{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:AKKVP5246UQRXMWKZ2N4G4VZ6E","short_pith_number":"pith:AKKVP524","canonical_record":{"source":{"id":"1905.11544","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-27T23:53:00Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"9d70841bdb68f7b3cf250dbc85536d0d7cacefd658c513d64726b8e66b7f0dee","abstract_canon_sha256":"4151de376cb3dd36761dae043d2f150ea9cca937be7da687b69e2f63ca077231"},"schema_version":"1.0"},"canonical_sha256":"029557f75cf5211bb2cace9bc372b9f1259824785735e667950a9416315896ab","source":{"kind":"arxiv","id":"1905.11544","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.11544","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"arxiv_version","alias_value":"1905.11544v2","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.11544","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"pith_short_12","alias_value":"AKKVP5246UQR","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"AKKVP5246UQRXMWK","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"AKKVP524","created_at":"2026-05-18T12:33:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:AKKVP5246UQRXMWKZ2N4G4VZ6E","target":"record","payload":{"canonical_record":{"source":{"id":"1905.11544","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-27T23:53:00Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"9d70841bdb68f7b3cf250dbc85536d0d7cacefd658c513d64726b8e66b7f0dee","abstract_canon_sha256":"4151de376cb3dd36761dae043d2f150ea9cca937be7da687b69e2f63ca077231"},"schema_version":"1.0"},"canonical_sha256":"029557f75cf5211bb2cace9bc372b9f1259824785735e667950a9416315896ab","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:44:28.355380Z","signature_b64":"tfYtHRpFh+Zmu1CspOhRl8K8JPq9XVBDOP+OT2aIxgcs4uASb777M7MeFJZfT9zRU+x5/iTkAqFUu1n/vLneBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"029557f75cf5211bb2cace9bc372b9f1259824785735e667950a9416315896ab","last_reissued_at":"2026-05-17T23:44:28.354780Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:44:28.354780Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1905.11544","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:44:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TBy27aaefKW+8zW+C16UbSIvQI8QizRtK0UtDHQwE/koOR47n0qpWhpWGEdbSQfHu+2Mtk/bQcIJrQo+bDW7BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T00:49:25.298025Z"},"content_sha256":"b674013199df2a37edc49df4d7fbc52f351f557485e1aef04ea9b050145ca7f0","schema_version":"1.0","event_id":"sha256:b674013199df2a37edc49df4d7fbc52f351f557485e1aef04ea9b050145ca7f0"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:AKKVP5246UQRXMWKZ2N4G4VZ6E","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Label Universal Targeted Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Ajmal Mian, Mohammad A. A. K. Jalwana, Mohammed Bennamoun, Naveed Akhtar","submitted_at":"2019-05-27T23:53:00Z","abstract_excerpt":"We introduce Label Universal Targeted Attack (LUTA) that makes a deep model predict a label of attacker's choice for `any' sample of a given source class with high probability. Our attack stochastically maximizes the log-probability of the target label for the source class with first order gradient optimization, while accounting for the gradient moments. It also suppresses the leakage of attack information to the non-source classes for avoiding the attack suspicions. The perturbations resulting from our attack achieve high fooling ratios on the large-scale ImageNet and VGGFace models, and tran"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.11544","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:44:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pns6k1xIs1uKlQ8k2lWOY+hweCGPyNkaXEt+i2hYs7bi1uABltVDE4ihRZqmoElnsCVXrztqoGunn/mLCGa+AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-06-02T00:49:25.298382Z"},"content_sha256":"998dc476d5e75913056ca09ea4c8b875f254c91cbe7b14e8d7035af3bdda73d7","schema_version":"1.0","event_id":"sha256:998dc476d5e75913056ca09ea4c8b875f254c91cbe7b14e8d7035af3bdda73d7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/bundle.json","state_url":"https://pith.science/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-06-02T00:49:25Z","links":{"resolver":"https://pith.science/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E","bundle":"https://pith.science/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/bundle.json","state":"https://pith.science/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AKKVP5246UQRXMWKZ2N4G4VZ6E/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:AKKVP5246UQRXMWKZ2N4G4VZ6E","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"4151de376cb3dd36761dae043d2f150ea9cca937be7da687b69e2f63ca077231","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-27T23:53:00Z","title_canon_sha256":"9d70841bdb68f7b3cf250dbc85536d0d7cacefd658c513d64726b8e66b7f0dee"},"schema_version":"1.0","source":{"id":"1905.11544","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1905.11544","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"arxiv_version","alias_value":"1905.11544v2","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1905.11544","created_at":"2026-05-17T23:44:28Z"},{"alias_kind":"pith_short_12","alias_value":"AKKVP5246UQR","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_16","alias_value":"AKKVP5246UQRXMWK","created_at":"2026-05-18T12:33:12Z"},{"alias_kind":"pith_short_8","alias_value":"AKKVP524","created_at":"2026-05-18T12:33:12Z"}],"graph_snapshots":[{"event_id":"sha256:998dc476d5e75913056ca09ea4c8b875f254c91cbe7b14e8d7035af3bdda73d7","target":"graph","created_at":"2026-05-17T23:44:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"We introduce Label Universal Targeted Attack (LUTA) that makes a deep model predict a label of attacker's choice for `any' sample of a given source class with high probability. Our attack stochastically maximizes the log-probability of the target label for the source class with first order gradient optimization, while accounting for the gradient moments. It also suppresses the leakage of attack information to the non-source classes for avoiding the attack suspicions. The perturbations resulting from our attack achieve high fooling ratios on the large-scale ImageNet and VGGFace models, and tran","authors_text":"Ajmal Mian, Mohammad A. A. K. Jalwana, Mohammed Bennamoun, Naveed Akhtar","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-27T23:53:00Z","title":"Label Universal Targeted Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1905.11544","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b674013199df2a37edc49df4d7fbc52f351f557485e1aef04ea9b050145ca7f0","target":"record","created_at":"2026-05-17T23:44:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"4151de376cb3dd36761dae043d2f150ea9cca937be7da687b69e2f63ca077231","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-05-27T23:53:00Z","title_canon_sha256":"9d70841bdb68f7b3cf250dbc85536d0d7cacefd658c513d64726b8e66b7f0dee"},"schema_version":"1.0","source":{"id":"1905.11544","kind":"arxiv","version":2}},"canonical_sha256":"029557f75cf5211bb2cace9bc372b9f1259824785735e667950a9416315896ab","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"029557f75cf5211bb2cace9bc372b9f1259824785735e667950a9416315896ab","first_computed_at":"2026-05-17T23:44:28.354780Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:44:28.354780Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"tfYtHRpFh+Zmu1CspOhRl8K8JPq9XVBDOP+OT2aIxgcs4uASb777M7MeFJZfT9zRU+x5/iTkAqFUu1n/vLneBg==","signature_status":"signed_v1","signed_at":"2026-05-17T23:44:28.355380Z","signed_message":"canonical_sha256_bytes"},"source_id":"1905.11544","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b674013199df2a37edc49df4d7fbc52f351f557485e1aef04ea9b050145ca7f0","sha256:998dc476d5e75913056ca09ea4c8b875f254c91cbe7b14e8d7035af3bdda73d7"],"state_sha256":"e685e06b5d3bafe9bcb1c712a64cfc3579ca7b487c825e2b721c1d8116d40ff8"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uRKadukIpzTpM3gkyLjapjSR5gJlwkx0KgFm0CFkmETqotXMxmn5/SqBklErbqI4BhUuddTpfF7mUcDIM3SwAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-06-02T00:49:25.300282Z","bundle_sha256":"eb7c349b689a9ef8caa2c2824ecbafad686f7ad4e292042efbd2d2aecbc6bfaf"}}