{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:EXH4ADSNJF3NZZOOJE7NZH4CHB","short_pith_number":"pith:EXH4ADSN","canonical_record":{"source":{"id":"2306.15705","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-27T02:54:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b9ebef5a452d14289bc286ce945efbd27476235385eaa0364be5c366fad9f4bd","abstract_canon_sha256":"a3d082ccd5bd87e0b678396aff8aadcbe0a189d38b559eadc01a4be7dda500ad"},"schema_version":"1.0"},"canonical_sha256":"25cfc00e4d4976dce5ce493edc9f82386a8623bac36f7ace47edcd5eceffac78","source":{"kind":"arxiv","id":"2306.15705","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.15705","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"arxiv_version","alias_value":"2306.15705v1","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.15705","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_12","alias_value":"EXH4ADSNJF3N","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_16","alias_value":"EXH4ADSNJF3NZZOO","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_8","alias_value":"EXH4ADSN","created_at":"2026-07-05T06:25:43Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:EXH4ADSNJF3NZZOOJE7NZH4CHB","target":"record","payload":{"canonical_record":{"source":{"id":"2306.15705","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-27T02:54:07Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"b9ebef5a452d14289bc286ce945efbd27476235385eaa0364be5c366fad9f4bd","abstract_canon_sha256":"a3d082ccd5bd87e0b678396aff8aadcbe0a189d38b559eadc01a4be7dda500ad"},"schema_version":"1.0"},"canonical_sha256":"25cfc00e4d4976dce5ce493edc9f82386a8623bac36f7ace47edcd5eceffac78","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:25:43.479920Z","signature_b64":"PBQywys03I0P1bJkvV/uqIkcS/iAbSf+riNovISN+m9xUp4cTckxc2YVtjqAXFksJOCJC/XiVUP6ZiBAz//CDw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"25cfc00e4d4976dce5ce493edc9f82386a8623bac36f7ace47edcd5eceffac78","last_reissued_at":"2026-07-05T06:25:43.479514Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:25:43.479514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2306.15705","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:25:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"k1vMRS+U6G2IcVAEHV8IlJH81uIP/B0MeVsJMffRtKPNEi+lwFBvUnYA+8TuFNEEYcoiTVKRNunWqgDgkULkDw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:28:19.553682Z"},"content_sha256":"cf6186312bec6774c67bcfd43a59b553a6bef8099ddae4df8fc20b6165c1196f","schema_version":"1.0","event_id":"sha256:cf6186312bec6774c67bcfd43a59b553a6bef8099ddae4df8fc20b6165c1196f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:EXH4ADSNJF3NZZOOJE7NZH4CHB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection","license":"http://creativecommons.org/licenses/by-sa/4.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CL","authors_text":"Jin Ma, Qi Zhang, Shihan Dou, Songyang Gao, Xuanjing Huang, Ying Shan","submitted_at":"2023-06-27T02:54:07Z","abstract_excerpt":"Detecting adversarial samples that are carefully crafted to fool the model is a critical step to socially-secure applications. However, existing adversarial detection methods require access to sufficient training data, which brings noteworthy concerns regarding privacy leakage and generalizability. In this work, we validate that the adversarial sample generated by attack algorithms is strongly related to a specific vector in the high-dimensional inputs. Such vectors, namely UAPs (Universal Adversarial Perturbations), can be calculated without original training data. Based on this discovery, we"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.15705","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2306.15705/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:25:43Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Vqn7oj3W06lFd5r+FdtovbMJP3tMZruLAweqa8a9bmKuAWT4akyTNvgHreorXgqU+PygNOcctrq91HvQPHDmDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T17:28:19.554636Z"},"content_sha256":"7ee774b6610f5e786f7ff8b3d82cecf74e1a604ee0b86f45631c86bdff200d5a","schema_version":"1.0","event_id":"sha256:7ee774b6610f5e786f7ff8b3d82cecf74e1a604ee0b86f45631c86bdff200d5a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/bundle.json","state_url":"https://pith.science/