{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:CJ2JNA2FSYEG7DNT5ECIWZRNJL","short_pith_number":"pith:CJ2JNA2F","canonical_record":{"source":{"id":"2408.11071","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-18T03:16:59Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"a570ca87f84feb5d1d598853596ca5917b65f555e82ea7f095cdd713da3f8c8f","abstract_canon_sha256":"24e37b035e2039618fd35af7824877c6c40c6bf604596f58acaf0595fac4c067"},"schema_version":"1.0"},"canonical_sha256":"127496834596086f8db3e9048b662d4aefa20df3fac4806db9e1cb3e6557a585","source":{"kind":"arxiv","id":"2408.11071","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.11071","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"arxiv_version","alias_value":"2408.11071v2","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.11071","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_12","alias_value":"CJ2JNA2FSYEG","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_16","alias_value":"CJ2JNA2FSYEG7DNT","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_8","alias_value":"CJ2JNA2F","created_at":"2026-07-05T10:10:08Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:CJ2JNA2FSYEG7DNT5ECIWZRNJL","target":"record","payload":{"canonical_record":{"source":{"id":"2408.11071","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-18T03:16:59Z","cross_cats_sorted":["cs.AI","cs.CV"],"title_canon_sha256":"a570ca87f84feb5d1d598853596ca5917b65f555e82ea7f095cdd713da3f8c8f","abstract_canon_sha256":"24e37b035e2039618fd35af7824877c6c40c6bf604596f58acaf0595fac4c067"},"schema_version":"1.0"},"canonical_sha256":"127496834596086f8db3e9048b662d4aefa20df3fac4806db9e1cb3e6557a585","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:10:08.564730Z","signature_b64":"HI02b9Pv+KyeQ/fO5ETMKXWwozc74TJ0EDUVXGQHBJzv0yyX5DdJJ7mmGXQaVxr3T30DG9yyg9VLM0EUgxE7Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"127496834596086f8db3e9048b662d4aefa20df3fac4806db9e1cb3e6557a585","last_reissued_at":"2026-07-05T10:10:08.564152Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:10:08.564152Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.11071","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"z8uLdcYnsxrF4gEx9LzkfhE0kq1vDsV05qNhkrv/5w5jw5KYUtngayeRjlT6IIys5CdmYCKFu8er8c2NHchiBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T02:16:07.828251Z"},"content_sha256":"0c9b0b1bed087eb7eb3c8c0c092b33b3d4827971bcbe8bf494ee3b873ac8dd30","schema_version":"1.0","event_id":"sha256:0c9b0b1bed087eb7eb3c8c0c092b33b3d4827971bcbe8bf494ee3b873ac8dd30"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:CJ2JNA2FSYEG7DNT5ECIWZRNJL","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.CV"],"primary_cat":"cs.CR","authors_text":"Dong Li, Kaidi Xu, Pucheng Dang, Qi Guo, Rui Zhang, Xing Hu","submitted_at":"2024-08-18T03:16:59Z","abstract_excerpt":"Current text-to-image (T2I) synthesis diffusion models raise misuse concerns, particularly in creating prohibited or not-safe-for-work (NSFW) images. To address this, various safety mechanisms and red teaming attack methods are proposed to enhance or expose the T2I model's capability to generate unsuitable content. However, many red teaming attack methods assume knowledge of the text encoders, limiting their practical usage. In this work, we rethink the case of \\textit{purely black-box} attacks without prior knowledge of the T2l model. To overcome the unavailability of gradients and the inabil"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.11071","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.11071/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:10:08Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"hsXOLKp8ULTt9S4ACc8o17VZMNnhvFTYFg0JROkDSswzKlYUN0PbsffvtYDvzqZwvMHs9VkdTVQGV7zc+FNpAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T02:16:07.829190Z"},"content_sha256":"2d7134fc4a4ddf871996c65f664ecfd841d5cc32cbea3d8690ea786dc1205125","schema_version":"1.0","event_id":"sha256:2d7134fc4a4ddf871996c65f664ecfd841d5cc32cbea3d8690ea786dc1205125"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/bundle.json","state_url":"https://pith.science/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T02:16:07