{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:FAR3CU5MV4D7QUI4J3G7LXQXVV","short_pith_number":"pith:FAR3CU5M","canonical_record":{"source":{"id":"1809.02861","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-08T19:44:47Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"28b06cbe180232bc3a7fe3d21f1c16c01525c25c664c821cc4bf6712f55b8adb","abstract_canon_sha256":"e27cabb0a7220d5f45fb812e5a378d5ce6dc1b3cb21627a54d95fbf39ebd1128"},"schema_version":"1.0"},"canonical_sha256":"2823b153acaf07f8511c4ecdf5de17ad63f11f1a74304aafdfc26bd3fdce9c51","source":{"kind":"arxiv","id":"1809.02861","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.02861","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"arxiv_version","alias_value":"1809.02861v4","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.02861","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"pith_short_12","alias_value":"FAR3CU5MV4D7","created_at":"2026-05-18T12:32:22Z"},{"alias_kind":"pith_short_16","alias_value":"FAR3CU5MV4D7QUI4","created_at":"2026-05-18T12:32:22Z"},{"alias_kind":"pith_short_8","alias_value":"FAR3CU5M","created_at":"2026-05-18T12:32:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:FAR3CU5MV4D7QUI4J3G7LXQXVV","target":"record","payload":{"canonical_record":{"source":{"id":"1809.02861","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-08T19:44:47Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"28b06cbe180232bc3a7fe3d21f1c16c01525c25c664c821cc4bf6712f55b8adb","abstract_canon_sha256":"e27cabb0a7220d5f45fb812e5a378d5ce6dc1b3cb21627a54d95fbf39ebd1128"},"schema_version":"1.0"},"canonical_sha256":"2823b153acaf07f8511c4ecdf5de17ad63f11f1a74304aafdfc26bd3fdce9c51","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:43:28.263329Z","signature_b64":"WlgnbFAu3jSAQODyEOZO0Kewruea2t+SluUCNP1CeXuvGMMPp45m51ym+H1L9hs+MJlo2HbGO5jIkrrtdzfwAQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2823b153acaf07f8511c4ecdf5de17ad63f11f1a74304aafdfc26bd3fdce9c51","last_reissued_at":"2026-05-17T23:43:28.262789Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:43:28.262789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1809.02861","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:43:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eGUoksFP+PRWkMPAAmw6o98YKJ2zhNYjFUgw/h8vVwTSGYfu420DgGuMya8aveLqlxhrkyKgbQDmXIewWwidAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T08:03:48.961170Z"},"content_sha256":"f95ba7a114620b19949723c9b21741e377aea6f2695d537682d7519ebff89a65","schema_version":"1.0","event_id":"sha256:f95ba7a114620b19949723c9b21741e377aea6f2695d537682d7519ebff89a65"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:FAR3CU5MV4D7QUI4J3G7LXQXVV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"Alina Oprea, Ambra Demontis, Battista Biggio, Cristina Nita-Rotaru, Fabio Roli, Marco Melis, Matthew Jagielski, Maura Pintor","submitted_at":"2018-09-08T19:44:47Z","abstract_excerpt":"Transferability captures the ability of an attack against a machine-learning model to be effective against a different, potentially unknown, model. Empirical evidence for transferability has been shown in previous work, but the underlying reasons why an attack transfers or not are not yet well understood. In this paper, we present a comprehensive analysis aimed to investigate the transferability of both test-time evasion and training-time poisoning attacks. We provide a unifying optimization framework for evasion and poisoning attacks, and a formal definition of transferability of such attacks"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.02861","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:43:28Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lorVvdw3wh8SOdfqdMLMcvnk67CASXDqyK6op65w+B+FM8SVFC0mFXMeeErQ5hKHbjyXpXtVxFmEma2D9pdfBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T08:03:48.961877Z"},"content_sha256":"4c727487bcbe349f27dae11defce2fdc475b6215d4f4f98a4dbd89e259cae11a","schema_version":"1.0","event_id":"sha256:4c727487bcbe349f27dae11defce2fdc475b6215d4f4f98a4dbd89e259cae11a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/bundle.json","state_url":"https://pith.science/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