{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:DV6OVDV5PFL23R3NTPTNCKJMDH","short_pith_number":"pith:DV6OVDV5","canonical_record":{"source":{"id":"1907.10901","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-07-25T08:51:08Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"6807ba755c2797cf6d34512507eddbb4db1e7c339501241a3eeeb425c3bdb6a9","abstract_canon_sha256":"63315bb33e73b5bb4d02c5fe4e2e0915eff721447649da2f6d540a7b56867fcd"},"schema_version":"1.0"},"canonical_sha256":"1d7cea8ebd7957adc76d9be6d1292c19e769ca66f108fa90d9a1ef76af89868d","source":{"kind":"arxiv","id":"1907.10901","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.10901","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"arxiv_version","alias_value":"1907.10901v2","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.10901","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_12","alias_value":"DV6OVDV5PFL2","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_16","alias_value":"DV6OVDV5PFL23R3N","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_8","alias_value":"DV6OVDV5","created_at":"2026-07-04T23:57:51Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:DV6OVDV5PFL23R3NTPTNCKJMDH","target":"record","payload":{"canonical_record":{"source":{"id":"1907.10901","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-07-25T08:51:08Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"6807ba755c2797cf6d34512507eddbb4db1e7c339501241a3eeeb425c3bdb6a9","abstract_canon_sha256":"63315bb33e73b5bb4d02c5fe4e2e0915eff721447649da2f6d540a7b56867fcd"},"schema_version":"1.0"},"canonical_sha256":"1d7cea8ebd7957adc76d9be6d1292c19e769ca66f108fa90d9a1ef76af89868d","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-04T23:57:51.180266Z","signature_b64":"/ZlFa1lx57x82YXI6PxSX2F3/lLv0VMMpDXTF0FIJSPxxFrg607NLVrAb/sIpH0/NVTp3C1dLY0wEpLcP/jrCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"1d7cea8ebd7957adc76d9be6d1292c19e769ca66f108fa90d9a1ef76af89868d","last_reissued_at":"2026-07-04T23:57:51.179779Z","signature_status":"signed_v1","first_computed_at":"2026-07-04T23:57:51.179779Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1907.10901","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:57:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Wmnn3HQ3wgbrnNR8tcK/qeRC1bkTiy6WGsC77ygj/h8K23Hlz74ogYi6PymI9ZJry6RfaQ1rl9MMxFMtq/T6BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:26:43.266985Z"},"content_sha256":"b0a8c11ae258cb4e79aeb2c3f891be47c098b6cbcaa0efce27907efb684c9bc6","schema_version":"1.0","event_id":"sha256:b0a8c11ae258cb4e79aeb2c3f891be47c098b6cbcaa0efce27907efb684c9bc6"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:DV6OVDV5PFL23R3NTPTNCKJMDH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"How to Manipulate CNNs to Make Them Lie: the GradCAM Case","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Elmar Eisemann, Marco Loog, Tom Viering, Ziqi Wang","submitted_at":"2019-07-25T08:51:08Z","abstract_excerpt":"Recently many methods have been introduced to explain CNN decisions. However, it has been shown that some methods can be sensitive to manipulation of the input. We continue this line of work and investigate the explanation method GradCAM. Instead of manipulating the input, we consider an adversary that manipulates the model itself to attack the explanation. By changing weights and architecture, we demonstrate that it is possible to generate any desired explanation, while leaving the model's accuracy essentially unchanged. This illustrates that GradCAM cannot explain the decision of every CNN a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.10901","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1907.10901/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-04T23:57:51Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Co/BtEZYCrGbOx1VwvSALMb3HaUIOXQBT3IJaQ0FJ/mXUtj3E53Yi3c8P9oifaYiwx5ETHEej9m15Qs3P3SEAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-04T20:26:43.267493Z"},"content_sha256":"63684686b3b72a1187844357a1d5df3770c1dee22569008fc86c880dbac39599","schema_version":"1.0","event_id":"sha256:63684686b3b72a1187844357a1d5df3770c1dee22569008fc86c880dbac39599"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