{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:FSDVOJLH3LDBL6ORZB2322YOHY","short_pith_number":"pith:FSDVOJLH","canonical_record":{"source":{"id":"1807.10590","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-18T10:09:37Z","cross_cats_sorted":[],"title_canon_sha256":"5e9c2e2f360cd43f39158d538a8fe1b41da3fe681cc2c857408a067e5aef8aba","abstract_canon_sha256":"98914ea170b6c9cfba0c04421a7008342463e2817657d0d35b69c9e2c5daa470"},"schema_version":"1.0"},"canonical_sha256":"2c87572567dac615f9d1c875bd6b0e3e36480eb9b9dca410cd8b606e4c4cc180","source":{"kind":"arxiv","id":"1807.10590","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.10590","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"arxiv_version","alias_value":"1807.10590v2","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.10590","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"pith_short_12","alias_value":"FSDVOJLH3LDB","created_at":"2026-05-18T12:32:25Z"},{"alias_kind":"pith_short_16","alias_value":"FSDVOJLH3LDBL6OR","created_at":"2026-05-18T12:32:25Z"},{"alias_kind":"pith_short_8","alias_value":"FSDVOJLH","created_at":"2026-05-18T12:32:25Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:FSDVOJLH3LDBL6ORZB2322YOHY","target":"record","payload":{"canonical_record":{"source":{"id":"1807.10590","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-18T10:09:37Z","cross_cats_sorted":[],"title_canon_sha256":"5e9c2e2f360cd43f39158d538a8fe1b41da3fe681cc2c857408a067e5aef8aba","abstract_canon_sha256":"98914ea170b6c9cfba0c04421a7008342463e2817657d0d35b69c9e2c5daa470"},"schema_version":"1.0"},"canonical_sha256":"2c87572567dac615f9d1c875bd6b0e3e36480eb9b9dca410cd8b606e4c4cc180","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T00:08:35.426259Z","signature_b64":"HzK6yGKJwRDd2QmUhZKs+KhLy7vROqMGJra6YWymB1BFDumcbqdSpTGvGKJiaBD/gUAJPJ6MAta0SfckF9XjBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2c87572567dac615f9d1c875bd6b0e3e36480eb9b9dca410cd8b606e4c4cc180","last_reissued_at":"2026-05-18T00:08:35.425573Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T00:08:35.425573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1807.10590","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:08:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"cA0MAIOFfOlpniNh1r49DnR9ByVtcbPGrQ1vy5bdNuFgTPSNWTNS5ddRph3TLj+XFrz1UW0x8BX4wuVEPcx1Ag==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T07:20:13.739556Z"},"content_sha256":"e22801b3000b4ad29b81c7c913065d9618178eb2b50bba2310a99a3bf74dfa44","schema_version":"1.0","event_id":"sha256:e22801b3000b4ad29b81c7c913065d9618178eb2b50bba2310a99a3bf74dfa44"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:FSDVOJLH3LDBL6ORZB2322YOHY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Harmonic Adversarial Attack Method","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Shuchang Zhou, Tingting Jiang, Wen Heng","submitted_at":"2018-07-18T10:09:37Z","abstract_excerpt":"Adversarial attacks find perturbations that can fool models into misclassifying images. Previous works had successes in generating noisy/edge-rich adversarial perturbations, at the cost of degradation of image quality. Such perturbations, even when they are small in scale, are usually easily spottable by human vision. In contrast, we propose Harmonic Adversar- ial Attack Methods (HAAM), that generates edge-free perturbations by using harmonic functions. The property of edge-free guarantees that the generated adversarial images can still preserve visual quality, even when perturbations are of l"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.10590","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T00:08:35Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XDKYPOMGf7WaYGdDO3d9wgcvIhvgQlRB8w7ie+7YhNbgf38RuTf82Ib6HL1PIeFxn+UsTJiO9jI32tO7vYLxAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-30T07:20:13.739896Z"},"content_sha256":"599eacf00c0c6ab36972eac734edaeaeaf7409f7fa37c8627633f37709320cc4","schema_version":"1.0","event_id":"sha256:599eacf00c0c6ab36972eac734edaeaeaf7409f7fa37c8627633f37709320cc4"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FSDVOJLH3LDBL6ORZB2322YOHY/bundle.json","state_url":"https://pith.science