Z","links":{"resolver":"https://pith.science/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL","bundle":"https://pith.science/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/bundle.json","state":"https://pith.science/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CJ2JNA2FSYEG7DNT5ECIWZRNJL/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:CJ2JNA2FSYEG7DNT5ECIWZRNJL","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"24e37b035e2039618fd35af7824877c6c40c6bf604596f58acaf0595fac4c067","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-18T03:16:59Z","title_canon_sha256":"a570ca87f84feb5d1d598853596ca5917b65f555e82ea7f095cdd713da3f8c8f"},"schema_version":"1.0","source":{"id":"2408.11071","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.11071","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"arxiv_version","alias_value":"2408.11071v2","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.11071","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_12","alias_value":"CJ2JNA2FSYEG","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_16","alias_value":"CJ2JNA2FSYEG7DNT","created_at":"2026-07-05T10:10:08Z"},{"alias_kind":"pith_short_8","alias_value":"CJ2JNA2F","created_at":"2026-07-05T10:10:08Z"}],"graph_snapshots":[{"event_id":"sha256:2d7134fc4a4ddf871996c65f664ecfd841d5cc32cbea3d8690ea786dc1205125","target":"graph","created_at":"2026-07-05T10:10:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.11071/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Current text-to-image (T2I) synthesis diffusion models raise misuse concerns, particularly in creating prohibited or not-safe-for-work (NSFW) images. To address this, various safety mechanisms and red teaming attack methods are proposed to enhance or expose the T2I model's capability to generate unsuitable content. However, many red teaming attack methods assume knowledge of the text encoders, limiting their practical usage. In this work, we rethink the case of \\textit{purely black-box} attacks without prior knowledge of the T2l model. To overcome the unavailability of gradients and the inabil","authors_text":"Dong Li, Kaidi Xu, Pucheng Dang, Qi Guo, Rui Zhang, Xing Hu","cross_cats":["cs.AI","cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-18T03:16:59Z","title":"DiffZOO: A Purely Query-Based Black-Box Attack for Red-teaming Text-to-Image Generative Model via Zeroth Order Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.11071","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:0c9b0b1bed087eb7eb3c8c0c092b33b3d4827971bcbe8bf494ee3b873ac8dd30","target":"record","created_at":"2026-07-05T10:10:08Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"24e37b035e2039618fd35af7824877c6c40c6bf604596f58acaf0595fac4c067","cross_cats_sorted":["cs.AI","cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-08-18T03:16:59Z","title_canon_sha256":"a570ca87f84feb5d1d598853596ca5917b65f555e82ea7f095cdd713da3f8c8f"},"schema_version":"1.0","source":{"id":"2408.11071","kind":"arxiv","version":2}},"canonical_sha256":"127496834596086f8db3e9048b662d4aefa20df3fac4806db9e1cb3e6557a585","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"127496834596086f8db3e9048b662d4aefa20df3fac4806db9e1cb3e6557a585","first_computed_at":"2026-07-05T10:10:08.564152Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:10:08.564152Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HI02b9Pv+KyeQ/fO5ETMKXWwozc74TJ0EDUVXGQHBJzv0yyX5DdJJ7mmGXQaVxr3T30DG9yyg9VLM0EUgxE7Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:10:08.564730Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.11071","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:0c9b0b1bed087eb7eb3c8c0c092b33b3d4827971bcbe8bf494ee3b873ac8dd30","sha256:2d7134fc4a4ddf871996c65f664ecfd841d5cc32cbea3d8690ea786dc1205125"],"state_sha256":"074ae5eee44d6582a4d9cea987c281d4de87654f89262702e02132d28fbcfacc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KNfdHRbKrDlp5bG+fqw6BTgi6iMfw23BuXTQfY30cJ9UkwF6/gHewd+fGbn0PvTeYsEGj1kmTD/dOWICRbCeCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T02:16:07.834535Z","bundle_sha256":"eeebacb1f83064523e8162a611645bf77ed791231ce0a6c2a8ddf022e0946c84"}}