{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2026:ARDSGIDQBNGBYICXIYJFZNJ6RA","short_pith_number":"pith:ARDSGIDQ","canonical_record":{"source":{"id":"2607.02819","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-02T23:16:02Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"ba27592a3f5294c5ff371ad4c43d175320256dcbbbf5d7bbbd22b2ea3a8dc7a6","abstract_canon_sha256":"327ba3f0922a18327df8ff5a7f9cc6ce5071dd9c2679cf6d854789332ffe2cb7"},"schema_version":"1.0"},"canonical_sha256":"04472320700b4c1c205746125cb53e882fad506ac60b62ca846bbfff0309be55","source":{"kind":"arxiv","id":"2607.02819","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.02819","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"arxiv_version","alias_value":"2607.02819v1","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.02819","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_12","alias_value":"ARDSGIDQBNGB","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_16","alias_value":"ARDSGIDQBNGBYICX","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_8","alias_value":"ARDSGIDQ","created_at":"2026-07-07T00:16:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2026:ARDSGIDQBNGBYICXIYJFZNJ6RA","target":"record","payload":{"canonical_record":{"source":{"id":"2607.02819","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-02T23:16:02Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"ba27592a3f5294c5ff371ad4c43d175320256dcbbbf5d7bbbd22b2ea3a8dc7a6","abstract_canon_sha256":"327ba3f0922a18327df8ff5a7f9cc6ce5071dd9c2679cf6d854789332ffe2cb7"},"schema_version":"1.0"},"canonical_sha256":"04472320700b4c1c205746125cb53e882fad506ac60b62ca846bbfff0309be55","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-07T00:16:19.020241Z","signature_b64":"P31Hbmv1MvqUPcoj3b8EcTMqBsflxXWk8JEOyiwt1zMc8s9JqgyRMv7mRUCuXgyptkVVp0VYWBJ9dDXGAXWuDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"04472320700b4c1c205746125cb53e882fad506ac60b62ca846bbfff0309be55","last_reissued_at":"2026-07-07T00:16:19.019572Z","signature_status":"signed_v1","first_computed_at":"2026-07-07T00:16:19.019572Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2607.02819","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T00:16:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0hdiZylFsDGXprsRgFVYwPSriW3cYVQ635UFdrOfxw5Yn0lO9BRWTgjRhlkbdHE6ltob9xlKHlwyIzCFPnvwDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:07:38.263312Z"},"content_sha256":"e3f8a30e435dfee017dc9629752d17215f0c930cef624a0a79b8c3717396128e","schema_version":"1.0","event_id":"sha256:e3f8a30e435dfee017dc9629752d17215f0c930cef624a0a79b8c3717396128e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2026:ARDSGIDQBNGBYICXIYJFZNJ6RA","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Vision Token Manipulation Attacks on Cloud-Edge Inference of Large Vision-Language Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Jiahao Xu, Olivera Kotevska, Rui Hu, Zikai Zhang","submitted_at":"2026-07-02T23:16:02Z","abstract_excerpt":"Cloud-edge Large Vision-Language Model (LVLM) inference enables efficient deployment by splitting computation between edge devices and cloud servers. In this process, intermediate vision tokens are transmitted from the edge to the cloud over a communication link, thereby exposing a new attack surface. We study vision token manipulation attack (VTM-Attack) under a black-box man-in-the-middle setting, where an adversary intercepts and manipulates a subset of transmitted vision tokens under a budget constraint. We propose four na\\\"ive attack strategies and an optimization-based token selection me"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.02819","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2607.02819/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-07T00:16:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"iZ7XFf4ND4Nwvrr66k/h5m/OLKmP5HV5VQDIwz2QNSDDz6bDVsNRH1wAKweNX3gE26HtJd4UPUmrfzJ990lkBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T14:07:38.263912Z"},"content_sha256":"f916554d4c8039cc9e4b527089e155b58933de1e8de9a47b91a1f693c2ca7915","schema_version":"1.0","event_id":"sha256:f916554d4c8039cc9e4b527089e155b58933de1e8de9a47b91a1f693c2ca7915"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/bundle.json","state_url":"https://pith.science/