{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:G2WTKPPHV7T5BPJXLJU7KSBLY5","short_pith_number":"pith:G2WTKPPH","canonical_record":{"source":{"id":"1812.09803","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-24T00:48:31Z","cross_cats_sorted":["cs.CR","cs.CV","cs.LG"],"title_canon_sha256":"6c75edc1cd1e7f7039760e248bafa1db95f38bdf954e59eed4a0b8c2848abf23","abstract_canon_sha256":"a0aadc53918b0ba4c6126c870b39c96a546e3d6309cdc7eda1fa3f0f30ab5f54"},"schema_version":"1.0"},"canonical_sha256":"36ad353de7afe7d0bd375a69f5482bc7589c33c783065da3b8ed374f3d78b0e0","source":{"kind":"arxiv","id":"1812.09803","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.09803","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"arxiv_version","alias_value":"1812.09803v3","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.09803","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_12","alias_value":"G2WTKPPHV7T5","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_16","alias_value":"G2WTKPPHV7T5BPJX","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_8","alias_value":"G2WTKPPH","created_at":"2026-07-05T02:36:05Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:G2WTKPPHV7T5BPJXLJU7KSBLY5","target":"record","payload":{"canonical_record":{"source":{"id":"1812.09803","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-24T00:48:31Z","cross_cats_sorted":["cs.CR","cs.CV","cs.LG"],"title_canon_sha256":"6c75edc1cd1e7f7039760e248bafa1db95f38bdf954e59eed4a0b8c2848abf23","abstract_canon_sha256":"a0aadc53918b0ba4c6126c870b39c96a546e3d6309cdc7eda1fa3f0f30ab5f54"},"schema_version":"1.0"},"canonical_sha256":"36ad353de7afe7d0bd375a69f5482bc7589c33c783065da3b8ed374f3d78b0e0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:36:05.901050Z","signature_b64":"6BP6wG6j3+c7fVjG61BKZef564hD5pQAQlxDSjMBZ4NWk9GO5dxC7yCLTbeOxIbs6QavCRdgM42obfjtpE8PCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"36ad353de7afe7d0bd375a69f5482bc7589c33c783065da3b8ed374f3d78b0e0","last_reissued_at":"2026-07-05T02:36:05.900575Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:36:05.900575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1812.09803","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"CYdvpKZue7rR/NBzDwYDCHSBFvUA/8LRMiDI4SLeata+VodxS4FhylEkzKCICBQOTJrP6ajIANT0S1ohOZAuAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:26:53.258532Z"},"content_sha256":"e469de6a5e8a2dfbd04bed4cf72a5b746f2f1859f62cb920373047e8ba68fd1d","schema_version":"1.0","event_id":"sha256:e469de6a5e8a2dfbd04bed4cf72a5b746f2f1859f62cb920373047e8ba68fd1d"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:G2WTKPPHV7T5BPJXLJU7KSBLY5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.CV","cs.LG"],"primary_cat":"stat.ML","authors_text":"Alois Knoll, Frederik Diehl, Michael Truong Le, Thomas Brunner","submitted_at":"2018-12-24T00:48:31Z","abstract_excerpt":"We consider adversarial examples for image classification in the black-box decision-based setting. Here, an attacker cannot access confidence scores, but only the final label. Most attacks for this scenario are either unreliable or inefficient. Focusing on the latter, we show that a specific class of attacks, Boundary Attacks, can be reinterpreted as a biased sampling framework that gains efficiency from domain knowledge. We identify three such biases, image frequency, regional masks and surrogate gradients, and evaluate their performance against an ImageNet classifier. We show that the combin"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.09803","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1812.09803/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:36:05Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"DddQlaSY6ObfKm541v8OKo+t0b0i005HJ3dtp66yVlKdIqO4dU+GmJm0is57UGO0eYHTC6CmYLPc3up4zS5BCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T02:26:53.259514Z"},"content_sha256":"2a3efb1aac09d23794da81ab5f81cb41cb1bd9cc3bf05fefecf4e10b0efc5397","schema_version":"1.0","event_id":"sha256:2a3efb1aac09d23794da81ab5f81cb41cb1bd9cc3bf05fefecf4e10b0efc5397"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/bundle.json","state_url":"https://pith.science/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T02:26:53Z","links