{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BDSBTBP2A4Y4QDBLKUMW2BU4SK","short_pith_number":"pith:BDSBTBP2","canonical_record":{"source":{"id":"2307.00274","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-07-01T09:07:12Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2e6eb9b78fd422c6f78ba43e86db45f2f1a67b51df02ec095f4548b83ad1cc23","abstract_canon_sha256":"2f8ae1cdfc315bfb073d488873f3ecdebf13e3384790edbd9a13dea6ac869feb"},"schema_version":"1.0"},"canonical_sha256":"08e41985fa0731c80c2b55196d069c928368f9e51a391464e9bfcbca9a3a3d5b","source":{"kind":"arxiv","id":"2307.00274","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.00274","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"arxiv_version","alias_value":"2307.00274v1","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.00274","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_12","alias_value":"BDSBTBP2A4Y4","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_16","alias_value":"BDSBTBP2A4Y4QDBL","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_8","alias_value":"BDSBTBP2","created_at":"2026-07-05T06:26:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BDSBTBP2A4Y4QDBLKUMW2BU4SK","target":"record","payload":{"canonical_record":{"source":{"id":"2307.00274","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-07-01T09:07:12Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"2e6eb9b78fd422c6f78ba43e86db45f2f1a67b51df02ec095f4548b83ad1cc23","abstract_canon_sha256":"2f8ae1cdfc315bfb073d488873f3ecdebf13e3384790edbd9a13dea6ac869feb"},"schema_version":"1.0"},"canonical_sha256":"08e41985fa0731c80c2b55196d069c928368f9e51a391464e9bfcbca9a3a3d5b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:26:54.191523Z","signature_b64":"rqURmca7WIpADs4HXVkvO5fE4qVqRidzie4oGyarxBWqQFUVv3OMQwGWbI404bBuD+zd9kMaJ286QGGweSPHBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"08e41985fa0731c80c2b55196d069c928368f9e51a391464e9bfcbca9a3a3d5b","last_reissued_at":"2026-07-05T06:26:54.191061Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:26:54.191061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2307.00274","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:26:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PKPDviK2NGSNF+ynWspu9v9ibev3uXancEfqImDkfqUpf8wbZ73GZEvURwFV45VcKqHnaQoXMSkx4c/H+sVeCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T17:18:11.202832Z"},"content_sha256":"6723a5cde2098b9260deba848ed6369e5409db01d42fa33355628c9b084d4227","schema_version":"1.0","event_id":"sha256:6723a5cde2098b9260deba848ed6369e5409db01d42fa33355628c9b084d4227"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BDSBTBP2A4Y4QDBLKUMW2BU4SK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Common Knowledge Learning for Generating Transferable Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Jiantao Zhou, Junfu Wang, Ruijie Yang, Yuanfang Guo, Yunhong Wang","submitted_at":"2023-07-01T09:07:12Z","abstract_excerpt":"This paper focuses on an important type of black-box attacks, i.e., transfer-based adversarial attacks, where the adversary generates adversarial examples by a substitute (source) model and utilize them to attack an unseen target model, without knowing its information. Existing methods tend to give unsatisfactory adversarial transferability when the source and target models are from different types of DNN architectures (e.g. ResNet-18 and Swin Transformer). In this paper, we observe that the above phenomenon is induced by the output inconsistency problem. To alleviate this problem while effect"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.00274","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2307.00274/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:26:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CR1T9C3J5f+o1MVfdscfVZv2/I8HkjB5Ryi6M6aLRO4K1OtlSRBhn8lrxoR2RRYTIGzu7A9YbFna9k7ALor4Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-21T17:18:11.203993Z"},"content_sha256":"1e4f00d40140038cede43f971b22585dbdcaaf6cddc423b38c439f43555a0535","schema_version":"1.0","event_id":"sha256:1e4f00d40140038cede43f971b22585dbdcaaf6cddc423b38c439f43555a0535"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/bundle.json","state