{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:C5HD6EV3OJTS7SWFVKEA7RZJ2N","short_pith_number":"pith:C5HD6EV3","canonical_record":{"source":{"id":"2502.17003","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-24T09:35:30Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"f4dea69dad9aac6e46db692fc65070fd28961486b6f9aa5e935acfec589549fb","abstract_canon_sha256":"82fcc22a99986849448cc8da3fb3a8ce2aa2d2a4a75f22537fe05b7541fe2d42"},"schema_version":"1.0"},"canonical_sha256":"174e3f12bb72672fcac5aa880fc729d362903fc9b06ab7227abfa630b0aa52f0","source":{"kind":"arxiv","id":"2502.17003","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.17003","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"arxiv_version","alias_value":"2502.17003v1","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.17003","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_12","alias_value":"C5HD6EV3OJTS","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_16","alias_value":"C5HD6EV3OJTS7SWF","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_8","alias_value":"C5HD6EV3","created_at":"2026-07-05T10:19:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:C5HD6EV3OJTS7SWFVKEA7RZJ2N","target":"record","payload":{"canonical_record":{"source":{"id":"2502.17003","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-24T09:35:30Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"f4dea69dad9aac6e46db692fc65070fd28961486b6f9aa5e935acfec589549fb","abstract_canon_sha256":"82fcc22a99986849448cc8da3fb3a8ce2aa2d2a4a75f22537fe05b7541fe2d42"},"schema_version":"1.0"},"canonical_sha256":"174e3f12bb72672fcac5aa880fc729d362903fc9b06ab7227abfa630b0aa52f0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:19:05.016977Z","signature_b64":"ra3yWltAHsz+47UVw2fTJHMeoq8Ojrj+bMt5fMv63LU7kMiywR92zUPYCZWQqShJPGTX8VRY0l4G55W2udbWBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"174e3f12bb72672fcac5aa880fc729d362903fc9b06ab7227abfa630b0aa52f0","last_reissued_at":"2026-07-05T10:19:05.016529Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:19:05.016529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2502.17003","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nOZunptcO9ScXSZ9MNMu3Tz3U/iqBHL0vU8Op/qfAH+YAYsiPc4R/PqkEHD/5MvNNjxcIqMQZBAxriLu75x3BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T16:50:43.355320Z"},"content_sha256":"21e27d3457d6b3b95ba85b1e7b2f23517952cba9bac24bf822255d3f62df274c","schema_version":"1.0","event_id":"sha256:21e27d3457d6b3b95ba85b1e7b2f23517952cba9bac24bf822255d3f62df274c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:C5HD6EV3OJTS7SWFVKEA7RZJ2N","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving the Transferability of Adversarial Examples by Inverse Knowledge Distillation","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.LG","authors_text":"Chao Su, Dezhong Peng, Wenyuan Wu, Xu Wang, Yong Chen, Zheng Liu","submitted_at":"2025-02-24T09:35:30Z","abstract_excerpt":"In recent years, the rapid development of deep neural networks has brought increased attention to the security and robustness of these models. While existing adversarial attack algorithms have demonstrated success in improving adversarial transferability, their performance remains suboptimal due to a lack of consideration for the discrepancies between target and source models. To address this limitation, we propose a novel method, Inverse Knowledge Distillation (IKD), designed to enhance adversarial transferability effectively. IKD introduces a distillation-inspired loss function that seamless"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.17003","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2502.17003/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:19:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pq2F0/hA75Q8RqH/ec6Jc9LNGPrKVdPj6HcCGHRMX0EhxdWL+BKg9EbblyZLzT8sP+G9KhcbyiE2RU+fI82PAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T16:50:43.356199Z"},"content_sha256":"d3166e1a08b574945b3cc59b925d78fbbf34c7caeb19bac7c7870f183f2178e7","schema_version":"1.0","event_id":"sha256:d3166e1a08b574945b3cc59b925d78fbbf34c7caeb19bac7c7870f183f2178e7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/bundle.json","state_url":"https://pith.science/