{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:FVHCGONML4JCDI4P2NYPFWVLPY","short_pith_number":"pith:FVHCGONM","canonical_record":{"source":{"id":"2002.12749","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-02-09T07:10:58Z","cross_cats_sorted":[],"title_canon_sha256":"1e84ff84409fa704e935c2550c325de2916a26949348b3e2d2c16e3053948938","abstract_canon_sha256":"d65e391cf1c0cbfaa81bcbe627d37c482695fdab9ef394c68b515e0e28f86563"},"schema_version":"1.0"},"canonical_sha256":"2d4e2339ac5f1221a38fd370f2daab7e1dcfc61538484639c90dd5e229789291","source":{"kind":"arxiv","id":"2002.12749","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.12749","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"arxiv_version","alias_value":"2002.12749v3","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.12749","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_12","alias_value":"FVHCGONML4JC","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_16","alias_value":"FVHCGONML4JCDI4P","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_8","alias_value":"FVHCGONM","created_at":"2026-07-05T01:49:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:FVHCGONML4JCDI4P2NYPFWVLPY","target":"record","payload":{"canonical_record":{"source":{"id":"2002.12749","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-02-09T07:10:58Z","cross_cats_sorted":[],"title_canon_sha256":"1e84ff84409fa704e935c2550c325de2916a26949348b3e2d2c16e3053948938","abstract_canon_sha256":"d65e391cf1c0cbfaa81bcbe627d37c482695fdab9ef394c68b515e0e28f86563"},"schema_version":"1.0"},"canonical_sha256":"2d4e2339ac5f1221a38fd370f2daab7e1dcfc61538484639c90dd5e229789291","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:49:50.037940Z","signature_b64":"GaxxCsxQBuzB+Qvph9YkdRm5x2KLOzx30BXx0NKJtq+e+ZEKsqLETFeWFIexnNJrgre2SmV0/ju+e1Jt4wi3Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"2d4e2339ac5f1221a38fd370f2daab7e1dcfc61538484639c90dd5e229789291","last_reissued_at":"2026-07-05T01:49:50.037480Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:49:50.037480Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2002.12749","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:49:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xFSekcw3BIGUF2DR8Y/4FALj1IX1bcAhXTtLiy4TFJqN9o15Cr49mJH4h1AokrP69z+J0y06hRd+rGJ8O5lOCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T02:45:52.898416Z"},"content_sha256":"3dd62a0695fe9e30741c4b116353b66a9e6b250df6e813569bfd6b10ce25d665","schema_version":"1.0","event_id":"sha256:3dd62a0695fe9e30741c4b116353b66a9e6b250df6e813569bfd6b10ce25d665"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:FVHCGONML4JCDI4P2NYPFWVLPY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Farinaz Koushanfar, Julian McAuley, Malhar Jere, Paarth Neekhara, Shehzeen Hussain","submitted_at":"2020-02-09T07:10:58Z","abstract_excerpt":"Recent advances in video manipulation techniques have made the generation of fake videos more accessible than ever before. Manipulated videos can fuel disinformation and reduce trust in media. Therefore detection of fake videos has garnered immense interest in academia and industry. Recently developed Deepfake detection methods rely on deep neural networks (DNNs) to distinguish AI-generated fake videos from real videos. In this work, we demonstrate that it is possible to bypass such detectors by adversarially modifying fake videos synthesized using existing Deepfake generation methods. We furt"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.12749","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2002.12749/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:49:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FEd5nbb7DGsCrLiv1HeFVkczxHihIGtM0wbZ1cKApYpoDn5vU5oxCPRNegjJObybqDBWqqWJJqt/UzLRVlnYCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-16T02:45:52.898792Z"},"content_sha256":"af18afdc268677cb2679abe22a8740208787e220f9a4426e7e3e1c0ea9373a2e","schema_version":"1.0","event_id":"sha256:af18afdc268677cb2679abe22a8740208787e220f9a4426e7e3e1c0ea9373a2e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/FVHCGONML4JCDI4P2NYPFWVLPY/bundle.json","state_url":"https://pith.science/pith/FVHCGONML4JCDI4P2NYPFWVLPY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