{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:CJP45V2BRN5D3LODZVLGC22KDK","short_pith_number":"pith:CJP45V2B","canonical_record":{"source":{"id":"2012.06330","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-12-09T14:13:41Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"683ef6062f6e29f1d0bfdefae4b6c18427bee49ebfc194a4afb84ced69b4a15d","abstract_canon_sha256":"7cd428f1f0017e663402e924dd500f0a0be80a1440fdf361a1904d203e104c09"},"schema_version":"1.0"},"canonical_sha256":"125fced7418b7a3dadc3cd56616b4a1a95a454547f6d30bbfe78f2dae96a8549","source":{"kind":"arxiv","id":"2012.06330","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.06330","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"arxiv_version","alias_value":"2012.06330v2","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.06330","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_12","alias_value":"CJP45V2BRN5D","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_16","alias_value":"CJP45V2BRN5D3LOD","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_8","alias_value":"CJP45V2B","created_at":"2026-07-05T02:52:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:CJP45V2BRN5D3LODZVLGC22KDK","target":"record","payload":{"canonical_record":{"source":{"id":"2012.06330","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-12-09T14:13:41Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"683ef6062f6e29f1d0bfdefae4b6c18427bee49ebfc194a4afb84ced69b4a15d","abstract_canon_sha256":"7cd428f1f0017e663402e924dd500f0a0be80a1440fdf361a1904d203e104c09"},"schema_version":"1.0"},"canonical_sha256":"125fced7418b7a3dadc3cd56616b4a1a95a454547f6d30bbfe78f2dae96a8549","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:52:41.318607Z","signature_b64":"xTFi01jKgOSpf2g8mW4HxZcoqpglz71SVIcaSo/FD2DFqFX8lIZidD2hxvfoLMwRSZ134L5XZJLb2OUIvn+iCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"125fced7418b7a3dadc3cd56616b4a1a95a454547f6d30bbfe78f2dae96a8549","last_reissued_at":"2026-07-05T02:52:41.318129Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:52:41.318129Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2012.06330","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:52:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3iPZlFs4eWNSbsT/nWL65lF+daxTPDQA3aWxWjtBCrfwIOTiXgB8BLRD3/2o743n7rVyVFEdIbk+QgV2z74tAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T04:32:53.988468Z"},"content_sha256":"3359819cd3e122738aef26cec996b16c64a4df847bf4a733b5f5470d4603caed","schema_version":"1.0","event_id":"sha256:3359819cd3e122738aef26cec996b16c64a4df847bf4a733b5f5470d4603caed"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:CJP45V2BRN5D3LODZVLGC22KDK","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Detection of Adversarial Supports in Few-shot Classifiers Using Self-Similarity and Filtering","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Alexander Binder, Jiamei Sun, Ngai-Man Cheung, Penny Chong, Yi Xiang Marcus Tan, Yuval Elovici","submitted_at":"2020-12-09T14:13:41Z","abstract_excerpt":"Few-shot classifiers excel under limited training samples, making them useful in applications with sparsely user-provided labels. Their unique relative prediction setup offers opportunities for novel attacks, such as targeting support sets required to categorise unseen test samples, which are not available in other machine learning setups. In this work, we propose a detection strategy to identify adversarial support sets, aimed at destroying the understanding of a few-shot classifier for a certain class. We achieve this by introducing the concept of self-similarity of a support set and by empl"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.06330","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2012.06330/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:52:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CdEeX38o3Vt8rQeJ5K/rF/xVhtrJAGNvPf/RhivHOUaXuUVahBqc7MLWtjmspigPsQ3VcYWJktByvvcVFHs5CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T04:32:53.989413Z"},"content_sha256":"bb47897cccfc9e184337378084a4b4f39a6c38a97ccd181c8b0081e50eea9a03","schema_version":"1.0","event_id":"sha256:bb47897cccfc9e184337378084a4b4f39a6c38a97ccd181c8b0081e50eea9a03"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/CJP45V2BRN5D3LODZVLGC22KDK/bundle.json","state_url":"https://pith.science/pith/CJP