{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:EBQBOM4QXDRQSHZ2YSER7KIRAM","short_pith_number":"pith:EBQBOM4Q","canonical_record":{"source":{"id":"1904.04433","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-09T02:45:35Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"dba6bdedd616df5c68197669d324a158ea42223050168dfb64862d1a314f522b","abstract_canon_sha256":"da62908c7168d2038182067d4c848cdc7c7d1613be44e8efdac8afc94b4f4716"},"schema_version":"1.0"},"canonical_sha256":"2060173390b8e3091f3ac4891fa911030e3f38b862dc8b52c5b4c307d5604536","source":{"kind":"arxiv","id":"1904.04433","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.04433","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"1904.04433v1","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.04433","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"EBQBOM4QXDRQ","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"EBQBOM4QXDRQSHZ2","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"EBQBOM4Q","created_at":"2026-05-18T12:33:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:EBQBOM4QXDRQSHZ2YSER7KIRAM","target":"record","payload":{"canonical_record":{"source":{"id":"1904.04433","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-09T02:45:35Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"dba6bdedd616df5c68197669d324a158ea42223050168dfb64862d1a314f522b","abstract_canon_sha256":"da62908c7168d2038182067d4c848cdc7c7d1613be44e8efdac8afc94b4f4716"},"schema_version":"1.0"},"canonical_sha256":"2060173390b8e3091f3ac4891fa911030e3f38b862dc8b52c5b4c307d5604536","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:48:59.020537Z","signature_b64":"9tbH8GvipiHo7QIUUP19KAW89zRvz/h58rr1l5Ok4ES3y7eDMyGQ/nHWOQ/SUnew56+tHwmECzNH74jDQal4Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2060173390b8e3091f3ac4891fa911030e3f38b862dc8b52c5b4c307d5604536","last_reissued_at":"2026-05-17T23:48:59.020125Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:48:59.020125Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1904.04433","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WRM8IjWcelWah/tcB86bmVTV2LLVrJTTLz5tQPvb50U9HTOKgRB3tET28l+G1/LlbXwhzJJOxl+aPfCQCpLPDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T08:38:21.709147Z"},"content_sha256":"66a1632d4c92b9381f16f01828a62b6fb2b80494296aa0353bb477c5eb913fad","schema_version":"1.0","event_id":"sha256:66a1632d4c92b9381f16f01828a62b6fb2b80494296aa0353bb477c5eb913fad"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:EBQBOM4QXDRQSHZ2YSER7KIRAM","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Baoyuan Wu, Hang Su, Jun Zhu, Tong Zhang, Wei Liu, Yinpeng Dong, ZhiFeng Li","submitted_at":"2019-04-09T02:45:35Z","abstract_excerpt":"Face recognition has obtained remarkable progress in recent years due to the great improvement of deep convolutional neural networks (CNNs). However, deep CNNs are vulnerable to adversarial examples, which can cause fateful consequences in real-world face recognition applications with security-sensitive purposes. Adversarial attacks are widely studied as they can identify the vulnerability of the models before they are deployed. In this paper, we evaluate the robustness of state-of-the-art face recognition models in the decision-based black-box attack setting, where the attackers have no acces"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.04433","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:48:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u3X5xkOPwISA/92HvmgTTKtTU5c5s12rlyQrTmTsaG6XEOSCfL56Nrf1/86ZGioPTALbqOx7Cik5Hd1BnQYuBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T08:38:21.709944Z"},"content_sha256":"d739511008489d899ce076f6a01b7bd23a03efe45bf256dd57f0bff8f7a08fbd","schema_version":"1.0","event_id":"sha256:d739511008489d899ce076f6a01b7bd23a03efe45bf256dd57f0bff8f7a08fbd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/bundle.json","state_url":"https://pith.science/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T08:38:21Z","links":{"resolver":"https://pith.science/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM","bundle":"https://pith.science/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/bundle.json","state":"https://pith.science/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EBQBOM4QXDRQSHZ2YSER7KIRAM/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:EBQBOM4QXDRQSHZ2YSER7KIRAM","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"da62908c7168d2038182067d4c848cdc7c7d1613be44e8efdac8afc94b4f4716","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-09T02:45:35Z","title_canon_sha256":"dba6bdedd616df5c68197669d324a158ea42223050168dfb64862d1a314f522b"},"schema_version":"1.0","source":{"id":"1904.04433","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1904.04433","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"arxiv_version","alias_value":"1904.04433v1","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1904.04433","created_at":"2026-05-17T23:48:59Z"},{"alias_kind":"pith_short_12","alias_value":"EBQBOM4QXDRQ","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_16","alias_value":"EBQBOM4QXDRQSHZ2","created_at":"2026-05-18T12:33:15Z"},{"alias_kind":"pith_short_8","alias_value":"EBQBOM4Q","created_at":"2026-05-18T12:33:15Z"}],"graph_snapshots":[{"event_id":"sha256:d739511008489d899ce076f6a01b7bd23a03efe45bf256dd57f0bff8f7a08fbd","target":"graph","created_at":"2026-05-17T23:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Face recognition has obtained remarkable progress in recent years due to the great improvement of deep convolutional neural networks (CNNs). However, deep CNNs are vulnerable to adversarial examples, which can cause fateful consequences in real-world face recognition applications with security-sensitive purposes. Adversarial attacks are widely studied as they can identify the vulnerability of the models before they are deployed. In this paper, we evaluate the robustness of state-of-the-art face recognition models in the decision-based black-box attack setting, where the attackers have no acces","authors_text":"Baoyuan Wu, Hang Su, Jun Zhu, Tong Zhang, Wei Liu, Yinpeng Dong, ZhiFeng Li","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-09T02:45:35Z","title":"Efficient Decision-based Black-box Adversarial Attacks on Face Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1904.04433","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:66a1632d4c92b9381f16f01828a62b6fb2b80494296aa0353bb477c5eb913fad","target":"record","created_at":"2026-05-17T23:48:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"da62908c7168d2038182067d4c848cdc7c7d1613be44e8efdac8afc94b4f4716","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-04-09T02:45:35Z","title_canon_sha256":"dba6bdedd616df5c68197669d324a158ea42223050168dfb64862d1a314f522b"},"schema_version":"1.0","source":{"id":"1904.04433","kind":"arxiv","version":1}},"canonical_sha256":"2060173390b8e3091f3ac4891fa911030e3f38b862dc8b52c5b4c307d5604536","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2060173390b8e3091f3ac4891fa911030e3f38b862dc8b52c5b4c307d5604536","first_computed_at":"2026-05-17T23:48:59.020125Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:48:59.020125Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"9tbH8GvipiHo7QIUUP19KAW89zRvz/h58rr1l5Ok4ES3y7eDMyGQ/nHWOQ/SUnew56+tHwmECzNH74jDQal4Cw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:48:59.020537Z","signed_message":"canonical_sha256_bytes"},"source_id":"1904.04433","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:66a1632d4c92b9381f16f01828a62b6fb2b80494296aa0353bb477c5eb913fad","sha256:d739511008489d899ce076f6a01b7bd23a03efe45bf256dd57f0bff8f7a08fbd"],"state_sha256":"436b93bda68e02109402f346bd1c06f4009ccb283b5675c8bce2c6a1bdccd6e3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"sRqeBQM1p5ZmVEPsDz9hVmtm1eOSlKXAOXWU0DrzDew+LoYuPCKGpczJv5prjSwGZJFx0XCbi+yCLOZ7+tAjBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T08:38:21.713708Z","bundle_sha256":"894353472dfbc081838f7e8def231617a8adc76578025b5598f26757f7c442f9"}}