/pith/FSDVOJLH3LDBL6ORZB2322YOHY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FSDVOJLH3LDBL6ORZB2322YOHY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-30T07:20:13Z","links":{"resolver":"https://pith.science/pith/FSDVOJLH3LDBL6ORZB2322YOHY","bundle":"https://pith.science/pith/FSDVOJLH3LDBL6ORZB2322YOHY/bundle.json","state":"https://pith.science/pith/FSDVOJLH3LDBL6ORZB2322YOHY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FSDVOJLH3LDBL6ORZB2322YOHY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:FSDVOJLH3LDBL6ORZB2322YOHY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"98914ea170b6c9cfba0c04421a7008342463e2817657d0d35b69c9e2c5daa470","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-18T10:09:37Z","title_canon_sha256":"5e9c2e2f360cd43f39158d538a8fe1b41da3fe681cc2c857408a067e5aef8aba"},"schema_version":"1.0","source":{"id":"1807.10590","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1807.10590","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"arxiv_version","alias_value":"1807.10590v2","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1807.10590","created_at":"2026-05-18T00:08:35Z"},{"alias_kind":"pith_short_12","alias_value":"FSDVOJLH3LDB","created_at":"2026-05-18T12:32:25Z"},{"alias_kind":"pith_short_16","alias_value":"FSDVOJLH3LDBL6OR","created_at":"2026-05-18T12:32:25Z"},{"alias_kind":"pith_short_8","alias_value":"FSDVOJLH","created_at":"2026-05-18T12:32:25Z"}],"graph_snapshots":[{"event_id":"sha256:599eacf00c0c6ab36972eac734edaeaeaf7409f7fa37c8627633f37709320cc4","target":"graph","created_at":"2026-05-18T00:08:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Adversarial attacks find perturbations that can fool models into misclassifying images. Previous works had successes in generating noisy/edge-rich adversarial perturbations, at the cost of degradation of image quality. Such perturbations, even when they are small in scale, are usually easily spottable by human vision. In contrast, we propose Harmonic Adversar- ial Attack Methods (HAAM), that generates edge-free perturbations by using harmonic functions. The property of edge-free guarantees that the generated adversarial images can still preserve visual quality, even when perturbations are of l","authors_text":"Shuchang Zhou, Tingting Jiang, Wen Heng","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-18T10:09:37Z","title":"Harmonic Adversarial Attack Method"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1807.10590","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e22801b3000b4ad29b81c7c913065d9618178eb2b50bba2310a99a3bf74dfa44","target":"record","created_at":"2026-05-18T00:08:35Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"98914ea170b6c9cfba0c04421a7008342463e2817657d0d35b69c9e2c5daa470","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2018-07-18T10:09:37Z","title_canon_sha256":"5e9c2e2f360cd43f39158d538a8fe1b41da3fe681cc2c857408a067e5aef8aba"},"schema_version":"1.0","source":{"id":"1807.10590","kind":"arxiv","version":2}},"canonical_sha256":"2c87572567dac615f9d1c875bd6b0e3e36480eb9b9dca410cd8b606e4c4cc180","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2c87572567dac615f9d1c875bd6b0e3e36480eb9b9dca410cd8b606e4c4cc180","first_computed_at":"2026-05-18T00:08:35.425573Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T00:08:35.425573Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"HzK6yGKJwRDd2QmUhZKs+KhLy7vROqMGJra6YWymB1BFDumcbqdSpTGvGKJiaBD/gUAJPJ6MAta0SfckF9XjBA==","signature_status":"signed_v1","signed_at":"2026-05-18T00:08:35.426259Z","signed_message":"canonical_sha256_bytes"},"source_id":"1807.10590","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e22801b3000b4ad29b81c7c913065d9618178eb2b50bba2310a99a3bf74dfa44","sha256:599eacf00c0c6ab36972eac734edaeaeaf7409f7fa37c8627633f37709320cc4"],"state_sha256":"a8e8152f33e364944aeac7d617e330e5d6272e563092342cc34fda2ec6c9c786"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"OBVYRYFHBdxClyi3MH6vRuhiUwU6Zx/wTpkCkWXy/QgMeWs4BZayjqFCfuEqqOQoBP66+X9N4w52enJFfzgXBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-30T07:20:13.741840Z","bundle_sha256":"3d04071ec89be0af60c58536378fd5cfc55bf04c202c4f718c20c8a7ba60ad5e"}}