45V2BRN5D3LODZVLGC22KDK/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/CJP45V2BRN5D3LODZVLGC22KDK/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T04:32:53Z","links":{"resolver":"https://pith.science/pith/CJP45V2BRN5D3LODZVLGC22KDK","bundle":"https://pith.science/pith/CJP45V2BRN5D3LODZVLGC22KDK/bundle.json","state":"https://pith.science/pith/CJP45V2BRN5D3LODZVLGC22KDK/state.json","well_known_bundle":"https://pith.science/.well-known/pith/CJP45V2BRN5D3LODZVLGC22KDK/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:CJP45V2BRN5D3LODZVLGC22KDK","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"7cd428f1f0017e663402e924dd500f0a0be80a1440fdf361a1904d203e104c09","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-12-09T14:13:41Z","title_canon_sha256":"683ef6062f6e29f1d0bfdefae4b6c18427bee49ebfc194a4afb84ced69b4a15d"},"schema_version":"1.0","source":{"id":"2012.06330","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2012.06330","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"arxiv_version","alias_value":"2012.06330v2","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2012.06330","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_12","alias_value":"CJP45V2BRN5D","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_16","alias_value":"CJP45V2BRN5D3LOD","created_at":"2026-07-05T02:52:41Z"},{"alias_kind":"pith_short_8","alias_value":"CJP45V2B","created_at":"2026-07-05T02:52:41Z"}],"graph_snapshots":[{"event_id":"sha256:bb47897cccfc9e184337378084a4b4f39a6c38a97ccd181c8b0081e50eea9a03","target":"graph","created_at":"2026-07-05T02:52:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2012.06330/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Few-shot classifiers excel under limited training samples, making them useful in applications with sparsely user-provided labels. Their unique relative prediction setup offers opportunities for novel attacks, such as targeting support sets required to categorise unseen test samples, which are not available in other machine learning setups. In this work, we propose a detection strategy to identify adversarial support sets, aimed at destroying the understanding of a few-shot classifier for a certain class. We achieve this by introducing the concept of self-similarity of a support set and by empl","authors_text":"Alexander Binder, Jiamei Sun, Ngai-Man Cheung, Penny Chong, Yi Xiang Marcus Tan, Yuval Elovici","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-12-09T14:13:41Z","title":"Detection of Adversarial Supports in Few-shot Classifiers Using Self-Similarity and Filtering"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2012.06330","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3359819cd3e122738aef26cec996b16c64a4df847bf4a733b5f5470d4603caed","target":"record","created_at":"2026-07-05T02:52:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"7cd428f1f0017e663402e924dd500f0a0be80a1440fdf361a1904d203e104c09","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-12-09T14:13:41Z","title_canon_sha256":"683ef6062f6e29f1d0bfdefae4b6c18427bee49ebfc194a4afb84ced69b4a15d"},"schema_version":"1.0","source":{"id":"2012.06330","kind":"arxiv","version":2}},"canonical_sha256":"125fced7418b7a3dadc3cd56616b4a1a95a454547f6d30bbfe78f2dae96a8549","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"125fced7418b7a3dadc3cd56616b4a1a95a454547f6d30bbfe78f2dae96a8549","first_computed_at":"2026-07-05T02:52:41.318129Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:52:41.318129Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xTFi01jKgOSpf2g8mW4HxZcoqpglz71SVIcaSo/FD2DFqFX8lIZidD2hxvfoLMwRSZ134L5XZJLb2OUIvn+iCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T02:52:41.318607Z","signed_message":"canonical_sha256_bytes"},"source_id":"2012.06330","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3359819cd3e122738aef26cec996b16c64a4df847bf4a733b5f5470d4603caed","sha256:bb47897cccfc9e184337378084a4b4f39a6c38a97ccd181c8b0081e50eea9a03"],"state_sha256":"9030dd6ec53b45c640167c8dacdf22e909f6c6330a6748ec2f4cf3ae5d732165"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NGCfEB/eh88Ry2RW+CN7oUJK0e+Vz4eNXjygNcvYuxTNAsJLuMjNymWW37XGN5GoJeCtmuVnxLi04y/BY6EkDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T04:32:53.995188Z","bundle_sha256":"07f14ba4aa5cd5120f5ea1b98c751d849a544fb9232f9bc15672a5259d53ebd1"}}