{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:D6R2VYYZXHQ422BAA3OZKRXNHD","short_pith_number":"pith:D6R2VYYZ","canonical_record":{"source":{"id":"2303.09731","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-17T02:20:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"38c0fd6dc0356546eaece7984f91a5045e529d4489a4cd29a7e691369333b35d","abstract_canon_sha256":"123423e1afeaf8995cf36657861e894c309d476d83021a4bac08796baaa1ad5f"},"schema_version":"1.0"},"canonical_sha256":"1fa3aae319b9e1cd682006dd9546ed38c054ad39654809beac46dd4f29cf4bbb","source":{"kind":"arxiv","id":"2303.09731","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.09731","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"arxiv_version","alias_value":"2303.09731v1","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.09731","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_12","alias_value":"D6R2VYYZXHQ4","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_16","alias_value":"D6R2VYYZXHQ422BA","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_8","alias_value":"D6R2VYYZ","created_at":"2026-07-05T05:52:00Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:D6R2VYYZXHQ422BAA3OZKRXNHD","target":"record","payload":{"canonical_record":{"source":{"id":"2303.09731","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-17T02:20:47Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"38c0fd6dc0356546eaece7984f91a5045e529d4489a4cd29a7e691369333b35d","abstract_canon_sha256":"123423e1afeaf8995cf36657861e894c309d476d83021a4bac08796baaa1ad5f"},"schema_version":"1.0"},"canonical_sha256":"1fa3aae319b9e1cd682006dd9546ed38c054ad39654809beac46dd4f29cf4bbb","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T05:52:00.157453Z","signature_b64":"Xa+41aIN3eiCa4paldG0/aw7zFkDWNM6Ql+sp70lMj6pyQBpEqSTFudyWRb0j6Eqrt9Mv66Avu0uSTFztigrAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1fa3aae319b9e1cd682006dd9546ed38c054ad39654809beac46dd4f29cf4bbb","last_reissued_at":"2026-07-05T05:52:00.157006Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T05:52:00.157006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.09731","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:52:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gxJKRGEACEwB3TCp4DoX2B+DGyvO3KOCFmG2zRwlqInmwkKcQSlOg1482YFXvpUAvtUD8XUbt3epzqoMOLAHAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:02:58.088489Z"},"content_sha256":"6de5def0d46888fee42d4a8feff9456210681255d70e1d3f38681f9568b9925d","schema_version":"1.0","event_id":"sha256:6de5def0d46888fee42d4a8feff9456210681255d70e1d3f38681f9568b9925d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:D6R2VYYZXHQ422BAA3OZKRXNHD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks","license":"http://creativecommons.org/publicdomain/zero/1.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.CR","authors_text":"Jiarun Dai, Min Yang, Mi Zhang, Qifan Xiao, Xudong Pan, Yifan Lu","submitted_at":"2023-03-17T02:20:47Z","abstract_excerpt":"Automated driving systems rely on 3D object detectors to recognize possible obstacles from LiDAR point clouds. However, recent works show the adversary can forge non-existent cars in the prediction results with a few fake points (i.e., appearing attack). By removing statistical outliers, existing defenses are however designed for specific attacks or biased by predefined heuristic rules. Towards more comprehensive mitigation, we first systematically inspect the mechanism of recent appearing attacks: Their common weaknesses are observed in crafting fake obstacles which (i) have obvious differenc"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.09731","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.09731/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T05:52:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PiNjFu95/uUqQP5BRXzVTZO34AA4GBSaEiI8Xokn1HrzWqLwAHvCALv9HSBvoW2PZmggQy6lwV5V5qZqVt07DQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T12:02:58.089075Z"},"content_sha256":"2a072d708090e3237706762b6b6f63e0b7b372b3da984e627025ec2fb7af14a8","schema_version":"1.0","event_id":"sha256:2a072d708090e3237706762b6b6f63e0b7b372b3da984e627025ec2fb7af14a8"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/bundle.json","state_url":"https://