{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:CA522PKBBDPVU2J5ZM67NZHE52","short_pith_number":"pith:CA522PKB","canonical_record":{"source":{"id":"2106.15058","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-29T02:13:05Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0500ec061cb5208b1bbcc6f543797441895b5402171f3336071024c306046f7a","abstract_canon_sha256":"762c080b7e4a4235b5ddc106b7b6667208e1cabcba001bec71b76a38db8f8556"},"schema_version":"1.0"},"canonical_sha256":"103bad3d4108df5a693dcb3df6e4e4eeb50ea04af97b9a3b388936a20ea4d44f","source":{"kind":"arxiv","id":"2106.15058","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.15058","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"arxiv_version","alias_value":"2106.15058v2","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.15058","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_12","alias_value":"CA522PKBBDPV","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_16","alias_value":"CA522PKBBDPVU2J5","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_8","alias_value":"CA522PKB","created_at":"2026-07-05T03:09:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:CA522PKBBDPVU2J5ZM67NZHE52","target":"record","payload":{"canonical_record":{"source":{"id":"2106.15058","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-29T02:13:05Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"0500ec061cb5208b1bbcc6f543797441895b5402171f3336071024c306046f7a","abstract_canon_sha256":"762c080b7e4a4235b5ddc106b7b6667208e1cabcba001bec71b76a38db8f8556"},"schema_version":"1.0"},"canonical_sha256":"103bad3d4108df5a693dcb3df6e4e4eeb50ea04af97b9a3b388936a20ea4d44f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:09:46.451209Z","signature_b64":"V8l+QWfUY7I+aCR15684NHHPPPqf+BqhqyXPjlB/wPKJZ+7mhTCz+NFlgWLLZUXp3XeizpvJflWdI/Cf8uoMBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"103bad3d4108df5a693dcb3df6e4e4eeb50ea04af97b9a3b388936a20ea4d44f","last_reissued_at":"2026-07-05T03:09:46.450750Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:09:46.450750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.15058","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:09:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hjhdYT7PpdubXukqfnCwZ7CuxbZjYZ80T/jVFSAbBdyYVDrtR0UjeRRlgdQZvcOy6PNE+dyWy4UWQBmANLYJDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:18:37.958143Z"},"content_sha256":"9ef2aa23f656e4acf06231902874fabdaae18c5e6e0cd84c5d73f50e05fed27c","schema_version":"1.0","event_id":"sha256:9ef2aa23f656e4acf06231902874fabdaae18c5e6e0cd84c5d73f50e05fed27c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:CA522PKBBDPVU2J5ZM67NZHE52","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Chilin Fu, Jun Zhou, Jun Zhu, Wei Gao, Xianfeng Gao, Xiaolu Zhang, Yinpeng Dong, Zihao Xiao","submitted_at":"2021-06-29T02:13:05Z","abstract_excerpt":"Face recognition is greatly improved by deep convolutional neural networks (CNNs). Recently, these face recognition models have been used for identity authentication in security sensitive applications. However, deep CNNs are vulnerable to adversarial patches, which are physically realizable and stealthy, raising new security concerns on the real-world applications of these models. In this paper, we evaluate the robustness of face recognition models using adversarial patches based on transferability, where the attacker has limited accessibility to the target models. First, we extend the existin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.15058","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.15058/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:09:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"chtlkbJRJLHS9d4N6mkYTnBv6s9oOvsBAnTK/NzrH7gY1SV5gswHk2/UA2TbYSomisf7ois1AiFiLlnLca+MAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-07T06:18:37.958666Z"},"content_sha256":"29decf3c6322829c86dc52c051dbdef70a05d916306b815cd6b3b518fcae540a","schema_version":"1.0","event_id":"sha256:29decf3c6322829c86dc52c051dbdef70a05d916306b815cd6b3b518fcae540a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CA522PKBBDPVU2J5ZM67NZHE52/bundle.json","state_url":"https://pith.science/pith/CA522PKBBDPVU2J5ZM67NZHE52/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