_url":"https://pith.science/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-21T17:18:11Z","links":{"resolver":"https://pith.science/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK","bundle":"https://pith.science/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/bundle.json","state":"https://pith.science/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BDSBTBP2A4Y4QDBLKUMW2BU4SK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BDSBTBP2A4Y4QDBLKUMW2BU4SK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f8ae1cdfc315bfb073d488873f3ecdebf13e3384790edbd9a13dea6ac869feb","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-07-01T09:07:12Z","title_canon_sha256":"2e6eb9b78fd422c6f78ba43e86db45f2f1a67b51df02ec095f4548b83ad1cc23"},"schema_version":"1.0","source":{"id":"2307.00274","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2307.00274","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"arxiv_version","alias_value":"2307.00274v1","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2307.00274","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_12","alias_value":"BDSBTBP2A4Y4","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_16","alias_value":"BDSBTBP2A4Y4QDBL","created_at":"2026-07-05T06:26:54Z"},{"alias_kind":"pith_short_8","alias_value":"BDSBTBP2","created_at":"2026-07-05T06:26:54Z"}],"graph_snapshots":[{"event_id":"sha256:1e4f00d40140038cede43f971b22585dbdcaaf6cddc423b38c439f43555a0535","target":"graph","created_at":"2026-07-05T06:26:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2307.00274/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"This paper focuses on an important type of black-box attacks, i.e., transfer-based adversarial attacks, where the adversary generates adversarial examples by a substitute (source) model and utilize them to attack an unseen target model, without knowing its information. Existing methods tend to give unsatisfactory adversarial transferability when the source and target models are from different types of DNN architectures (e.g. ResNet-18 and Swin Transformer). In this paper, we observe that the above phenomenon is induced by the output inconsistency problem. To alleviate this problem while effect","authors_text":"Jiantao Zhou, Junfu Wang, Ruijie Yang, Yuanfang Guo, Yunhong Wang","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-07-01T09:07:12Z","title":"Common Knowledge Learning for Generating Transferable Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2307.00274","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6723a5cde2098b9260deba848ed6369e5409db01d42fa33355628c9b084d4227","target":"record","created_at":"2026-07-05T06:26:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f8ae1cdfc315bfb073d488873f3ecdebf13e3384790edbd9a13dea6ac869feb","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-07-01T09:07:12Z","title_canon_sha256":"2e6eb9b78fd422c6f78ba43e86db45f2f1a67b51df02ec095f4548b83ad1cc23"},"schema_version":"1.0","source":{"id":"2307.00274","kind":"arxiv","version":1}},"canonical_sha256":"08e41985fa0731c80c2b55196d069c928368f9e51a391464e9bfcbca9a3a3d5b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"08e41985fa0731c80c2b55196d069c928368f9e51a391464e9bfcbca9a3a3d5b","first_computed_at":"2026-07-05T06:26:54.191061Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:26:54.191061Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"rqURmca7WIpADs4HXVkvO5fE4qVqRidzie4oGyarxBWqQFUVv3OMQwGWbI404bBuD+zd9kMaJ286QGGweSPHBg==","signature_status":"signed_v1","signed_at":"2026-07-05T06:26:54.191523Z","signed_message":"canonical_sha256_bytes"},"source_id":"2307.00274","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6723a5cde2098b9260deba848ed6369e5409db01d42fa33355628c9b084d4227","sha256:1e4f00d40140038cede43f971b22585dbdcaaf6cddc423b38c439f43555a0535"],"state_sha256":"2b272a2a2d8929e355d892af8b4e494c913c965c6ed577f49d9a7edc874f4063"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FmfZAjn5RGni/IEmILKunU7t6kt5fBYGwPDeaPsKax2rOUVzSE6ok8mbX2+N7X55Mye8vB6D315/qZrQgCpnBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-21T17:18:11.209152Z","bundle_sha256":"5ef96e945b589888a0827d432a0399427c427bd2b3807369e0794ff989a935e8"}}