pith.science/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T12:02:58Z","links":{"resolver":"https://pith.science/pith/D6R2VYYZXHQ422BAA3OZKRXNHD","bundle":"https://pith.science/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/bundle.json","state":"https://pith.science/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D6R2VYYZXHQ422BAA3OZKRXNHD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:D6R2VYYZXHQ422BAA3OZKRXNHD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"123423e1afeaf8995cf36657861e894c309d476d83021a4bac08796baaa1ad5f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-17T02:20:47Z","title_canon_sha256":"38c0fd6dc0356546eaece7984f91a5045e529d4489a4cd29a7e691369333b35d"},"schema_version":"1.0","source":{"id":"2303.09731","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.09731","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"arxiv_version","alias_value":"2303.09731v1","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.09731","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_12","alias_value":"D6R2VYYZXHQ4","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_16","alias_value":"D6R2VYYZXHQ422BA","created_at":"2026-07-05T05:52:00Z"},{"alias_kind":"pith_short_8","alias_value":"D6R2VYYZ","created_at":"2026-07-05T05:52:00Z"}],"graph_snapshots":[{"event_id":"sha256:2a072d708090e3237706762b6b6f63e0b7b372b3da984e627025ec2fb7af14a8","target":"graph","created_at":"2026-07-05T05:52:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.09731/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Automated driving systems rely on 3D object detectors to recognize possible obstacles from LiDAR point clouds. However, recent works show the adversary can forge non-existent cars in the prediction results with a few fake points (i.e., appearing attack). By removing statistical outliers, existing defenses are however designed for specific attacks or biased by predefined heuristic rules. Towards more comprehensive mitigation, we first systematically inspect the mechanism of recent appearing attacks: Their common weaknesses are observed in crafting fake obstacles which (i) have obvious differenc","authors_text":"Jiarun Dai, Min Yang, Mi Zhang, Qifan Xiao, Xudong Pan, Yifan Lu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-17T02:20:47Z","title":"Exorcising ''Wraith'': Protecting LiDAR-based Object Detector in Automated Driving System from Appearing Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.09731","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6de5def0d46888fee42d4a8feff9456210681255d70e1d3f38681f9568b9925d","target":"record","created_at":"2026-07-05T05:52:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"123423e1afeaf8995cf36657861e894c309d476d83021a4bac08796baaa1ad5f","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/publicdomain/zero/1.0/","primary_cat":"cs.CR","submitted_at":"2023-03-17T02:20:47Z","title_canon_sha256":"38c0fd6dc0356546eaece7984f91a5045e529d4489a4cd29a7e691369333b35d"},"schema_version":"1.0","source":{"id":"2303.09731","kind":"arxiv","version":1}},"canonical_sha256":"1fa3aae319b9e1cd682006dd9546ed38c054ad39654809beac46dd4f29cf4bbb","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1fa3aae319b9e1cd682006dd9546ed38c054ad39654809beac46dd4f29cf4bbb","first_computed_at":"2026-07-05T05:52:00.157006Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T05:52:00.157006Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Xa+41aIN3eiCa4paldG0/aw7zFkDWNM6Ql+sp70lMj6pyQBpEqSTFudyWRb0j6Eqrt9Mv66Avu0uSTFztigrAA==","signature_status":"signed_v1","signed_at":"2026-07-05T05:52:00.157453Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.09731","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6de5def0d46888fee42d4a8feff9456210681255d70e1d3f38681f9568b9925d","sha256:2a072d708090e3237706762b6b6f63e0b7b372b3da984e627025ec2fb7af14a8"],"state_sha256":"945679e39e9e31746434eed44661137573b1aa240f5fb9fe61e7e4a27f57ab7c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fZjyNdbqqpI8eoVgQjqxlm9ogj631EgOPGM/gCdqXPGF0RsrBTfzSDcwO4yF4i3vmh9vRWQAluqNYm8kWk+JBA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T12:02:58.093086Z","bundle_sha256":"f5de3ad1b85778e26ffaefb3f180592b5384f5c0edd6ea47d49f2cf8c2691b0f"}}