{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:BEFLKI5OHNEWV65PVFK4EJQT5C","short_pith_number":"pith:BEFLKI5O","canonical_record":{"source":{"id":"2310.09891","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-15T17:20:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"00bbd73100114cbec3623ef68d736adba9d8a6a6ccb9d5218910895e72b2c91f","abstract_canon_sha256":"75fce65dc5f4122997a668a11dd8cb2e73fad8f49df5100a6a6fd649a1ccb00d"},"schema_version":"1.0"},"canonical_sha256":"090ab523ae3b496afbafa955c22613e88e3405c80d1ebe3eb2bb8f3bca479809","source":{"kind":"arxiv","id":"2310.09891","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.09891","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"arxiv_version","alias_value":"2310.09891v1","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.09891","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_12","alias_value":"BEFLKI5OHNEW","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_16","alias_value":"BEFLKI5OHNEWV65P","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_8","alias_value":"BEFLKI5O","created_at":"2026-07-05T07:01:12Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:BEFLKI5OHNEWV65PVFK4EJQT5C","target":"record","payload":{"canonical_record":{"source":{"id":"2310.09891","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-15T17:20:42Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"00bbd73100114cbec3623ef68d736adba9d8a6a6ccb9d5218910895e72b2c91f","abstract_canon_sha256":"75fce65dc5f4122997a668a11dd8cb2e73fad8f49df5100a6a6fd649a1ccb00d"},"schema_version":"1.0"},"canonical_sha256":"090ab523ae3b496afbafa955c22613e88e3405c80d1ebe3eb2bb8f3bca479809","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T07:01:12.437057Z","signature_b64":"iKqsgl9mg4tPTYmgXY0SdQ41z1Ua3En/vbn0bnPIxQY9tlrl7dnoO7GXqOuB4KmkLs/afIJEKUN7eDO2cxLBBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"090ab523ae3b496afbafa955c22613e88e3405c80d1ebe3eb2bb8f3bca479809","last_reissued_at":"2026-07-05T07:01:12.436655Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T07:01:12.436655Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2310.09891","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WADmjlRYfBhPPo7MEHVrjpi4Ss3fnHV3TaVTsE7a9kJ2LSMGtnW45OSMN+/kKH3Xj3dK277inquK6JPHZ31xDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T00:55:08.606914Z"},"content_sha256":"29e36edd2c5fd1646d1de199c4561093342b3d3b1774f2c333949ee87a860605","schema_version":"1.0","event_id":"sha256:29e36edd2c5fd1646d1de199c4561093342b3d3b1774f2c333949ee87a860605"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:BEFLKI5OHNEWV65PVFK4EJQT5C","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Chao Shen, Chenhao Lin, Hongshan Yang, Qian Li, Qiwei Tian, Xiang Ji, Yulong Yang, Zhibo Wang","submitted_at":"2023-10-15T17:20:42Z","abstract_excerpt":"Transfer-based adversarial attacks raise a severe threat to real-world deep learning systems since they do not require access to target models. Adversarial training (AT), which is recognized as the strongest defense against white-box attacks, has also guaranteed high robustness to (black-box) transfer-based attacks. However, AT suffers from heavy computational overhead since it optimizes the adversarial examples during the whole training process. In this paper, we demonstrate that such heavy optimization is not necessary for AT against transfer-based attacks. Instead, a one-shot adversarial au"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.09891","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2310.09891/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T07:01:12Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+D4y1mfOHXQrzxBubgxszeFBMJ5ASm4rQ8wS0eLGUzH4nL+FaeCyXkfjBmnU9Dt8zDuYcLSIzmxPQqEO+BIyAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T00:55:08.607367Z"},"content_sha256":"c5f9e5327dc1a880dc1aca9d8b9752700fa85ca424a03350b6dcedc9ecbb8cbf","schema_version":"1.0","event_id":"sha256:c5f9e5327dc1a880dc1aca9d8b9752700fa85ca424a03350b6dcedc9ecbb8cbf"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/bundle.json","state_url":"https://pith.science/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T00:55:08Z