{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:EYEIBFAQ2YMSUVGRUKS7AON5IN","short_pith_number":"pith:EYEIBFAQ","canonical_record":{"source":{"id":"2505.01168","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-02T10:17:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8f527da7ce0edd0108875423358035fddf7452c1cfd06aebfdf95af4e7e7b21f","abstract_canon_sha256":"d08f531fd5d51a9056fa91222a5b5f57dac9664421f44d70af07a257f1befd5c"},"schema_version":"1.0"},"canonical_sha256":"2608809410d6192a54d1a2a5f039bd437b3dfdf164d92534006c2246cd6460e7","source":{"kind":"arxiv","id":"2505.01168","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.01168","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"arxiv_version","alias_value":"2505.01168v1","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.01168","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_12","alias_value":"EYEIBFAQ2YMS","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_16","alias_value":"EYEIBFAQ2YMSUVGR","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_8","alias_value":"EYEIBFAQ","created_at":"2026-07-05T10:57:46Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:EYEIBFAQ2YMSUVGRUKS7AON5IN","target":"record","payload":{"canonical_record":{"source":{"id":"2505.01168","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-02T10:17:33Z","cross_cats_sorted":["cs.AI"],"title_canon_sha256":"8f527da7ce0edd0108875423358035fddf7452c1cfd06aebfdf95af4e7e7b21f","abstract_canon_sha256":"d08f531fd5d51a9056fa91222a5b5f57dac9664421f44d70af07a257f1befd5c"},"schema_version":"1.0"},"canonical_sha256":"2608809410d6192a54d1a2a5f039bd437b3dfdf164d92534006c2246cd6460e7","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:57:46.536600Z","signature_b64":"X+RPLt5eerq+3eUuHC2uKJ8rSygbEWkcLql8ndlHn3g8XZEiwt0J3DBch9l/aYT67sqANFO5gzx3ipkY76YcAg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2608809410d6192a54d1a2a5f039bd437b3dfdf164d92534006c2246cd6460e7","last_reissued_at":"2026-07-05T10:57:46.534720Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:57:46.534720Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2505.01168","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Pm1/ZwzFlamgFuEjSbLAow8iemyl3tpNWSgZosjDUQEj/bN7YJpRKSfxwPbnH3sScPQ8rYBJUARAF4N2jNIJBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T03:56:33.055366Z"},"content_sha256":"7932973a12230a4b8ecf44043299bb40eb7e128202060c3631ea8b1b40a79f9a","schema_version":"1.0","event_id":"sha256:7932973a12230a4b8ecf44043299bb40eb7e128202060c3631ea8b1b40a79f9a"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:EYEIBFAQ2YMSUVGRUKS7AON5IN","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Harmonizing Intra-coherence and Inter-divergence in Ensemble Attacks for Adversarial Transferability","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI"],"primary_cat":"cs.LG","authors_text":"Jinghang Yue, Jing Wang, Lipo Wang, Taolin Zhang, Wang Lu, Xin Gao, Youfang Lin, Zhaoyang Ma, Zhihao Wu","submitted_at":"2025-05-02T10:17:33Z","abstract_excerpt":"The development of model ensemble attacks has significantly improved the transferability of adversarial examples, but this progress also poses severe threats to the security of deep neural networks. Existing methods, however, face two critical challenges: insufficient capture of shared gradient directions across models and a lack of adaptive weight allocation mechanisms. To address these issues, we propose a novel method Harmonized Ensemble for Adversarial Transferability (HEAT), which introduces domain generalization into adversarial example generation for the first time. HEAT consists of two"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.01168","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2505.01168/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:57:46Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5PUs1lfObLVUOUb3S3/ssUp9eZffVCBK6zi7GhTjiUjiI3Upjxlp5dxP4g9loq3erA+1jH+UE2UmJSAOTPvuBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-09T03:56:33.055739Z"},"content_sha256":"3c0bbf1247898a6834059871c794e1e3f670e6c45e8b0540658691fdb16f1d97","schema_version":"1.0","event_id":"sha256:3c0bbf1247898a6834059871c794e1e3f670e6c45e8b0540658691fdb16f1d97"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/bundle.json","state_url":"https://pith.science/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