/bundle.json","state_url":"https://pith.science/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-04T20:26:43Z","links":{"resolver":"https://pith.science/pith/DV6OVDV5PFL23R3NTPTNCKJMDH","bundle":"https://pith.science/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/bundle.json","state":"https://pith.science/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/DV6OVDV5PFL23R3NTPTNCKJMDH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:DV6OVDV5PFL23R3NTPTNCKJMDH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"63315bb33e73b5bb4d02c5fe4e2e0915eff721447649da2f6d540a7b56867fcd","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-07-25T08:51:08Z","title_canon_sha256":"6807ba755c2797cf6d34512507eddbb4db1e7c339501241a3eeeb425c3bdb6a9"},"schema_version":"1.0","source":{"id":"1907.10901","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1907.10901","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"arxiv_version","alias_value":"1907.10901v2","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1907.10901","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_12","alias_value":"DV6OVDV5PFL2","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_16","alias_value":"DV6OVDV5PFL23R3N","created_at":"2026-07-04T23:57:51Z"},{"alias_kind":"pith_short_8","alias_value":"DV6OVDV5","created_at":"2026-07-04T23:57:51Z"}],"graph_snapshots":[{"event_id":"sha256:63684686b3b72a1187844357a1d5df3770c1dee22569008fc86c880dbac39599","target":"graph","created_at":"2026-07-04T23:57:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1907.10901/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recently many methods have been introduced to explain CNN decisions. However, it has been shown that some methods can be sensitive to manipulation of the input. We continue this line of work and investigate the explanation method GradCAM. Instead of manipulating the input, we consider an adversary that manipulates the model itself to attack the explanation. By changing weights and architecture, we demonstrate that it is possible to generate any desired explanation, while leaving the model's accuracy essentially unchanged. This illustrates that GradCAM cannot explain the decision of every CNN a","authors_text":"Elmar Eisemann, Marco Loog, Tom Viering, Ziqi Wang","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-07-25T08:51:08Z","title":"How to Manipulate CNNs to Make Them Lie: the GradCAM Case"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1907.10901","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b0a8c11ae258cb4e79aeb2c3f891be47c098b6cbcaa0efce27907efb684c9bc6","target":"record","created_at":"2026-07-04T23:57:51Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"63315bb33e73b5bb4d02c5fe4e2e0915eff721447649da2f6d540a7b56867fcd","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-07-25T08:51:08Z","title_canon_sha256":"6807ba755c2797cf6d34512507eddbb4db1e7c339501241a3eeeb425c3bdb6a9"},"schema_version":"1.0","source":{"id":"1907.10901","kind":"arxiv","version":2}},"canonical_sha256":"1d7cea8ebd7957adc76d9be6d1292c19e769ca66f108fa90d9a1ef76af89868d","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"1d7cea8ebd7957adc76d9be6d1292c19e769ca66f108fa90d9a1ef76af89868d","first_computed_at":"2026-07-04T23:57:51.179779Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-04T23:57:51.179779Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"/ZlFa1lx57x82YXI6PxSX2F3/lLv0VMMpDXTF0FIJSPxxFrg607NLVrAb/sIpH0/NVTp3C1dLY0wEpLcP/jrCg==","signature_status":"signed_v1","signed_at":"2026-07-04T23:57:51.180266Z","signed_message":"canonical_sha256_bytes"},"source_id":"1907.10901","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b0a8c11ae258cb4e79aeb2c3f891be47c098b6cbcaa0efce27907efb684c9bc6","sha256:63684686b3b72a1187844357a1d5df3770c1dee22569008fc86c880dbac39599"],"state_sha256":"bc67af891e395105c8b6f9191a86fb127515aa18bf6d6b2d0d94dd2436e5a90c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"NE+Cbm3Af4gCShYtOjm71N5XyoxqEWgV4p4XZecTj+UQ6Vbq0yz+XVk9iM+y1zBQKk2db37oQ8Ej9m5nbUTuAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-04T20:26:43.271416Z","bundle_sha256":"76409164db17cdd5aa2778d4938a9ce4ea4cfedfa08b4ba547bc775af8685dff"}}