{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:DIPF7L2AGD53LVNVQONKKQ7PVY","short_pith_number":"pith:DIPF7L2A","canonical_record":{"source":{"id":"2403.17301","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-03-26T01:06:47Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dffd49ba721e2ba6d081142748ed0b3a818b2ef96f9a765df0ead61517aa56d5","abstract_canon_sha256":"e3cd70ca2c139ffb34336382ec2ae84fb6b4cf03fd9176fda1c0fc6706038a0f"},"schema_version":"1.0"},"canonical_sha256":"1a1e5faf4030fbb5d5b5839aa543efae0f5df74c6f40f952de297438faa7f84d","source":{"kind":"arxiv","id":"2403.17301","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.17301","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"arxiv_version","alias_value":"2403.17301v2","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.17301","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_12","alias_value":"DIPF7L2AGD53","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_16","alias_value":"DIPF7L2AGD53LVNV","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_8","alias_value":"DIPF7L2A","created_at":"2026-07-05T08:01:19Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:DIPF7L2AGD53LVNVQONKKQ7PVY","target":"record","payload":{"canonical_record":{"source":{"id":"2403.17301","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-03-26T01:06:47Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"dffd49ba721e2ba6d081142748ed0b3a818b2ef96f9a765df0ead61517aa56d5","abstract_canon_sha256":"e3cd70ca2c139ffb34336382ec2ae84fb6b4cf03fd9176fda1c0fc6706038a0f"},"schema_version":"1.0"},"canonical_sha256":"1a1e5faf4030fbb5d5b5839aa543efae0f5df74c6f40f952de297438faa7f84d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:01:19.815477Z","signature_b64":"wnwfTvkcK2xDYGdPiFg3GATRWd37E0kB07IXcxBolN+v+k8KUzE4wlHYLLswbRlGRz/nHIhcsB7XwWS/XKL9Aw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1a1e5faf4030fbb5d5b5839aa543efae0f5df74c6f40f952de297438faa7f84d","last_reissued_at":"2026-07-05T08:01:19.815112Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:01:19.815112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2403.17301","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3I6vi9jA6a7U8vy2mbdp4Qd/riIUB0qZuI7ze3KT7pYaBW54MaaHTc4+gmQdHWrz8/myDnyf8TyReI9+2ok5CQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:02.033097Z"},"content_sha256":"55b236895ce74740d6fa3e19537edc66fd66d31341eeeabac0d6882ba0a3aab8","schema_version":"1.0","event_id":"sha256:55b236895ce74740d6fa3e19537edc66fd66d31341eeeabac0d6882ba0a3aab8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:DIPF7L2AGD53LVNVQONKKQ7PVY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Chao Shen, Chenhao Lin, Jiahao Sun, Junhao Zheng, Qian Li, Zhengyu Zhao","submitted_at":"2024-03-26T01:06:47Z","abstract_excerpt":"Deep learning-based monocular depth estimation (MDE), extensively applied in autonomous driving, is known to be vulnerable to adversarial attacks. Previous physical attacks against MDE models rely on 2D adversarial patches, so they only affect a small, localized region in the MDE map but fail under various viewpoints. To address these limitations, we propose 3D Depth Fool (3D$^2$Fool), the first 3D texture-based adversarial attack against MDE models. 3D$^2$Fool is specifically optimized to generate 3D adversarial textures agnostic to model types of vehicles and to have improved robustness in b"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.17301","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2403.17301/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:01:19Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u/5OJ00twWinX5xvx+r156wJVGWftISmTomCN/1Z+PAkxZTaCEg47Y0UuM6NBLEkYkosqGafkmeEQ+t1u9miAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-09T18:34:02.033605Z"},"content_sha256":"438dea9ae2ef7b66a2bad985da6ddd3f34bd83ed92929c231cd14cf15b7e331c","schema_version":"1.0","event_id":"sha256:438dea9ae2ef7b66a2bad985da6ddd3f34bd83ed92929c231cd14cf15b7e331c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/bundle.json","state_url":"https://pith.science/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