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T16:50:43Z","links":{"resolver":"https://pith.science/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N","bundle":"https://pith.science/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/bundle.json","state":"https://pith.science/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/state.json","well_known_bundle":"https://pith.science/.well-known/pith/C5HD6EV3OJTS7SWFVKEA7RZJ2N/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:C5HD6EV3OJTS7SWFVKEA7RZJ2N","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"82fcc22a99986849448cc8da3fb3a8ce2aa2d2a4a75f22537fe05b7541fe2d42","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-24T09:35:30Z","title_canon_sha256":"f4dea69dad9aac6e46db692fc65070fd28961486b6f9aa5e935acfec589549fb"},"schema_version":"1.0","source":{"id":"2502.17003","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.17003","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"arxiv_version","alias_value":"2502.17003v1","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.17003","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_12","alias_value":"C5HD6EV3OJTS","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_16","alias_value":"C5HD6EV3OJTS7SWF","created_at":"2026-07-05T10:19:05Z"},{"alias_kind":"pith_short_8","alias_value":"C5HD6EV3","created_at":"2026-07-05T10:19:05Z"}],"graph_snapshots":[{"event_id":"sha256:d3166e1a08b574945b3cc59b925d78fbbf34c7caeb19bac7c7870f183f2178e7","target":"graph","created_at":"2026-07-05T10:19:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.17003/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In recent years, the rapid development of deep neural networks has brought increased attention to the security and robustness of these models. While existing adversarial attack algorithms have demonstrated success in improving adversarial transferability, their performance remains suboptimal due to a lack of consideration for the discrepancies between target and source models. To address this limitation, we propose a novel method, Inverse Knowledge Distillation (IKD), designed to enhance adversarial transferability effectively. IKD introduces a distillation-inspired loss function that seamless","authors_text":"Chao Su, Dezhong Peng, Wenyuan Wu, Xu Wang, Yong Chen, Zheng Liu","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-24T09:35:30Z","title":"Improving the Transferability of Adversarial Examples by Inverse Knowledge Distillation"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.17003","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:21e27d3457d6b3b95ba85b1e7b2f23517952cba9bac24bf822255d3f62df274c","target":"record","created_at":"2026-07-05T10:19:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"82fcc22a99986849448cc8da3fb3a8ce2aa2d2a4a75f22537fe05b7541fe2d42","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2025-02-24T09:35:30Z","title_canon_sha256":"f4dea69dad9aac6e46db692fc65070fd28961486b6f9aa5e935acfec589549fb"},"schema_version":"1.0","source":{"id":"2502.17003","kind":"arxiv","version":1}},"canonical_sha256":"174e3f12bb72672fcac5aa880fc729d362903fc9b06ab7227abfa630b0aa52f0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"174e3f12bb72672fcac5aa880fc729d362903fc9b06ab7227abfa630b0aa52f0","first_computed_at":"2026-07-05T10:19:05.016529Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:19:05.016529Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ra3yWltAHsz+47UVw2fTJHMeoq8Ojrj+bMt5fMv63LU7kMiywR92zUPYCZWQqShJPGTX8VRY0l4G55W2udbWBw==","signature_status":"signed_v1","signed_at":"2026-07-05T10:19:05.016977Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.17003","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:21e27d3457d6b3b95ba85b1e7b2f23517952cba9bac24bf822255d3f62df274c","sha256:d3166e1a08b574945b3cc59b925d78fbbf34c7caeb19bac7c7870f183f2178e7"],"state_sha256":"501234f2aa100df766c36548128ef2683a94d0e6460f38f2720513c5fb6261f1"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"D3RrZXxTqu1r8uViZxPbRfhR/MxIUdBsyOvcmFZW0usGioTNJdEVc8mkaeGezR/WHxglkRS6ovgzioee4UhLDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T16:50:43.361285Z","bundle_sha256":"87d43474baae0d570187061492256a4c8f55f7f83eee5c9ed142cda0fcfd91c9"}}