{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:CQDHIQ2BSFT3MUIJOESH5LXFRD","short_pith_number":"pith:CQDHIQ2B","schema_version":"1.0","canonical_sha256":"14067443419167b6510971247eaee588e67238fde693cd905f593c56d071c4ee","source":{"kind":"arxiv","id":"2507.06856","version":1},"attestation_state":"computed","paper":{"title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Subrat Kishore Dutta, Xiao Zhang","submitted_at":"2025-07-09T13:58:40Z","abstract_excerpt":"Despite modifying only a small localized input region, adversarial patches can drastically change the prediction of computer vision models. However, prior methods either cannot perform satisfactorily under targeted attack scenarios or fail to produce contextually coherent adversarial patches, causing them to be easily noticeable by human examiners and insufficiently stealthy against automatic patch defenses. In this paper, we introduce IAP, a novel attack framework that generates highly invisible adversarial patches based on perceptibility-aware localization and perturbation optimization schem"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2507.06856","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2025-07-09T13:58:40Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"bc4fcd12a30016223a60e455fb2bf5eb3314a6d584a693309584a69afb2e741e","abstract_canon_sha256":"a03a22a58dda383a6c913474d674782ca6a5f811d3e54eb9ee5b5d1872f8b894"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:24.183922Z","signature_b64":"Y1CML2ltoldScBuQoOmImvkyzz2yEGH5t+0dPGanNdHgg22j84oyHJFwFhMWxBf/uwSyIVKZX3cuCuxNsTtBAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"14067443419167b6510971247eaee588e67238fde693cd905f593c56d071c4ee","last_reissued_at":"2026-07-05T11:34:24.183487Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:24.183487Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"IAP: Invisible Adversarial Patch Attack through Perceptibility-Aware Localization and Perturbation Optimization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CV","authors_text":"Subrat Kishore Dutta, Xiao Zhang","submitted_at":"2025-07-09T13:58:40Z","abstract_excerpt":"Despite modifying only a small localized input region, adversarial patches can drastically change the prediction of computer vision models. However, prior methods either cannot perform satisfactorily under targeted attack scenarios or fail to produce contextually coherent adversarial patches, causing them to be easily noticeable by human examiners and insufficiently stealthy against automatic patch defenses. In this paper, we introduce IAP, a novel attack framework that generates highly invisible adversarial patches based on perceptibility-aware localization and perturbation optimization schem"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2507.06856","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2507.06856/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2507.06856","created_at":"2026-07-05T11:34:24.183546+00:00"},{"alias_kind":"arxiv_version","alias_value":"2507.06856v1","created_at":"2026-07-05T11:34:24.183546+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2507.06856","created_at":"2026-07-05T11:34:24.183546+00:00"},{"alias_kind":"pith_short_12","alias_value":"CQDHIQ2BSFT3","created_at":"2026-07-05T11:34:24.183546+00:00"},{"alias_kind":"pith_short_16","alias_value":"CQDHIQ2BSFT3MUIJ","created_at":"2026-07-05T11:34:24.183546+00:00"},{"alias_kind":"pith_short_8","alias_value":"CQDHIQ2B","created_at":"2026-07-05T11:34:24.183546+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD","json":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD.json","graph_json":"https://pith.science/api/pith-number/CQDHIQ2BSFT3MUIJOESH5LXFRD/graph.json","events_json":"https://pith.science/api/pith-number/CQDHIQ2BSFT3MUIJOESH5LXFRD/events.json","paper":"https://pith.science/paper/CQDHIQ2B"},"agent_actions":{"view_html":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD","download_json":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD.json","view_paper":"https://pith.science/paper/CQDHIQ2B","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2507.06856&json=true","fetch_graph":"https://pith.science/api/pith-number/CQDHIQ2BSFT3MUIJOESH5LXFRD/graph.json","fetch_events":"https://pith.science/api/pith-number/CQDHIQ2BSFT3MUIJOESH5LXFRD/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD/action/timestamp_anchor","attest_storage":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD/action/storage_attestation","attest_author":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD/action/author_attestation","sign_citation":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD/action/citation_signature","submit_replication":"https://pith.science/pith/CQDHIQ2BSFT3MUIJOESH5LXFRD/action/replication_record"}},"created_at":"2026-07-05T11:34:24.183546+00:00","updated_at":"2026-07-05T11:34:24.183546+00:00"}