{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:BJNGDJF2VBFFUKVSLU73Q2VQHD","short_pith_number":"pith:BJNGDJF2","canonical_record":{"source":{"id":"2108.12492","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-08-27T20:27:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"b9c87d36bc74ff265acdff8e73323f266c9e89b5cc790099b17200b65abe8c79","abstract_canon_sha256":"455cbebaa3597fc2dafe8774c52ba4c8b183c02f84499ccd675f1cf51336dcd4"},"schema_version":"1.0"},"canonical_sha256":"0a5a61a4baa84a5a2ab25d3fb86ab038c2928f4479ee9840b9d8259483cd0f40","source":{"kind":"arxiv","id":"2108.12492","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12492","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12492v3","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12492","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_12","alias_value":"BJNGDJF2VBFF","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_16","alias_value":"BJNGDJF2VBFFUKVS","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_8","alias_value":"BJNGDJF2","created_at":"2026-07-05T05:44:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:BJNGDJF2VBFFUKVSLU73Q2VQHD","target":"record","payload":{"canonical_record":{"source":{"id":"2108.12492","kind":"arxiv","version":3},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-08-27T20:27:38Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"b9c87d36bc74ff265acdff8e73323f266c9e89b5cc790099b17200b65abe8c79","abstract_canon_sha256":"455cbebaa3597fc2dafe8774c52ba4c8b183c02f84499ccd675f1cf51336dcd4"},"schema_version":"1.0"},"canonical_sha256":"0a5a61a4baa84a5a2ab25d3fb86ab038c2928f4479ee9840b9d8259483cd0f40","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:44:46.813918Z","signature_b64":"CAXiWLXggDeSpqoUKH+xS/Y7gev1j/tV/PJ0nGc5CRG83l06RTK+na5SH7ExSKNwgfYpWu1tz/0eHq7+sWn6BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0a5a61a4baa84a5a2ab25d3fb86ab038c2928f4479ee9840b9d8259483cd0f40","last_reissued_at":"2026-07-05T05:44:46.813527Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:44:46.813527Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2108.12492","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:44:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fMB+zcbZgNpx/kNsV2fnwVF+ZNWwqdQtNjA2QZpRXjuyi0okL2LCxYrWK0/9fsUnQMOR5yPm9rpOp8wGtENJAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T22:28:35.662025Z"},"content_sha256":"eebabcdd85ae96574a6c0104ecd52837800ecc4456c34f9c9c3b2926d259659b","schema_version":"1.0","event_id":"sha256:eebabcdd85ae96574a6c0104ecd52837800ecc4456c34f9c9c3b2926d259659b"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:BJNGDJF2VBFFUKVSLU73Q2VQHD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Disrupting Adversarial Transferability in Deep Neural Networks","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Christopher Wiedeman, Ge Wang","submitted_at":"2021-08-27T20:27:38Z","abstract_excerpt":"Adversarial attack transferability is well-recognized in deep learning. Prior work has partially explained transferability by recognizing common adversarial subspaces and correlations between decision boundaries, but little is known beyond this. We propose that transferability between seemingly different models is due to a high linear correlation between the feature sets that different networks extract. In other words, two models trained on the same task that are distant in the parameter space likely extract features in the same fashion, just with trivial affine transformations between the lat"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12492","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2108.12492/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:44:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sJQL6yF1LOFVNdCcmU/N1Z9nJA/D7QNVgcDYNUmh2wY+M4xmFNkWLKGznaa54SrVsQdjODE4cmLzOAwQAJ8/AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-13T22:28:35.662408Z"},"content_sha256":"daccbd74b5d9511697e97ad71a7fd6b979be7ea33c5ebd7b3858cdc86215921f","schema_version":"1.0","event_id":"sha256:daccbd74b5d9511697e97ad71a7fd6b979be7ea33c5ebd7b3858cdc86215921f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/bundle.json","state_url":"https://pith.science/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-13T22:28:35Z","links":{"resolver":"https://pith.science/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD","bundle":"https://pith.science/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/bundle.json","state":"https://pith.science/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/BJNGDJF2VBFFUKVSLU73Q2VQHD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:BJNGDJF2VBFFUKVSLU73Q2VQHD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"455cbebaa3597fc2dafe8774c52ba4c8b183c02f84499ccd675f1cf51336dcd4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-08-27T20:27:38Z","title_canon_sha256":"b9c87d36bc74ff265acdff8e73323f266c9e89b5cc790099b17200b65abe8c79"},"schema_version":"1.0","source":{"id":"2108.12492","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2108.12492","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"arxiv_version","alias_value":"2108.12492v3","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2108.12492","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_12","alias_value":"BJNGDJF2VBFF","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_16","alias_value":"BJNGDJF2VBFFUKVS","created_at":"2026-07-05T05:44:46Z"},{"alias_kind":"pith_short_8","alias_value":"BJNGDJF2","created_at":"2026-07-05T05:44:46Z"}],"graph_snapshots":[{"event_id":"sha256:daccbd74b5d9511697e97ad71a7fd6b979be7ea33c5ebd7b3858cdc86215921f","target":"graph","created_at":"2026-07-05T05:44:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2108.12492/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attack transferability is well-recognized in deep learning. Prior work has partially explained transferability by recognizing common adversarial subspaces and correlations between decision boundaries, but little is known beyond this. We propose that transferability between seemingly different models is due to a high linear correlation between the feature sets that different networks extract. In other words, two models trained on the same task that are distant in the parameter space likely extract features in the same fashion, just with trivial affine transformations between the lat","authors_text":"Christopher Wiedeman, Ge Wang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-08-27T20:27:38Z","title":"Disrupting Adversarial Transferability in Deep Neural Networks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2108.12492","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eebabcdd85ae96574a6c0104ecd52837800ecc4456c34f9c9c3b2926d259659b","target":"record","created_at":"2026-07-05T05:44:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"455cbebaa3597fc2dafe8774c52ba4c8b183c02f84499ccd675f1cf51336dcd4","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2021-08-27T20:27:38Z","title_canon_sha256":"b9c87d36bc74ff265acdff8e73323f266c9e89b5cc790099b17200b65abe8c79"},"schema_version":"1.0","source":{"id":"2108.12492","kind":"arxiv","version":3}},"canonical_sha256":"0a5a61a4baa84a5a2ab25d3fb86ab038c2928f4479ee9840b9d8259483cd0f40","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"0a5a61a4baa84a5a2ab25d3fb86ab038c2928f4479ee9840b9d8259483cd0f40","first_computed_at":"2026-07-05T05:44:46.813527Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:44:46.813527Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"CAXiWLXggDeSpqoUKH+xS/Y7gev1j/tV/PJ0nGc5CRG83l06RTK+na5SH7ExSKNwgfYpWu1tz/0eHq7+sWn6BA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:44:46.813918Z","signed_message":"canonical_sha256_bytes"},"source_id":"2108.12492","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eebabcdd85ae96574a6c0104ecd52837800ecc4456c34f9c9c3b2926d259659b","sha256:daccbd74b5d9511697e97ad71a7fd6b979be7ea33c5ebd7b3858cdc86215921f"],"state_sha256":"7ecc7ad7c8c324a678ceb93f0fd17ac9d4bb136247d8738e4bb1a67db53dd289"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"i768kN8uC0OmY06mu5cueDhpNm+k+wRjiBi7hep2inY89NRu5DO4mMDgnGt012xv3QX/51Y+lBGFhfYHJcmBDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-13T22:28:35.664486Z","bundle_sha256":"49eb03c6e8942d1dd789380c113744d7fd61f1f2f89b9eab78aa53919804ce86"}}