":{"resolver":"https://pith.science/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5","bundle":"https://pith.science/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/bundle.json","state":"https://pith.science/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/G2WTKPPHV7T5BPJXLJU7KSBLY5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:G2WTKPPHV7T5BPJXLJU7KSBLY5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a0aadc53918b0ba4c6126c870b39c96a546e3d6309cdc7eda1fa3f0f30ab5f54","cross_cats_sorted":["cs.CR","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-24T00:48:31Z","title_canon_sha256":"6c75edc1cd1e7f7039760e248bafa1db95f38bdf954e59eed4a0b8c2848abf23"},"schema_version":"1.0","source":{"id":"1812.09803","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1812.09803","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"arxiv_version","alias_value":"1812.09803v3","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1812.09803","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_12","alias_value":"G2WTKPPHV7T5","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_16","alias_value":"G2WTKPPHV7T5BPJX","created_at":"2026-07-05T02:36:05Z"},{"alias_kind":"pith_short_8","alias_value":"G2WTKPPH","created_at":"2026-07-05T02:36:05Z"}],"graph_snapshots":[{"event_id":"sha256:2a3efb1aac09d23794da81ab5f81cb41cb1bd9cc3bf05fefecf4e10b0efc5397","target":"graph","created_at":"2026-07-05T02:36:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1812.09803/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We consider adversarial examples for image classification in the black-box decision-based setting. Here, an attacker cannot access confidence scores, but only the final label. Most attacks for this scenario are either unreliable or inefficient. Focusing on the latter, we show that a specific class of attacks, Boundary Attacks, can be reinterpreted as a biased sampling framework that gains efficiency from domain knowledge. We identify three such biases, image frequency, regional masks and surrogate gradients, and evaluate their performance against an ImageNet classifier. We show that the combin","authors_text":"Alois Knoll, Frederik Diehl, Michael Truong Le, Thomas Brunner","cross_cats":["cs.CR","cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-24T00:48:31Z","title":"Guessing Smart: Biased Sampling for Efficient Black-Box Adversarial Attacks"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1812.09803","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e469de6a5e8a2dfbd04bed4cf72a5b746f2f1859f62cb920373047e8ba68fd1d","target":"record","created_at":"2026-07-05T02:36:05Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a0aadc53918b0ba4c6126c870b39c96a546e3d6309cdc7eda1fa3f0f30ab5f54","cross_cats_sorted":["cs.CR","cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"stat.ML","submitted_at":"2018-12-24T00:48:31Z","title_canon_sha256":"6c75edc1cd1e7f7039760e248bafa1db95f38bdf954e59eed4a0b8c2848abf23"},"schema_version":"1.0","source":{"id":"1812.09803","kind":"arxiv","version":3}},"canonical_sha256":"36ad353de7afe7d0bd375a69f5482bc7589c33c783065da3b8ed374f3d78b0e0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"36ad353de7afe7d0bd375a69f5482bc7589c33c783065da3b8ed374f3d78b0e0","first_computed_at":"2026-07-05T02:36:05.900575Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:36:05.900575Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"6BP6wG6j3+c7fVjG61BKZef564hD5pQAQlxDSjMBZ4NWk9GO5dxC7yCLTbeOxIbs6QavCRdgM42obfjtpE8PCg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:36:05.901050Z","signed_message":"canonical_sha256_bytes"},"source_id":"1812.09803","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e469de6a5e8a2dfbd04bed4cf72a5b746f2f1859f62cb920373047e8ba68fd1d","sha256:2a3efb1aac09d23794da81ab5f81cb41cb1bd9cc3bf05fefecf4e10b0efc5397"],"state_sha256":"bb05f30058e4c38ed4339711a11741b098bea582dc5841ea68d18bd4f2872d5c"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uMs2bugY41jBwtGeBUt+zsXtwFlAyq63iPQrMGepsoHgiecjDtbGKiDmiTKtrs0aBmqMLwgaVOfWZZfAPL9XCQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T02:26:53.264290Z","bundle_sha256":"c03eac414d3c1f6d43055f0f607de5fc4004e6f282ba3e21696555e56dccef29"}}