{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:AP5WUKUVODWV72G75G36PI3RR2","short_pith_number":"pith:AP5WUKUV","canonical_record":{"source":{"id":"2502.19672","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-27T01:33:19Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"141e8c277bbc4ca2af2eef6414d9d5973a38911353346a6de65bcd3b9332858d","abstract_canon_sha256":"055ae53a7b4292af1909c8d32bd6f18dd902f4e8df6e7e4044375bde516d4882"},"schema_version":"1.0"},"canonical_sha256":"03fb6a2a9570ed5fe8dfe9b7e7a3718e96914aa1aff6afe1d021c506448d20f5","source":{"kind":"arxiv","id":"2502.19672","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19672","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19672v1","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19672","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_12","alias_value":"AP5WUKUVODWV","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_16","alias_value":"AP5WUKUVODWV72G7","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_8","alias_value":"AP5WUKUV","created_at":"2026-07-05T10:20:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:AP5WUKUVODWV72G75G36PI3RR2","target":"record","payload":{"canonical_record":{"source":{"id":"2502.19672","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-27T01:33:19Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"141e8c277bbc4ca2af2eef6414d9d5973a38911353346a6de65bcd3b9332858d","abstract_canon_sha256":"055ae53a7b4292af1909c8d32bd6f18dd902f4e8df6e7e4044375bde516d4882"},"schema_version":"1.0"},"canonical_sha256":"03fb6a2a9570ed5fe8dfe9b7e7a3718e96914aa1aff6afe1d021c506448d20f5","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:20:50.674671Z","signature_b64":"fI4VPY/O0rOKKL8EaLF87xa7iSUp+2UoQKrLn5UiM7KHFlV6UAeA109KB78aeAr6V2rE5r/Ww7Hq4pN6NiGBBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"03fb6a2a9570ed5fe8dfe9b7e7a3718e96914aa1aff6afe1d021c506448d20f5","last_reissued_at":"2026-07-05T10:20:50.674120Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:20:50.674120Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.19672","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BgJvGrNbMi8yT3xDXjP+DPYLyNvs6WSErnrX+PNItoQrehplETc2let5TuVVGgo5C830577/6XTDOyzzs423Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T14:53:16.690403Z"},"content_sha256":"d8c99e9990ff38dcb750769e58ca5c24eab8d0a27b779e8130d9009ce455f8aa","schema_version":"1.0","event_id":"sha256:d8c99e9990ff38dcb750769e58ca5c24eab8d0a27b779e8130d9009ce455f8aa"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:AP5WUKUVODWV72G75G36PI3RR2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Andong Hua, Chenhe Gu, Jindong Gu, Yao Qin","submitted_at":"2025-02-27T01:33:19Z","abstract_excerpt":"Multimodal Large Language Models (MLLMs), built upon LLMs, have recently gained attention for their capabilities in image recognition and understanding. However, while MLLMs are vulnerable to adversarial attacks, the transferability of these attacks across different models remains limited, especially under targeted attack setting. Existing methods primarily focus on vision-specific perturbations but struggle with the complex nature of vision-language modality alignment. In this work, we introduce the Dynamic Vision-Language Alignment (DynVLA) Attack, a novel approach that injects dynamic pertu"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19672","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.19672/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:20:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BEfAgHaGHX56TUlVGUOvs84Qeb8C/vyUkSl5wR1Rm9gLGMOivi0flzjjeoWE1mKPyRwLI3ov4g2zX0k81KwwDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-06T14:53:16.690786Z"},"content_sha256":"fb59f7b6b15fca4757970f1894e05f6397942ab34bb60069d7b95d13ce923e2f","schema_version":"1.0","event_id":"sha256:fb59f7b6b15fca4757970f1894e05f6397942ab34bb60069d7b95d13ce923e2f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AP5WUKUVODWV72G75G36PI3RR2/bundle.json","state_url":"https://pith.science/pith/AP5WUKUVODWV72G75G36PI3RR2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AP5WUKUVODWV72G75G36PI3RR2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-06T14:53:16Z","links":{"resolver":"https://pith.science/pith/AP5WUKUVODWV72G75G36PI3RR2","bundle":"https://pith.science/pith/AP5WUKUVODWV72G75G36PI3RR2/bundle.json","state":"https://pith.science/pith/AP5WUKUVODWV72G75G36PI3RR2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AP5WUKUVODWV72G75G36PI3RR2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:AP5WUKUVODWV72G75G36PI3RR2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"055ae53a7b4292af1909c8d32bd6f18dd902f4e8df6e7e4044375bde516d4882","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-27T01:33:19Z","title_canon_sha256":"141e8c277bbc4ca2af2eef6414d9d5973a38911353346a6de65bcd3b9332858d"},"schema_version":"1.0","source":{"id":"2502.19672","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.19672","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"arxiv_version","alias_value":"2502.19672v1","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.19672","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_12","alias_value":"AP5WUKUVODWV","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_16","alias_value":"AP5WUKUVODWV72G7","created_at":"2026-07-05T10:20:50Z"},{"alias_kind":"pith_short_8","alias_value":"AP5WUKUV","created_at":"2026-07-05T10:20:50Z"}],"graph_snapshots":[{"event_id":"sha256:fb59f7b6b15fca4757970f1894e05f6397942ab34bb60069d7b95d13ce923e2f","target":"graph","created_at":"2026-07-05T10:20:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.19672/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multimodal Large Language Models (MLLMs), built upon LLMs, have recently gained attention for their capabilities in image recognition and understanding. However, while MLLMs are vulnerable to adversarial attacks, the transferability of these attacks across different models remains limited, especially under targeted attack setting. Existing methods primarily focus on vision-specific perturbations but struggle with the complex nature of vision-language modality alignment. In this work, we introduce the Dynamic Vision-Language Alignment (DynVLA) Attack, a novel approach that injects dynamic pertu","authors_text":"Andong Hua, Chenhe Gu, Jindong Gu, Yao Qin","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-27T01:33:19Z","title":"Improving Adversarial Transferability in MLLMs via Dynamic Vision-Language Alignment Attack"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.19672","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d8c99e9990ff38dcb750769e58ca5c24eab8d0a27b779e8130d9009ce455f8aa","target":"record","created_at":"2026-07-05T10:20:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"055ae53a7b4292af1909c8d32bd6f18dd902f4e8df6e7e4044375bde516d4882","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-02-27T01:33:19Z","title_canon_sha256":"141e8c277bbc4ca2af2eef6414d9d5973a38911353346a6de65bcd3b9332858d"},"schema_version":"1.0","source":{"id":"2502.19672","kind":"arxiv","version":1}},"canonical_sha256":"03fb6a2a9570ed5fe8dfe9b7e7a3718e96914aa1aff6afe1d021c506448d20f5","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"03fb6a2a9570ed5fe8dfe9b7e7a3718e96914aa1aff6afe1d021c506448d20f5","first_computed_at":"2026-07-05T10:20:50.674120Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:20:50.674120Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fI4VPY/O0rOKKL8EaLF87xa7iSUp+2UoQKrLn5UiM7KHFlV6UAeA109KB78aeAr6V2rE5r/Ww7Hq4pN6NiGBBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:20:50.674671Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.19672","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d8c99e9990ff38dcb750769e58ca5c24eab8d0a27b779e8130d9009ce455f8aa","sha256:fb59f7b6b15fca4757970f1894e05f6397942ab34bb60069d7b95d13ce923e2f"],"state_sha256":"bcca841d87e3d4fb7dd40a16ad537a3cc6c2ad1f816f790b893bdafcdaeba5ef"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2Sxxkty3NLqxzkxrwgjbKFdWyXtkX2t62FtiguJ+ny9YcOwk92K/BBAUIVWyOo7tnOMJVwosDbdAd8DHIOyTCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-06T14:53:16.692729Z","bundle_sha256":"ad6fb893597238967f340d31c585b150f53c725fb193f367ceeb2467c9b31f33"}}