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2211.03509","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NyUEwdRdbLUtYDYenttF/wOVLnY+mHYtGMfDJSWwSvyMeFxGfVyVijFGNdGIBx9eqb3bLkrLCGH5R4pAI7uJDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T02:12:45.804336Z"},"content_sha256":"5939356d7c3ff8f1d2e9809b155adc7d3de44a94036565a42f7b26eb5586f1cd","schema_version":"1.0","event_id":"sha256:5939356d7c3ff8f1d2e9809b155adc7d3de44a94036565a42f7b26eb5586f1cd"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:AI3VL24E5PUQOCNSQHIHFP3436","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-Box Attack against GAN-Generated Image Detector with Contrastive Perturbation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Gang Cao, Man Lin, Zijie Lou","submitted_at":"2022-11-07T12:56:14Z","abstract_excerpt":"Visually realistic GAN-generated facial images raise obvious concerns on potential misuse. Many effective forensic algorithms have been developed to detect such synthetic images in recent years. It is significant to assess the vulnerability of such forensic detectors against adversarial attacks. In this paper, we propose a new black-box attack method against GAN-generated image detectors. A novel contrastive learning strategy is adopted to train the encoder-decoder network based anti-forensic model under a contrastive loss function. GAN images and their simulated real counterparts are construc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.03509","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2211.03509/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:13:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Jo5zvmpbXIS737QdLuRwAuE5shljbQ3GgX8hzDjb6S7iKo7YX0gvM+UVGcEluy2TqmODVg7y22KuodM1e2oHDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-11T02:12:45.804971Z"},"content_sha256":"9a1db1905482639f9e61ce873d1eb23613d66c9edd2e78f219b364beb1bc41fc","schema_version":"1.0","event_id":"sha256:9a1db1905482639f9e61ce873d1eb23613d66c9edd2e78f219b364beb1bc41fc"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AI3VL24E5PUQOCNSQHIHFP3436/bundle.json","state_url":"https://pith.science/pith/AI3VL24E5PUQOCNSQHIHFP3436/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AI3VL24E5PUQOCNSQHIHFP3436/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-11T02:12:45Z","links":{"resolver":"https://pith.science/pith/AI3VL24E5PUQOCNSQHIHFP3436","bundle":"https://pith.science/pith/AI3VL24E5PUQOCNSQHIHFP3436/bundle.json","state":"https://pith.science/pith/AI3VL24E5PUQOCNSQHIHFP3436/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AI3VL24E5PUQOCNSQHIHFP3436/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:AI3VL24E5PUQOCNSQHIHFP3436","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"83845dfab35ff014e33a6aea2ef41a5ff04975b5a06a5f79d82cc056e1e28469","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-11-07T12:56:14Z","title_canon_sha256":"059c186995e565355962b297441d284187ff443176bbc6f51d451d259bcb5809"},"schema_version":"1.0","source":{"id":"2211.03509","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2211.03509","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"arxiv_version","alias_value":"2211.03509v1","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2211.03509","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_12","alias_value":"AI3VL24E5PUQ","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_16","alias_value":"AI3VL24E5PUQOCNS","created_at":"2026-07-05T05:13:49Z"},{"alias_kind":"pith_short_8","alias_value":"AI3VL24E","created_at":"2026-07-05T05:13:49Z"}],"graph_snapshots":[{"event_id":"sha256:9a1db1905482639f9e61ce873d1eb23613d66c9edd2e78f219b364beb1bc41fc","target":"graph","created_at":"2026-07-05T05:13:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2211.03509/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Visually realistic GAN-generated facial images raise obvious concerns on potential misuse. Many effective forensic algorithms have been developed to detect such synthetic images in recent years. It is significant to assess the vulnerability of such forensic detectors against adversarial attacks. In this paper, we propose a new black-box attack method against GAN-generated image detectors. A novel contrastive learning strategy is adopted to train the encoder-decoder network based anti-forensic model under a contrastive loss function. GAN images and their simulated real counterparts are construc","authors_text":"Gang Cao, Man Lin, Zijie Lou","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-11-07T12:56:14Z","title":"Black-Box Attack against GAN-Generated Image Detector with Contrastive Perturbation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2211.03509","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5939356d7c3ff8f1d2e9809b155adc7d3de44a94036565a42f7b26eb5586f1cd","target":"record","created_at":"2026-07-05T05:13:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"83845dfab35ff014e33a6aea2ef41a5ff04975b5a06a5f79d82cc056e1e28469","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-11-07T12:56:14Z","title_canon_sha256":"059c186995e565355962b297441d284187ff443176bbc6f51d451d259bcb5809"},"schema_version":"1.0","source":{"id":"2211.03509","kind":"arxiv","version":1}},"canonical_sha256":"023755eb84ebe90709b281d072bf7cdfa6dec16695a85a449c5196c2dd744b0b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"023755eb84ebe90709b281d072bf7cdfa6dec16695a85a449c5196c2dd744b0b","first_computed_at":"2026-07-05T05:13:49.553131Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:13:49.553131Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"hhu8ROTTGRMbqCqVnFgy4KF3Q5AFnYM0fi213TYCg6n36HG2TW7imHlVANUbDsOILvocRXJ0OnU8j007cGIFDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T05:13:49.553522Z","signed_message":"canonical_sha256_bytes"},"source_id":"2211.03509","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5939356d7c3ff8f1d2e9809b155adc7d3de44a94036565a42f7b26eb5586f1cd","sha256:9a1db1905482639f9e61ce873d1eb23613d66c9edd2e78f219b364beb1bc41fc"],"state_sha256":"f4bd56a636b23cd89bf630aa8bf8b76b39589764c830ad3a277b9f4302dfd25c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dauuTMTxjJOPDA0TtAQ+18xpEt0/L9kfNllf6hWd3JM/bqR/EH8P6j5g3j+wXgZfk40n1R4my8cl+89rzU2RDA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-11T02:12:45.810972Z","bundle_sha256":"98db9d89e03212ac9194fc3d8dcf825016c4d18f05f79ecc8c75a8a58314257e"}}