CA522PKBBDPVU2J5ZM67NZHE52/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-07T06:18:37Z","links":{"resolver":"https://pith.science/pith/CA522PKBBDPVU2J5ZM67NZHE52","bundle":"https://pith.science/pith/CA522PKBBDPVU2J5ZM67NZHE52/bundle.json","state":"https://pith.science/pith/CA522PKBBDPVU2J5ZM67NZHE52/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CA522PKBBDPVU2J5ZM67NZHE52/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:CA522PKBBDPVU2J5ZM67NZHE52","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"762c080b7e4a4235b5ddc106b7b6667208e1cabcba001bec71b76a38db8f8556","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-29T02:13:05Z","title_canon_sha256":"0500ec061cb5208b1bbcc6f543797441895b5402171f3336071024c306046f7a"},"schema_version":"1.0","source":{"id":"2106.15058","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.15058","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"arxiv_version","alias_value":"2106.15058v2","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.15058","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_12","alias_value":"CA522PKBBDPV","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_16","alias_value":"CA522PKBBDPVU2J5","created_at":"2026-07-05T03:09:46Z"},{"alias_kind":"pith_short_8","alias_value":"CA522PKB","created_at":"2026-07-05T03:09:46Z"}],"graph_snapshots":[{"event_id":"sha256:29decf3c6322829c86dc52c051dbdef70a05d916306b815cd6b3b518fcae540a","target":"graph","created_at":"2026-07-05T03:09:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.15058/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Face recognition is greatly improved by deep convolutional neural networks (CNNs). Recently, these face recognition models have been used for identity authentication in security sensitive applications. However, deep CNNs are vulnerable to adversarial patches, which are physically realizable and stealthy, raising new security concerns on the real-world applications of these models. In this paper, we evaluate the robustness of face recognition models using adversarial patches based on transferability, where the attacker has limited accessibility to the target models. First, we extend the existin","authors_text":"Chilin Fu, Jun Zhou, Jun Zhu, Wei Gao, Xianfeng Gao, Xiaolu Zhang, Yinpeng Dong, Zihao Xiao","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-29T02:13:05Z","title":"Improving Transferability of Adversarial Patches on Face Recognition with Generative Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.15058","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9ef2aa23f656e4acf06231902874fabdaae18c5e6e0cd84c5d73f50e05fed27c","target":"record","created_at":"2026-07-05T03:09:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"762c080b7e4a4235b5ddc106b7b6667208e1cabcba001bec71b76a38db8f8556","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-29T02:13:05Z","title_canon_sha256":"0500ec061cb5208b1bbcc6f543797441895b5402171f3336071024c306046f7a"},"schema_version":"1.0","source":{"id":"2106.15058","kind":"arxiv","version":2}},"canonical_sha256":"103bad3d4108df5a693dcb3df6e4e4eeb50ea04af97b9a3b388936a20ea4d44f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"103bad3d4108df5a693dcb3df6e4e4eeb50ea04af97b9a3b388936a20ea4d44f","first_computed_at":"2026-07-05T03:09:46.450750Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:09:46.450750Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"V8l+QWfUY7I+aCR15684NHHPPPqf+BqhqyXPjlB/wPKJZ+7mhTCz+NFlgWLLZUXp3XeizpvJflWdI/Cf8uoMBA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:09:46.451209Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.15058","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9ef2aa23f656e4acf06231902874fabdaae18c5e6e0cd84c5d73f50e05fed27c","sha256:29decf3c6322829c86dc52c051dbdef70a05d916306b815cd6b3b518fcae540a"],"state_sha256":"8e8523958a558612cace62a8a3b3470eb7fb1eebe8ae00c3a923aede44276303"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CuPONcvqInUsm0YyDwKfsQa/5mHEmeJyN2MMQVkYW8TgZ4T0fLhZyO8J5yTk82E+codHlAn/+ngWF4wBubCpBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-07T06:18:37.962887Z","bundle_sha256":"56e2f0b0697c02bcca0108436437904a9f54a1a855589bb878bff96da42d9e69"}}