-09T03:56:33Z","links":{"resolver":"https://pith.science/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN","bundle":"https://pith.science/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/bundle.json","state":"https://pith.science/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/state.json","well_known_bundle":"https://pith.science/.well-known/pith/EYEIBFAQ2YMSUVGRUKS7AON5IN/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:EYEIBFAQ2YMSUVGRUKS7AON5IN","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d08f531fd5d51a9056fa91222a5b5f57dac9664421f44d70af07a257f1befd5c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-02T10:17:33Z","title_canon_sha256":"8f527da7ce0edd0108875423358035fddf7452c1cfd06aebfdf95af4e7e7b21f"},"schema_version":"1.0","source":{"id":"2505.01168","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2505.01168","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"arxiv_version","alias_value":"2505.01168v1","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2505.01168","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_12","alias_value":"EYEIBFAQ2YMS","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_16","alias_value":"EYEIBFAQ2YMSUVGR","created_at":"2026-07-05T10:57:46Z"},{"alias_kind":"pith_short_8","alias_value":"EYEIBFAQ","created_at":"2026-07-05T10:57:46Z"}],"graph_snapshots":[{"event_id":"sha256:3c0bbf1247898a6834059871c794e1e3f670e6c45e8b0540658691fdb16f1d97","target":"graph","created_at":"2026-07-05T10:57:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2505.01168/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The development of model ensemble attacks has significantly improved the transferability of adversarial examples, but this progress also poses severe threats to the security of deep neural networks. Existing methods, however, face two critical challenges: insufficient capture of shared gradient directions across models and a lack of adaptive weight allocation mechanisms. To address these issues, we propose a novel method Harmonized Ensemble for Adversarial Transferability (HEAT), which introduces domain generalization into adversarial example generation for the first time. HEAT consists of two","authors_text":"Jinghang Yue, Jing Wang, Lipo Wang, Taolin Zhang, Wang Lu, Xin Gao, Youfang Lin, Zhaoyang Ma, Zhihao Wu","cross_cats":["cs.AI"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-02T10:17:33Z","title":"Harmonizing Intra-coherence and Inter-divergence in Ensemble Attacks for Adversarial Transferability"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2505.01168","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7932973a12230a4b8ecf44043299bb40eb7e128202060c3631ea8b1b40a79f9a","target":"record","created_at":"2026-07-05T10:57:46Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d08f531fd5d51a9056fa91222a5b5f57dac9664421f44d70af07a257f1befd5c","cross_cats_sorted":["cs.AI"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-05-02T10:17:33Z","title_canon_sha256":"8f527da7ce0edd0108875423358035fddf7452c1cfd06aebfdf95af4e7e7b21f"},"schema_version":"1.0","source":{"id":"2505.01168","kind":"arxiv","version":1}},"canonical_sha256":"2608809410d6192a54d1a2a5f039bd437b3dfdf164d92534006c2246cd6460e7","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2608809410d6192a54d1a2a5f039bd437b3dfdf164d92534006c2246cd6460e7","first_computed_at":"2026-07-05T10:57:46.534720Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:57:46.534720Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"X+RPLt5eerq+3eUuHC2uKJ8rSygbEWkcLql8ndlHn3g8XZEiwt0J3DBch9l/aYT67sqANFO5gzx3ipkY76YcAg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:57:46.536600Z","signed_message":"canonical_sha256_bytes"},"source_id":"2505.01168","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7932973a12230a4b8ecf44043299bb40eb7e128202060c3631ea8b1b40a79f9a","sha256:3c0bbf1247898a6834059871c794e1e3f670e6c45e8b0540658691fdb16f1d97"],"state_sha256":"587aaa1ffe21a1abc32bf0f6211e28e4b4b9b2df0dd60f80bb8ac2b4bfdfa42f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"a3w6VKOgD109JHCLNB4TFcuFYwzSfVc7tIIqHCFDDOqcNvgnROX7iYdbhcSue2ZxkH6exjikJJ7Wjl2NehAwAA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-09T03:56:33.057933Z","bundle_sha256":"19ec393ddfcf4922850b29c4e416e793833e79cb17e09878ae265bb6d144b3a5"}}