","links":{"resolver":"https://pith.science/pith/BEFLKI5OHNEWV65PVFK4EJQT5C","bundle":"https://pith.science/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/bundle.json","state":"https://pith.science/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BEFLKI5OHNEWV65PVFK4EJQT5C/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:BEFLKI5OHNEWV65PVFK4EJQT5C","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"75fce65dc5f4122997a668a11dd8cb2e73fad8f49df5100a6a6fd649a1ccb00d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-15T17:20:42Z","title_canon_sha256":"00bbd73100114cbec3623ef68d736adba9d8a6a6ccb9d5218910895e72b2c91f"},"schema_version":"1.0","source":{"id":"2310.09891","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2310.09891","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"arxiv_version","alias_value":"2310.09891v1","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2310.09891","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_12","alias_value":"BEFLKI5OHNEW","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_16","alias_value":"BEFLKI5OHNEWV65P","created_at":"2026-07-05T07:01:12Z"},{"alias_kind":"pith_short_8","alias_value":"BEFLKI5O","created_at":"2026-07-05T07:01:12Z"}],"graph_snapshots":[{"event_id":"sha256:c5f9e5327dc1a880dc1aca9d8b9752700fa85ca424a03350b6dcedc9ecbb8cbf","target":"graph","created_at":"2026-07-05T07:01:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2310.09891/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Transfer-based adversarial attacks raise a severe threat to real-world deep learning systems since they do not require access to target models. Adversarial training (AT), which is recognized as the strongest defense against white-box attacks, has also guaranteed high robustness to (black-box) transfer-based attacks. However, AT suffers from heavy computational overhead since it optimizes the adversarial examples during the whole training process. In this paper, we demonstrate that such heavy optimization is not necessary for AT against transfer-based attacks. Instead, a one-shot adversarial au","authors_text":"Chao Shen, Chenhao Lin, Hongshan Yang, Qian Li, Qiwei Tian, Xiang Ji, Yulong Yang, Zhibo Wang","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-15T17:20:42Z","title":"Towards Deep Learning Models Resistant to Transfer-based Adversarial Attacks via Data-centric Robust Learning"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2310.09891","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:29e36edd2c5fd1646d1de199c4561093342b3d3b1774f2c333949ee87a860605","target":"record","created_at":"2026-07-05T07:01:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"75fce65dc5f4122997a668a11dd8cb2e73fad8f49df5100a6a6fd649a1ccb00d","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2023-10-15T17:20:42Z","title_canon_sha256":"00bbd73100114cbec3623ef68d736adba9d8a6a6ccb9d5218910895e72b2c91f"},"schema_version":"1.0","source":{"id":"2310.09891","kind":"arxiv","version":1}},"canonical_sha256":"090ab523ae3b496afbafa955c22613e88e3405c80d1ebe3eb2bb8f3bca479809","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"090ab523ae3b496afbafa955c22613e88e3405c80d1ebe3eb2bb8f3bca479809","first_computed_at":"2026-07-05T07:01:12.436655Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T07:01:12.436655Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"iKqsgl9mg4tPTYmgXY0SdQ41z1Ua3En/vbn0bnPIxQY9tlrl7dnoO7GXqOuB4KmkLs/afIJEKUN7eDO2cxLBBA==","signature_status":"signed_v1","signed_at":"2026-07-05T07:01:12.437057Z","signed_message":"canonical_sha256_bytes"},"source_id":"2310.09891","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:29e36edd2c5fd1646d1de199c4561093342b3d3b1774f2c333949ee87a860605","sha256:c5f9e5327dc1a880dc1aca9d8b9752700fa85ca424a03350b6dcedc9ecbb8cbf"],"state_sha256":"194ceac049a78335dba78f49c1e2f87d67d4b6c6e29f2a9b774ae96d7c6869c9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5LTAVHVmA+yUi5FsY1ChiXmVpyj4vwNB02PLHDEqBNiebSQPpPKJK/4INHBjHBDBpEO7zP4CmGrf8OsyzXIgBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T00:55:08.647541Z","bundle_sha256":"b4180be837bab0eec5011862fddbca0aab585c3673a6c1669ae0535eae084028"}}