{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:D6YXJF3MJ4SXH5M26RYCE4K6SM","short_pith_number":"pith:D6YXJF3M","canonical_record":{"source":{"id":"1910.07067","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-15T21:49:56Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"279ba1cb414b0b67e3263e88674374d92c39dbe06abeb137d845a637fe0c10c1","abstract_canon_sha256":"d6ca4ce397fc3652c132ac074cdea4acda841fe17eb0d497e913131c01c1073b"},"schema_version":"1.0"},"canonical_sha256":"1fb174976c4f2573f59af47022715e932351f8fa0bdf527ff3292624c84d5b13","source":{"kind":"arxiv","id":"1910.07067","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.07067","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"arxiv_version","alias_value":"1910.07067v3","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.07067","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_12","alias_value":"D6YXJF3MJ4SX","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_16","alias_value":"D6YXJF3MJ4SXH5M2","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_8","alias_value":"D6YXJF3M","created_at":"2026-07-05T01:49:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:D6YXJF3MJ4SXH5M26RYCE4K6SM","target":"record","payload":{"canonical_record":{"source":{"id":"1910.07067","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-15T21:49:56Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"279ba1cb414b0b67e3263e88674374d92c39dbe06abeb137d845a637fe0c10c1","abstract_canon_sha256":"d6ca4ce397fc3652c132ac074cdea4acda841fe17eb0d497e913131c01c1073b"},"schema_version":"1.0"},"canonical_sha256":"1fb174976c4f2573f59af47022715e932351f8fa0bdf527ff3292624c84d5b13","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:49:14.202871Z","signature_b64":"Ip+qGoc4ykMN+pZgPqjd6yvwwnxV33sA1i1MDG6kKiflHAWVCEntoE7QfPFMz5ESyJYbRMCl1LqY6FkrT9hhDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1fb174976c4f2573f59af47022715e932351f8fa0bdf527ff3292624c84d5b13","last_reissued_at":"2026-07-05T01:49:14.202413Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:49:14.202413Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1910.07067","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:49:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"deQmtFy/wxm/nO9eeGhtp8Q8c8A1XlPpbZNRO1zzLDimoqbcEPSML4aABH887/NYk2kUrAI3WEYtfWS/jhnJDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:41:47.899587Z"},"content_sha256":"eeae1edaafde9e436706db995f83d0fe33546d71a24a57327263c0c0b898df08","schema_version":"1.0","event_id":"sha256:eeae1edaafde9e436706db995f83d0fe33546d71a24a57327263c0c0b898df08"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:D6YXJF3MJ4SXH5M26RYCE4K6SM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Aleksandr Petiushko, Edgar Kaziakhmedov, Grigorii Melnikov, Klim Kireev, Mikhail Pautov","submitted_at":"2019-10-15T21:49:56Z","abstract_excerpt":"Recent works showed the vulnerability of image classifiers to adversarial attacks in the digital domain. However, the majority of attacks involve adding small perturbation to an image to fool the classifier. Unfortunately, such procedures can not be used to conduct a real-world attack, where adding an adversarial attribute to the photo is a more practical approach. In this paper, we study the problem of real-world attacks on face recognition systems. We examine security of one of the best public face recognition systems, LResNet100E-IR with ArcFace loss, and propose a simple method to attack i"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.07067","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1910.07067/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:49:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3MFGJyPA/haSD3DasDMqFY4Bxt+DgHgjqbf7V0ca9TGRJe2KipwBAr43gqllZanQpgEctLa6SUAfzoUfSjxwBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-07T13:41:47.899957Z"},"content_sha256":"d09b5752f796fabfc2c17d501de869150452f7d2aa9108704513f389de556a17","schema_version":"1.0","event_id":"sha256:d09b5752f796fabfc2c17d501de869150452f7d2aa9108704513f389de556a17"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/bundle.json","state_url":"https://pith.science/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-07T13:41:47Z","links":{"resolver":"https://pith.science/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM","bundle":"https://pith.science/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/bundle.json","state":"https://pith.science/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/D6YXJF3MJ4SXH5M26RYCE4K6SM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:D6YXJF3MJ4SXH5M26RYCE4K6SM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d6ca4ce397fc3652c132ac074cdea4acda841fe17eb0d497e913131c01c1073b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-15T21:49:56Z","title_canon_sha256":"279ba1cb414b0b67e3263e88674374d92c39dbe06abeb137d845a637fe0c10c1"},"schema_version":"1.0","source":{"id":"1910.07067","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.07067","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"arxiv_version","alias_value":"1910.07067v3","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.07067","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_12","alias_value":"D6YXJF3MJ4SX","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_16","alias_value":"D6YXJF3MJ4SXH5M2","created_at":"2026-07-05T01:49:14Z"},{"alias_kind":"pith_short_8","alias_value":"D6YXJF3M","created_at":"2026-07-05T01:49:14Z"}],"graph_snapshots":[{"event_id":"sha256:d09b5752f796fabfc2c17d501de869150452f7d2aa9108704513f389de556a17","target":"graph","created_at":"2026-07-05T01:49:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.07067/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent works showed the vulnerability of image classifiers to adversarial attacks in the digital domain. However, the majority of attacks involve adding small perturbation to an image to fool the classifier. Unfortunately, such procedures can not be used to conduct a real-world attack, where adding an adversarial attribute to the photo is a more practical approach. In this paper, we study the problem of real-world attacks on face recognition systems. We examine security of one of the best public face recognition systems, LResNet100E-IR with ArcFace loss, and propose a simple method to attack i","authors_text":"Aleksandr Petiushko, Edgar Kaziakhmedov, Grigorii Melnikov, Klim Kireev, Mikhail Pautov","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-15T21:49:56Z","title":"On adversarial patches: real-world attack on ArcFace-100 face recognition system"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.07067","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:eeae1edaafde9e436706db995f83d0fe33546d71a24a57327263c0c0b898df08","target":"record","created_at":"2026-07-05T01:49:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d6ca4ce397fc3652c132ac074cdea4acda841fe17eb0d497e913131c01c1073b","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-15T21:49:56Z","title_canon_sha256":"279ba1cb414b0b67e3263e88674374d92c39dbe06abeb137d845a637fe0c10c1"},"schema_version":"1.0","source":{"id":"1910.07067","kind":"arxiv","version":3}},"canonical_sha256":"1fb174976c4f2573f59af47022715e932351f8fa0bdf527ff3292624c84d5b13","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1fb174976c4f2573f59af47022715e932351f8fa0bdf527ff3292624c84d5b13","first_computed_at":"2026-07-05T01:49:14.202413Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:49:14.202413Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Ip+qGoc4ykMN+pZgPqjd6yvwwnxV33sA1i1MDG6kKiflHAWVCEntoE7QfPFMz5ESyJYbRMCl1LqY6FkrT9hhDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:49:14.202871Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.07067","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:eeae1edaafde9e436706db995f83d0fe33546d71a24a57327263c0c0b898df08","sha256:d09b5752f796fabfc2c17d501de869150452f7d2aa9108704513f389de556a17"],"state_sha256":"db8c4f6b5f44adbbbc839dfba81273b985fa71e8439bf3419bb72d88b66c1ed3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OTRDIBZmX13kufwydMkoAHSCEYeZy/oT3XUe8Qa+B46PTYlkaqyawFzK1KCndyrSsoexnVc+MZtA48VQ8HnLCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-07T13:41:47.901837Z","bundle_sha256":"d4799094fad8209bd91313d548291063af295e685e2dc7aa422946a6bc870b35"}}