{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:B4MTMC3USOF232KV7C3Z2MP34Z","short_pith_number":"pith:B4MTMC3U","canonical_record":{"source":{"id":"2012.11442","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-21T15:47:14Z","cross_cats_sorted":["eess.IV"],"title_canon_sha256":"1adb1e0c68bec3fd65a1f9cb19fe01031b01fb9f3184193cbec113514961fd97","abstract_canon_sha256":"de086b494e80ceb6ae0eb1f1f88c665325cf5b46ac636b76741cb6f79c061819"},"schema_version":"1.0"},"canonical_sha256":"0f19360b74938bade955f8b79d31fbe65d8b12d9da1e791d0ca1dececbaaaba1","source":{"kind":"arxiv","id":"2012.11442","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.11442","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"arxiv_version","alias_value":"2012.11442v1","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.11442","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_12","alias_value":"B4MTMC3USOF2","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_16","alias_value":"B4MTMC3USOF232KV","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_8","alias_value":"B4MTMC3U","created_at":"2026-07-05T02:01:01Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:B4MTMC3USOF232KV7C3Z2MP34Z","target":"record","payload":{"canonical_record":{"source":{"id":"2012.11442","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-21T15:47:14Z","cross_cats_sorted":["eess.IV"],"title_canon_sha256":"1adb1e0c68bec3fd65a1f9cb19fe01031b01fb9f3184193cbec113514961fd97","abstract_canon_sha256":"de086b494e80ceb6ae0eb1f1f88c665325cf5b46ac636b76741cb6f79c061819"},"schema_version":"1.0"},"canonical_sha256":"0f19360b74938bade955f8b79d31fbe65d8b12d9da1e791d0ca1dececbaaaba1","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:01:01.866563Z","signature_b64":"CH3y2W8AMXwXhnCkJ1x8zUxGk1P/eRnb/XfFp0Cuo1BxNGSwlYdxWP58ngM36FU2Bc/53jRd1bOfgX3iEq4iCA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0f19360b74938bade955f8b79d31fbe65d8b12d9da1e791d0ca1dececbaaaba1","last_reissued_at":"2026-07-05T02:01:01.866049Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:01:01.866049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.11442","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:01:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/0jIoZnoJy5NP98nyimXbhfRNlJMX+AKC6Vo0IzuXu8WdKR3QPR+myRkNfGIXMtcMuQ0pNgGLXvktxTzQDOBCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T08:58:31.436566Z"},"content_sha256":"c4015eca54e27047d56cd7bc4c916f385dc6c9205c201b212da7871f3e6894a2","schema_version":"1.0","event_id":"sha256:c4015eca54e27047d56cd7bc4c916f385dc6c9205c201b212da7871f3e6894a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:B4MTMC3USOF232KV7C3Z2MP34Z","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Blurring Fools the Network -- Adversarial Attacks by Feature Peak Suppression and Gaussian Blurring","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["eess.IV"],"primary_cat":"cs.CV","authors_text":"Chenchen Zhao, Hao Li","submitted_at":"2020-12-21T15:47:14Z","abstract_excerpt":"Existing pixel-level adversarial attacks on neural networks may be deficient in real scenarios, since pixel-level changes on the data cannot be fully delivered to the neural network after camera capture and multiple image preprocessing steps. In contrast, in this paper, we argue from another perspective that gaussian blurring, a common technique of image preprocessing, can be aggressive itself in specific occasions, thus exposing the network to real-world adversarial attacks. We first propose an adversarial attack demo named peak suppression (PS) by suppressing the values of peak elements in t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.11442","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.11442/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:01:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Cfr3FuBRFIiUKNmV9obaxCfB9fGhcMH//yhpOjmfXw1+o0En02WHa+1q3ghM0Mgxo658e0rKXKspUzDLBaK3CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T08:58:31.438091Z"},"content_sha256":"2617b566045b5ba8e95feef528c89ec8b4b7ce0e9de8f6a23f72a7851b21f39e","schema_version":"1.0","event_id":"sha256:2617b566045b5ba8e95feef528c89ec8b4b7ce0e9de8f6a23f72a7851b21f39e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/B4MTMC3USOF232KV7C3Z2MP34Z/bundle.json","state_url":"https://pith.science/pith/B4MTMC3USOF232KV7C3Z2MP34Z/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/B4MTMC3USOF232KV7C3Z2MP34Z/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T08:58:31Z","links":{"resolver":"https://pith.science/pith/B4MTMC3USOF232KV7C3Z2MP34Z","bundle":"https://pith.science/pith/B4MTMC3USOF232KV7C3Z2MP34Z/bundle.json","state":"https://pith.science/pith/B4MTMC3USOF232KV7C3Z2MP34Z/state.json","well_known_bundle":"https://pith.science/.well-known/pith/B4MTMC3USOF232KV7C3Z2MP34Z/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:B4MTMC3USOF232KV7C3Z2MP34Z","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"de086b494e80ceb6ae0eb1f1f88c665325cf5b46ac636b76741cb6f79c061819","cross_cats_sorted":["eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-21T15:47:14Z","title_canon_sha256":"1adb1e0c68bec3fd65a1f9cb19fe01031b01fb9f3184193cbec113514961fd97"},"schema_version":"1.0","source":{"id":"2012.11442","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.11442","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"arxiv_version","alias_value":"2012.11442v1","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.11442","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_12","alias_value":"B4MTMC3USOF2","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_16","alias_value":"B4MTMC3USOF232KV","created_at":"2026-07-05T02:01:01Z"},{"alias_kind":"pith_short_8","alias_value":"B4MTMC3U","created_at":"2026-07-05T02:01:01Z"}],"graph_snapshots":[{"event_id":"sha256:2617b566045b5ba8e95feef528c89ec8b4b7ce0e9de8f6a23f72a7851b21f39e","target":"graph","created_at":"2026-07-05T02:01:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.11442/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Existing pixel-level adversarial attacks on neural networks may be deficient in real scenarios, since pixel-level changes on the data cannot be fully delivered to the neural network after camera capture and multiple image preprocessing steps. In contrast, in this paper, we argue from another perspective that gaussian blurring, a common technique of image preprocessing, can be aggressive itself in specific occasions, thus exposing the network to real-world adversarial attacks. We first propose an adversarial attack demo named peak suppression (PS) by suppressing the values of peak elements in t","authors_text":"Chenchen Zhao, Hao Li","cross_cats":["eess.IV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-21T15:47:14Z","title":"Blurring Fools the Network -- Adversarial Attacks by Feature Peak Suppression and Gaussian Blurring"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.11442","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:c4015eca54e27047d56cd7bc4c916f385dc6c9205c201b212da7871f3e6894a2","target":"record","created_at":"2026-07-05T02:01:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"de086b494e80ceb6ae0eb1f1f88c665325cf5b46ac636b76741cb6f79c061819","cross_cats_sorted":["eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-12-21T15:47:14Z","title_canon_sha256":"1adb1e0c68bec3fd65a1f9cb19fe01031b01fb9f3184193cbec113514961fd97"},"schema_version":"1.0","source":{"id":"2012.11442","kind":"arxiv","version":1}},"canonical_sha256":"0f19360b74938bade955f8b79d31fbe65d8b12d9da1e791d0ca1dececbaaaba1","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0f19360b74938bade955f8b79d31fbe65d8b12d9da1e791d0ca1dececbaaaba1","first_computed_at":"2026-07-05T02:01:01.866049Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:01:01.866049Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CH3y2W8AMXwXhnCkJ1x8zUxGk1P/eRnb/XfFp0Cuo1BxNGSwlYdxWP58ngM36FU2Bc/53jRd1bOfgX3iEq4iCA==","signature_status":"signed_v1","signed_at":"2026-07-05T02:01:01.866563Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.11442","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:c4015eca54e27047d56cd7bc4c916f385dc6c9205c201b212da7871f3e6894a2","sha256:2617b566045b5ba8e95feef528c89ec8b4b7ce0e9de8f6a23f72a7851b21f39e"],"state_sha256":"dca748c4f698bca5aa761dbe807f320d71ca43161f8a9a52550461205918572a"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EDbhkg9h5zHT2+W9rdGKynO5DPam9sE66eaiE9zi9A7+gBElayk9R4wQwIDrp9e2KMlBdrRqolzD6RSun/xTDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T08:58:31.442893Z","bundle_sha256":"6a766ab7d5a20b6f31aa83d715573c88568fb9f44d2fb119afb15aec6047ba1d"}}