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T14:07:38Z","links":{"resolver":"https://pith.science/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA","bundle":"https://pith.science/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/bundle.json","state":"https://pith.science/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/state.json","well_known_bundle":"https://pith.science/.well-known/pith/ARDSGIDQBNGBYICXIYJFZNJ6RA/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2026:ARDSGIDQBNGBYICXIYJFZNJ6RA","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"327ba3f0922a18327df8ff5a7f9cc6ce5071dd9c2679cf6d854789332ffe2cb7","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-02T23:16:02Z","title_canon_sha256":"ba27592a3f5294c5ff371ad4c43d175320256dcbbbf5d7bbbd22b2ea3a8dc7a6"},"schema_version":"1.0","source":{"id":"2607.02819","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2607.02819","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"arxiv_version","alias_value":"2607.02819v1","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2607.02819","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_12","alias_value":"ARDSGIDQBNGB","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_16","alias_value":"ARDSGIDQBNGBYICX","created_at":"2026-07-07T00:16:19Z"},{"alias_kind":"pith_short_8","alias_value":"ARDSGIDQ","created_at":"2026-07-07T00:16:19Z"}],"graph_snapshots":[{"event_id":"sha256:f916554d4c8039cc9e4b527089e155b58933de1e8de9a47b91a1f693c2ca7915","target":"graph","created_at":"2026-07-07T00:16:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2607.02819/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Cloud-edge Large Vision-Language Model (LVLM) inference enables efficient deployment by splitting computation between edge devices and cloud servers. In this process, intermediate vision tokens are transmitted from the edge to the cloud over a communication link, thereby exposing a new attack surface. We study vision token manipulation attack (VTM-Attack) under a black-box man-in-the-middle setting, where an adversary intercepts and manipulates a subset of transmitted vision tokens under a budget constraint. We propose four na\\\"ive attack strategies and an optimization-based token selection me","authors_text":"Jiahao Xu, Olivera Kotevska, Rui Hu, Zikai Zhang","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-02T23:16:02Z","title":"Vision Token Manipulation Attacks on Cloud-Edge Inference of Large Vision-Language Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2607.02819","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e3f8a30e435dfee017dc9629752d17215f0c930cef624a0a79b8c3717396128e","target":"record","created_at":"2026-07-07T00:16:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"327ba3f0922a18327df8ff5a7f9cc6ce5071dd9c2679cf6d854789332ffe2cb7","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CR","submitted_at":"2026-07-02T23:16:02Z","title_canon_sha256":"ba27592a3f5294c5ff371ad4c43d175320256dcbbbf5d7bbbd22b2ea3a8dc7a6"},"schema_version":"1.0","source":{"id":"2607.02819","kind":"arxiv","version":1}},"canonical_sha256":"04472320700b4c1c205746125cb53e882fad506ac60b62ca846bbfff0309be55","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"04472320700b4c1c205746125cb53e882fad506ac60b62ca846bbfff0309be55","first_computed_at":"2026-07-07T00:16:19.019572Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-07T00:16:19.019572Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P31Hbmv1MvqUPcoj3b8EcTMqBsflxXWk8JEOyiwt1zMc8s9JqgyRMv7mRUCuXgyptkVVp0VYWBJ9dDXGAXWuDA==","signature_status":"signed_v1","signed_at":"2026-07-07T00:16:19.020241Z","signed_message":"canonical_sha256_bytes"},"source_id":"2607.02819","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e3f8a30e435dfee017dc9629752d17215f0c930cef624a0a79b8c3717396128e","sha256:f916554d4c8039cc9e4b527089e155b58933de1e8de9a47b91a1f693c2ca7915"],"state_sha256":"243325498d7a30c8ad769d4ad350b1f3213044cccbc7eee6c7a3c4649d801c60"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6XQN9EA0qdUKCA93znwW5JiWhs2P1riXRkIB26fBrIilUhI+DpOmuGBTZMUHCGX0oCJV1/nPQ3MZb7gh/XJHDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T14:07:38.269544Z","bundle_sha256":"15ee7bbde4671a3b3d3abc6fc741cc25c4ccfdd74098a4ad93f750fe68a52268"}}