T08:03:48Z","links":{"resolver":"https://pith.science/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV","bundle":"https://pith.science/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/bundle.json","state":"https://pith.science/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FAR3CU5MV4D7QUI4J3G7LXQXVV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:FAR3CU5MV4D7QUI4J3G7LXQXVV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e27cabb0a7220d5f45fb812e5a378d5ce6dc1b3cb21627a54d95fbf39ebd1128","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-08T19:44:47Z","title_canon_sha256":"28b06cbe180232bc3a7fe3d21f1c16c01525c25c664c821cc4bf6712f55b8adb"},"schema_version":"1.0","source":{"id":"1809.02861","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.02861","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"arxiv_version","alias_value":"1809.02861v4","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.02861","created_at":"2026-05-17T23:43:28Z"},{"alias_kind":"pith_short_12","alias_value":"FAR3CU5MV4D7","created_at":"2026-05-18T12:32:22Z"},{"alias_kind":"pith_short_16","alias_value":"FAR3CU5MV4D7QUI4","created_at":"2026-05-18T12:32:22Z"},{"alias_kind":"pith_short_8","alias_value":"FAR3CU5M","created_at":"2026-05-18T12:32:22Z"}],"graph_snapshots":[{"event_id":"sha256:4c727487bcbe349f27dae11defce2fdc475b6215d4f4f98a4dbd89e259cae11a","target":"graph","created_at":"2026-05-17T23:43:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Transferability captures the ability of an attack against a machine-learning model to be effective against a different, potentially unknown, model. Empirical evidence for transferability has been shown in previous work, but the underlying reasons why an attack transfers or not are not yet well understood. In this paper, we present a comprehensive analysis aimed to investigate the transferability of both test-time evasion and training-time poisoning attacks. We provide a unifying optimization framework for evasion and poisoning attacks, and a formal definition of transferability of such attacks","authors_text":"Alina Oprea, Ambra Demontis, Battista Biggio, Cristina Nita-Rotaru, Fabio Roli, Marco Melis, Matthew Jagielski, Maura Pintor","cross_cats":["cs.CR","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-08T19:44:47Z","title":"Why Do Adversarial Attacks Transfer? Explaining Transferability of Evasion and Poisoning Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.02861","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:f95ba7a114620b19949723c9b21741e377aea6f2695d537682d7519ebff89a65","target":"record","created_at":"2026-05-17T23:43:28Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e27cabb0a7220d5f45fb812e5a378d5ce6dc1b3cb21627a54d95fbf39ebd1128","cross_cats_sorted":["cs.CR","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2018-09-08T19:44:47Z","title_canon_sha256":"28b06cbe180232bc3a7fe3d21f1c16c01525c25c664c821cc4bf6712f55b8adb"},"schema_version":"1.0","source":{"id":"1809.02861","kind":"arxiv","version":4}},"canonical_sha256":"2823b153acaf07f8511c4ecdf5de17ad63f11f1a74304aafdfc26bd3fdce9c51","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2823b153acaf07f8511c4ecdf5de17ad63f11f1a74304aafdfc26bd3fdce9c51","first_computed_at":"2026-05-17T23:43:28.262789Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:43:28.262789Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WlgnbFAu3jSAQODyEOZO0Kewruea2t+SluUCNP1CeXuvGMMPp45m51ym+H1L9hs+MJlo2HbGO5jIkrrtdzfwAQ==","signature_status":"signed_v1","signed_at":"2026-05-17T23:43:28.263329Z","signed_message":"canonical_sha256_bytes"},"source_id":"1809.02861","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:f95ba7a114620b19949723c9b21741e377aea6f2695d537682d7519ebff89a65","sha256:4c727487bcbe349f27dae11defce2fdc475b6215d4f4f98a4dbd89e259cae11a"],"state_sha256":"16e6384ca0f20951a4c4cab6d7d57d4f5e2c70ef8882db0d9de4d803671699a9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c6GxAL0+dADoKNmPz6J8Dwo0KuMoi0Q5ppvYyZgjzAkv4wUwFx0j5gc32SQ11AD50lUBA+V/m+0dIAGGb+rkDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T08:03:48.965305Z","bundle_sha256":"f8e9b10e516c7a49dee1aafa00f83fd6fc0ee90e07f4e5162a59a83bacee11f0"}}