{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:DTP2BIGBHFKOIM47AVF3UDEDVH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"834b642ea352d783b42481192fa814403dca10ab70d5864e8020388a1703a371","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-14T06:27:14Z","title_canon_sha256":"433e93f57421d762fa200284280f031b47aa36850388d28e151707654a5d68a1"},"schema_version":"1.0","source":{"id":"2109.06467","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2109.06467","created_at":"2026-07-05T03:13:54Z"},{"alias_kind":"arxiv_version","alias_value":"2109.06467v1","created_at":"2026-07-05T03:13:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2109.06467","created_at":"2026-07-05T03:13:54Z"},{"alias_kind":"pith_short_12","alias_value":"DTP2BIGBHFKO","created_at":"2026-07-05T03:13:54Z"},{"alias_kind":"pith_short_16","alias_value":"DTP2BIGBHFKOIM47","created_at":"2026-07-05T03:13:54Z"},{"alias_kind":"pith_short_8","alias_value":"DTP2BIGB","created_at":"2026-07-05T03:13:54Z"}],"graph_snapshots":[{"event_id":"sha256:39eae27dded91b4482ab4e900d8eac2a9cde6f8ec9bfc7df13671a80416649a8","target":"graph","created_at":"2026-07-05T03:13:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2109.06467/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning face recognition models are used by state-of-the-art surveillance systems to identify individuals passing through public areas (e.g., airports). Previous studies have demonstrated the use of adversarial machine learning (AML) attacks to successfully evade identification by such systems, both in the digital and physical domains. Attacks in the physical domain, however, require significant manipulation to the human participant's face, which can raise suspicion by human observers (e.g. airport security officers). In this study, we present a novel black-box AML attack which carefully","authors_text":"Asaf Shabtai, Inderjeet Singh, Nitzan Guetta, Satoru Momiyama, Yuval Elovici","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-14T06:27:14Z","title":"Dodging Attack Using Carefully Crafted Natural Makeup"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2109.06467","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6110b87f1703a7fcc8a14efc16c2709d34cbc077a90039ecaebc60987d983a03","target":"record","created_at":"2026-07-05T03:13:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"834b642ea352d783b42481192fa814403dca10ab70d5864e8020388a1703a371","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-09-14T06:27:14Z","title_canon_sha256":"433e93f57421d762fa200284280f031b47aa36850388d28e151707654a5d68a1"},"schema_version":"1.0","source":{"id":"2109.06467","kind":"arxiv","version":1}},"canonical_sha256":"1cdfa0a0c13954e4339f054bba0c83a9ec006fc3b826457542b92084c603ba4e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1cdfa0a0c13954e4339f054bba0c83a9ec006fc3b826457542b92084c603ba4e","first_computed_at":"2026-07-05T03:13:54.658495Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:13:54.658495Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NfHojwo1JbFWsXqs84P76H4K+gdCJ+QdNx0LCsAju4C+KqmvxmAMjyQ+d+/LByoEpa9cDf64/qhz4IeJVeiaDA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:13:54.658905Z","signed_message":"canonical_sha256_bytes"},"source_id":"2109.06467","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6110b87f1703a7fcc8a14efc16c2709d34cbc077a90039ecaebc60987d983a03","sha256:39eae27dded91b4482ab4e900d8eac2a9cde6f8ec9bfc7df13671a80416649a8"],"state_sha256":"40f8d25a2bf5f3dde32012180330fdb800de512a19d5bc0bce515046e6982c3a"}