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T17:28:19Z","links":{"resolver":"https://pith.science/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB","bundle":"https://pith.science/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/bundle.json","state":"https://pith.science/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EXH4ADSNJF3NZZOOJE7NZH4CHB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:EXH4ADSNJF3NZZOOJE7NZH4CHB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a3d082ccd5bd87e0b678396aff8aadcbe0a189d38b559eadc01a4be7dda500ad","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-27T02:54:07Z","title_canon_sha256":"b9ebef5a452d14289bc286ce945efbd27476235385eaa0364be5c366fad9f4bd"},"schema_version":"1.0","source":{"id":"2306.15705","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2306.15705","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"arxiv_version","alias_value":"2306.15705v1","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2306.15705","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_12","alias_value":"EXH4ADSNJF3N","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_16","alias_value":"EXH4ADSNJF3NZZOO","created_at":"2026-07-05T06:25:43Z"},{"alias_kind":"pith_short_8","alias_value":"EXH4ADSN","created_at":"2026-07-05T06:25:43Z"}],"graph_snapshots":[{"event_id":"sha256:7ee774b6610f5e786f7ff8b3d82cecf74e1a604ee0b86f45631c86bdff200d5a","target":"graph","created_at":"2026-07-05T06:25:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2306.15705/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Detecting adversarial samples that are carefully crafted to fool the model is a critical step to socially-secure applications. However, existing adversarial detection methods require access to sufficient training data, which brings noteworthy concerns regarding privacy leakage and generalizability. In this work, we validate that the adversarial sample generated by attack algorithms is strongly related to a specific vector in the high-dimensional inputs. Such vectors, namely UAPs (Universal Adversarial Perturbations), can be calculated without original training data. Based on this discovery, we","authors_text":"Jin Ma, Qi Zhang, Shihan Dou, Songyang Gao, Xuanjing Huang, Ying Shan","cross_cats":["cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-27T02:54:07Z","title":"On the Universal Adversarial Perturbations for Efficient Data-free Adversarial Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2306.15705","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:cf6186312bec6774c67bcfd43a59b553a6bef8099ddae4df8fc20b6165c1196f","target":"record","created_at":"2026-07-05T06:25:43Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a3d082ccd5bd87e0b678396aff8aadcbe0a189d38b559eadc01a4be7dda500ad","cross_cats_sorted":["cs.LG"],"license":"http://creativecommons.org/licenses/by-sa/4.0/","primary_cat":"cs.CL","submitted_at":"2023-06-27T02:54:07Z","title_canon_sha256":"b9ebef5a452d14289bc286ce945efbd27476235385eaa0364be5c366fad9f4bd"},"schema_version":"1.0","source":{"id":"2306.15705","kind":"arxiv","version":1}},"canonical_sha256":"25cfc00e4d4976dce5ce493edc9f82386a8623bac36f7ace47edcd5eceffac78","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"25cfc00e4d4976dce5ce493edc9f82386a8623bac36f7ace47edcd5eceffac78","first_computed_at":"2026-07-05T06:25:43.479514Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:25:43.479514Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"PBQywys03I0P1bJkvV/uqIkcS/iAbSf+riNovISN+m9xUp4cTckxc2YVtjqAXFksJOCJC/XiVUP6ZiBAz//CDw==","signature_status":"signed_v1","signed_at":"2026-07-05T06:25:43.479920Z","signed_message":"canonical_sha256_bytes"},"source_id":"2306.15705","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:cf6186312bec6774c67bcfd43a59b553a6bef8099ddae4df8fc20b6165c1196f","sha256:7ee774b6610f5e786f7ff8b3d82cecf74e1a604ee0b86f45631c86bdff200d5a"],"state_sha256":"f2b9f1d1b1cc7018e9a84c263ff4d3319a6b6d17bb246109afe226288d4bf7dd"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"I6PxB1TqHYupYGr9Kf16LcHV81F1RTLDLxAHBn+tL85BiLt8AcctjMH0opKDa2kDZJZJaVnNGf3lCvyn0HBYBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T17:28:19.561630Z","bundle_sha256":"a04293cc49fc1226a1e38dbf9a7f8216f5d334e7d3aeefe0b0e4188ce90f953a"}}