{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:AZYPKZ2DZMU6UYYFH4P6XKP3IS","short_pith_number":"pith:AZYPKZ2D","canonical_record":{"source":{"id":"2105.03162","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-07T11:00:35Z","cross_cats_sorted":[],"title_canon_sha256":"de489fee3f9097ae71f21ece2b0965de1234b98f5d5c6ef6a34b7db75e9bce3c","abstract_canon_sha256":"3597cdd04b3ced0ce0b3587123adb47222504430a3ddb17bedaf2e58f95a0d52"},"schema_version":"1.0"},"canonical_sha256":"0670f56743cb29ea63053f1feba9fb44aef57e8944b92ca408ab2823a201a36c","source":{"kind":"arxiv","id":"2105.03162","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.03162","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"arxiv_version","alias_value":"2105.03162v1","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.03162","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_12","alias_value":"AZYPKZ2DZMU6","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_16","alias_value":"AZYPKZ2DZMU6UYYF","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_8","alias_value":"AZYPKZ2D","created_at":"2026-07-05T02:38:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:AZYPKZ2DZMU6UYYFH4P6XKP3IS","target":"record","payload":{"canonical_record":{"source":{"id":"2105.03162","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-07T11:00:35Z","cross_cats_sorted":[],"title_canon_sha256":"de489fee3f9097ae71f21ece2b0965de1234b98f5d5c6ef6a34b7db75e9bce3c","abstract_canon_sha256":"3597cdd04b3ced0ce0b3587123adb47222504430a3ddb17bedaf2e58f95a0d52"},"schema_version":"1.0"},"canonical_sha256":"0670f56743cb29ea63053f1feba9fb44aef57e8944b92ca408ab2823a201a36c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:38:22.289066Z","signature_b64":"upFJEkD+p1wtSWoDBr7J1eSDylEnKIBnRfnD73tBjSJHlfl/2FZRwpDITNqmLzPa0lTrmew3aqEXPqK+df4VCw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0670f56743cb29ea63053f1feba9fb44aef57e8944b92ca408ab2823a201a36c","last_reissued_at":"2026-07-05T02:38:22.288575Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:38:22.288575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2105.03162","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:38:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"n2na7Lnb9mr06iV1sbBX/S+F7fjuBODli3Zn4JDoUWd89CsMfl2SA4M59itue6RM9iW7Tjd1cmTKim/tEI0AAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T21:31:19.984204Z"},"content_sha256":"b52d3fe27f3ba282a42938dbd9efd70c06634526c0423085e12a56f8264474ec","schema_version":"1.0","event_id":"sha256:b52d3fe27f3ba282a42938dbd9efd70c06634526c0423085e12a56f8264474ec"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:AZYPKZ2DZMU6UYYFH4P6XKP3IS","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bangjie Yin, Cong Liu, Jilin Li, Junfeng Guo, Shouhong Ding, Taiping Yao, Wenxuan Wang, Zelun Kong","submitted_at":"2021-05-07T11:00:35Z","abstract_excerpt":"Deep neural networks, particularly face recognition models, have been shown to be vulnerable to both digital and physical adversarial examples. However, existing adversarial examples against face recognition systems either lack transferability to black-box models, or fail to be implemented in practice. In this paper, we propose a unified adversarial face generation method - Adv-Makeup, which can realize imperceptible and transferable attack under black-box setting. Adv-Makeup develops a task-driven makeup generation method with the blending module to synthesize imperceptible eye shadow over th"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.03162","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2105.03162/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:38:22Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"80dp9TycoXtsHJkbZ42EQG7AjcwS58kkrt+QzXO8ZOV8GVitNPnLBmAEVvV4MJMRPpNc0lSU1Oct24F8sxzyAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T21:31:19.984585Z"},"content_sha256":"7b76a4a6cc313bbac0993e57fa22e380089b55ef252690d346f77aa55dbd8c11","schema_version":"1.0","event_id":"sha256:7b76a4a6cc313bbac0993e57fa22e380089b55ef252690d346f77aa55dbd8c11"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/bundle.json","state_url":"https://pith.science/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