-09T18:34:02Z","links":{"resolver":"https://pith.science/pith/DIPF7L2AGD53LVNVQONKKQ7PVY","bundle":"https://pith.science/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/bundle.json","state":"https://pith.science/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DIPF7L2AGD53LVNVQONKKQ7PVY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:DIPF7L2AGD53LVNVQONKKQ7PVY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e3cd70ca2c139ffb34336382ec2ae84fb6b4cf03fd9176fda1c0fc6706038a0f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-03-26T01:06:47Z","title_canon_sha256":"dffd49ba721e2ba6d081142748ed0b3a818b2ef96f9a765df0ead61517aa56d5"},"schema_version":"1.0","source":{"id":"2403.17301","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2403.17301","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"arxiv_version","alias_value":"2403.17301v2","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2403.17301","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_12","alias_value":"DIPF7L2AGD53","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_16","alias_value":"DIPF7L2AGD53LVNV","created_at":"2026-07-05T08:01:19Z"},{"alias_kind":"pith_short_8","alias_value":"DIPF7L2A","created_at":"2026-07-05T08:01:19Z"}],"graph_snapshots":[{"event_id":"sha256:438dea9ae2ef7b66a2bad985da6ddd3f34bd83ed92929c231cd14cf15b7e331c","target":"graph","created_at":"2026-07-05T08:01:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2403.17301/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning-based monocular depth estimation (MDE), extensively applied in autonomous driving, is known to be vulnerable to adversarial attacks. Previous physical attacks against MDE models rely on 2D adversarial patches, so they only affect a small, localized region in the MDE map but fail under various viewpoints. To address these limitations, we propose 3D Depth Fool (3D$^2$Fool), the first 3D texture-based adversarial attack against MDE models. 3D$^2$Fool is specifically optimized to generate 3D adversarial textures agnostic to model types of vehicles and to have improved robustness in b","authors_text":"Chao Shen, Chenhao Lin, Jiahao Sun, Junhao Zheng, Qian Li, Zhengyu Zhao","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-03-26T01:06:47Z","title":"Physical 3D Adversarial Attacks against Monocular Depth Estimation in Autonomous Driving"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2403.17301","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:55b236895ce74740d6fa3e19537edc66fd66d31341eeeabac0d6882ba0a3aab8","target":"record","created_at":"2026-07-05T08:01:19Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e3cd70ca2c139ffb34336382ec2ae84fb6b4cf03fd9176fda1c0fc6706038a0f","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-03-26T01:06:47Z","title_canon_sha256":"dffd49ba721e2ba6d081142748ed0b3a818b2ef96f9a765df0ead61517aa56d5"},"schema_version":"1.0","source":{"id":"2403.17301","kind":"arxiv","version":2}},"canonical_sha256":"1a1e5faf4030fbb5d5b5839aa543efae0f5df74c6f40f952de297438faa7f84d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1a1e5faf4030fbb5d5b5839aa543efae0f5df74c6f40f952de297438faa7f84d","first_computed_at":"2026-07-05T08:01:19.815112Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:01:19.815112Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"wnwfTvkcK2xDYGdPiFg3GATRWd37E0kB07IXcxBolN+v+k8KUzE4wlHYLLswbRlGRz/nHIhcsB7XwWS/XKL9Aw==","signature_status":"signed_v1","signed_at":"2026-07-05T08:01:19.815477Z","signed_message":"canonical_sha256_bytes"},"source_id":"2403.17301","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:55b236895ce74740d6fa3e19537edc66fd66d31341eeeabac0d6882ba0a3aab8","sha256:438dea9ae2ef7b66a2bad985da6ddd3f34bd83ed92929c231cd14cf15b7e331c"],"state_sha256":"e6b655d89f43e429795397aad1ffa1fa5f541b5f38185a7296fb6290e4900242"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p9jAxd0pdiKSepV+u0Ypw6CIYr1JWcV3DVyGdWiuULY6emVW/uRl3d9wbUC06SYUuKUT30VQhPdJJHceaYFpBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-09T18:34:02.038518Z","bundle_sha256":"ecb7b56069819aeb39251ab585efee5cda345cc4761c732e9390f3b7da074880"}}