{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2023:BMWOT3BQAUYWBX7OOSFJF656I3","short_pith_number":"pith:BMWOT3BQ","schema_version":"1.0","canonical_sha256":"0b2ce9ec30053160dfee748a92fbbe46ce46c39bb6104fbfbec094da8dd6828c","source":{"kind":"arxiv","id":"2301.12576","version":2},"attestation_state":"computed","paper":{"title":"Uncovering Adversarial Risks of Test-Time Adaptation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Feiran Jia, Jiachen T. Wang, Prateek Mittal, Saeed Mahloujifar, Tong Wu, Vikash Sehwag, Xiangyu Qi","submitted_at":"2023-01-29T22:58:05Z","abstract_excerpt":"Recently, test-time adaptation (TTA) has been proposed as a promising solution for addressing distribution shifts. It allows a base model to adapt to an unforeseen distribution during inference by leveraging the information from the batch of (unlabeled) test data. However, we uncover a novel security vulnerability of TTA based on the insight that predictions on benign samples can be impacted by malicious samples in the same batch. To exploit this vulnerability, we propose Distribution Invading Attack (DIA), which injects a small fraction of malicious data into the test batch. DIA causes models"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2301.12576","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-01-29T22:58:05Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"6665d985d5f282b73c1d60fffb7dd79eff457e590db5f8015f0423ab3d981836","abstract_canon_sha256":"b3bf47e5d1e45a9241c9b0c46692518b00234ba5438a66bdee298015e801477c"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:38:46.682219Z","signature_b64":"8sDq8fk2O/U8fN+8NpHpD1FUzIyhkv3r7We3HTvO2sWg+UCrWUpRZaOqxoFx2JZ4Ftns6t8+Yezx0DFX/HEdBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"0b2ce9ec30053160dfee748a92fbbe46ce46c39bb6104fbfbec094da8dd6828c","last_reissued_at":"2026-07-05T05:38:46.681728Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:38:46.681728Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Uncovering Adversarial Risks of Test-Time Adaptation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Feiran Jia, Jiachen T. Wang, Prateek Mittal, Saeed Mahloujifar, Tong Wu, Vikash Sehwag, Xiangyu Qi","submitted_at":"2023-01-29T22:58:05Z","abstract_excerpt":"Recently, test-time adaptation (TTA) has been proposed as a promising solution for addressing distribution shifts. It allows a base model to adapt to an unforeseen distribution during inference by leveraging the information from the batch of (unlabeled) test data. However, we uncover a novel security vulnerability of TTA based on the insight that predictions on benign samples can be impacted by malicious samples in the same batch. To exploit this vulnerability, we propose Distribution Invading Attack (DIA), which injects a small fraction of malicious data into the test batch. DIA causes models"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2301.12576","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2301.12576/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2301.12576","created_at":"2026-07-05T05:38:46.681787+00:00"},{"alias_kind":"arxiv_version","alias_value":"2301.12576v2","created_at":"2026-07-05T05:38:46.681787+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2301.12576","created_at":"2026-07-05T05:38:46.681787+00:00"},{"alias_kind":"pith_short_12","alias_value":"BMWOT3BQAUYW","created_at":"2026-07-05T05:38:46.681787+00:00"},{"alias_kind":"pith_short_16","alias_value":"BMWOT3BQAUYWBX7O","created_at":"2026-07-05T05:38:46.681787+00:00"},{"alias_kind":"pith_short_8","alias_value":"BMWOT3BQ","created_at":"2026-07-05T05:38:46.681787+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":0,"sample":[{"citing_arxiv_id":"2605.23411","citing_title":"Sample-wise Targeted Adversarial Attacks on Test-time Adaptation","ref_index":48,"is_internal_anchor":false}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3","json":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3.json","graph_json":"https://pith.science/api/pith-number/BMWOT3BQAUYWBX7OOSFJF656I3/graph.json","events_json":"https://pith.science/api/pith-number/BMWOT3BQAUYWBX7OOSFJF656I3/events.json","paper":"https://pith.science/paper/BMWOT3BQ"},"agent_actions":{"view_html":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3","download_json":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3.json","view_paper":"https://pith.science/paper/BMWOT3BQ","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2301.12576&json=true","fetch_graph":"https://pith.science/api/pith-number/BMWOT3BQAUYWBX7OOSFJF656I3/graph.json","fetch_events":"https://pith.science/api/pith-number/BMWOT3BQAUYWBX7OOSFJF656I3/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3/action/timestamp_anchor","attest_storage":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3/action/storage_attestation","attest_author":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3/action/author_attestation","sign_citation":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3/action/citation_signature","submit_replication":"https://pith.science/pith/BMWOT3BQAUYWBX7OOSFJF656I3/action/replication_record"}},"created_at":"2026-07-05T05:38:46.681787+00:00","updated_at":"2026-07-05T05:38:46.681787+00:00"}