T21:31:19Z","links":{"resolver":"https://pith.science/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS","bundle":"https://pith.science/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/bundle.json","state":"https://pith.science/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/state.json","well_known_bundle":"https://pith.science/.well-known/pith/AZYPKZ2DZMU6UYYFH4P6XKP3IS/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:AZYPKZ2DZMU6UYYFH4P6XKP3IS","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"3597cdd04b3ced0ce0b3587123adb47222504430a3ddb17bedaf2e58f95a0d52","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-07T11:00:35Z","title_canon_sha256":"de489fee3f9097ae71f21ece2b0965de1234b98f5d5c6ef6a34b7db75e9bce3c"},"schema_version":"1.0","source":{"id":"2105.03162","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2105.03162","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"arxiv_version","alias_value":"2105.03162v1","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2105.03162","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_12","alias_value":"AZYPKZ2DZMU6","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_16","alias_value":"AZYPKZ2DZMU6UYYF","created_at":"2026-07-05T02:38:22Z"},{"alias_kind":"pith_short_8","alias_value":"AZYPKZ2D","created_at":"2026-07-05T02:38:22Z"}],"graph_snapshots":[{"event_id":"sha256:7b76a4a6cc313bbac0993e57fa22e380089b55ef252690d346f77aa55dbd8c11","target":"graph","created_at":"2026-07-05T02:38:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2105.03162/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks, particularly face recognition models, have been shown to be vulnerable to both digital and physical adversarial examples. However, existing adversarial examples against face recognition systems either lack transferability to black-box models, or fail to be implemented in practice. In this paper, we propose a unified adversarial face generation method - Adv-Makeup, which can realize imperceptible and transferable attack under black-box setting. Adv-Makeup develops a task-driven makeup generation method with the blending module to synthesize imperceptible eye shadow over th","authors_text":"Bangjie Yin, Cong Liu, Jilin Li, Junfeng Guo, Shouhong Ding, Taiping Yao, Wenxuan Wang, Zelun Kong","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-07T11:00:35Z","title":"Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2105.03162","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b52d3fe27f3ba282a42938dbd9efd70c06634526c0423085e12a56f8264474ec","target":"record","created_at":"2026-07-05T02:38:22Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"3597cdd04b3ced0ce0b3587123adb47222504430a3ddb17bedaf2e58f95a0d52","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.CV","submitted_at":"2021-05-07T11:00:35Z","title_canon_sha256":"de489fee3f9097ae71f21ece2b0965de1234b98f5d5c6ef6a34b7db75e9bce3c"},"schema_version":"1.0","source":{"id":"2105.03162","kind":"arxiv","version":1}},"canonical_sha256":"0670f56743cb29ea63053f1feba9fb44aef57e8944b92ca408ab2823a201a36c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0670f56743cb29ea63053f1feba9fb44aef57e8944b92ca408ab2823a201a36c","first_computed_at":"2026-07-05T02:38:22.288575Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:38:22.288575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"upFJEkD+p1wtSWoDBr7J1eSDylEnKIBnRfnD73tBjSJHlfl/2FZRwpDITNqmLzPa0lTrmew3aqEXPqK+df4VCw==","signature_status":"signed_v1","signed_at":"2026-07-05T02:38:22.289066Z","signed_message":"canonical_sha256_bytes"},"source_id":"2105.03162","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b52d3fe27f3ba282a42938dbd9efd70c06634526c0423085e12a56f8264474ec","sha256:7b76a4a6cc313bbac0993e57fa22e380089b55ef252690d346f77aa55dbd8c11"],"state_sha256":"49ac39ac30e943642744f8404722725d285b30ba40d6d33d266653b2665ea35c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2xMKs9m7nGSyl2mG45dh5lOheABS7mziEUr2QHOflGjDDq5qOq99WQkydd/jwrxqqTfeG2ykhud+aIm+09T4Aw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T21:31:19.987722Z","bundle_sha256":"846de3a38ce949d5897b12d55686440cd6028ca5c23856e9397e139eafb44674"}}