/FVHCGONML4JCDI4P2NYPFWVLPY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-16T02:45:52Z","links":{"resolver":"https://pith.science/pith/FVHCGONML4JCDI4P2NYPFWVLPY","bundle":"https://pith.science/pith/FVHCGONML4JCDI4P2NYPFWVLPY/bundle.json","state":"https://pith.science/pith/FVHCGONML4JCDI4P2NYPFWVLPY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/FVHCGONML4JCDI4P2NYPFWVLPY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:FVHCGONML4JCDI4P2NYPFWVLPY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d65e391cf1c0cbfaa81bcbe627d37c482695fdab9ef394c68b515e0e28f86563","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-02-09T07:10:58Z","title_canon_sha256":"1e84ff84409fa704e935c2550c325de2916a26949348b3e2d2c16e3053948938"},"schema_version":"1.0","source":{"id":"2002.12749","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2002.12749","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"arxiv_version","alias_value":"2002.12749v3","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2002.12749","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_12","alias_value":"FVHCGONML4JC","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_16","alias_value":"FVHCGONML4JCDI4P","created_at":"2026-07-05T01:49:50Z"},{"alias_kind":"pith_short_8","alias_value":"FVHCGONM","created_at":"2026-07-05T01:49:50Z"}],"graph_snapshots":[{"event_id":"sha256:af18afdc268677cb2679abe22a8740208787e220f9a4426e7e3e1c0ea9373a2e","target":"graph","created_at":"2026-07-05T01:49:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2002.12749/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in video manipulation techniques have made the generation of fake videos more accessible than ever before. Manipulated videos can fuel disinformation and reduce trust in media. Therefore detection of fake videos has garnered immense interest in academia and industry. Recently developed Deepfake detection methods rely on deep neural networks (DNNs) to distinguish AI-generated fake videos from real videos. In this work, we demonstrate that it is possible to bypass such detectors by adversarially modifying fake videos synthesized using existing Deepfake generation methods. We furt","authors_text":"Farinaz Koushanfar, Julian McAuley, Malhar Jere, Paarth Neekhara, Shehzeen Hussain","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-02-09T07:10:58Z","title":"Adversarial Deepfakes: Evaluating Vulnerability of Deepfake Detectors to Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2002.12749","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:3dd62a0695fe9e30741c4b116353b66a9e6b250df6e813569bfd6b10ce25d665","target":"record","created_at":"2026-07-05T01:49:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d65e391cf1c0cbfaa81bcbe627d37c482695fdab9ef394c68b515e0e28f86563","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2020-02-09T07:10:58Z","title_canon_sha256":"1e84ff84409fa704e935c2550c325de2916a26949348b3e2d2c16e3053948938"},"schema_version":"1.0","source":{"id":"2002.12749","kind":"arxiv","version":3}},"canonical_sha256":"2d4e2339ac5f1221a38fd370f2daab7e1dcfc61538484639c90dd5e229789291","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"2d4e2339ac5f1221a38fd370f2daab7e1dcfc61538484639c90dd5e229789291","first_computed_at":"2026-07-05T01:49:50.037480Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:49:50.037480Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"GaxxCsxQBuzB+Qvph9YkdRm5x2KLOzx30BXx0NKJtq+e+ZEKsqLETFeWFIexnNJrgre2SmV0/ju+e1Jt4wi3Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T01:49:50.037940Z","signed_message":"canonical_sha256_bytes"},"source_id":"2002.12749","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:3dd62a0695fe9e30741c4b116353b66a9e6b250df6e813569bfd6b10ce25d665","sha256:af18afdc268677cb2679abe22a8740208787e220f9a4426e7e3e1c0ea9373a2e"],"state_sha256":"7d5f0af02dcff64a487168f33b825fefb988b3a337a74f3151675a4cc06eb049"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"47Mimodq1BLySfv0HtENfINTB4luM23/HHQRpCnkTKa+VYxOT0uABB4ehRWLfT+Lp4qEkTr1u9+CKtmGlbOMDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-16T02:45:52.900905Z","bundle_sha256":"53463d3ae0b1d3c7b8622421d0f86e6f2a7bf18ba3c310c1e17d2c48a05586d5"}}