{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:H22MW3V4B4JXAORHM53UFTOAZJ","short_pith_number":"pith:H22MW3V4","canonical_record":{"source":{"id":"2111.10759","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-21T08:13:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d1397443031234561ca6d6426b30b86cc01f912f09d2ab8611e8a4decdb53463","abstract_canon_sha256":"0186234ee667780719b36c6aab55905da2749ad78304694d4afe63510393d3f4"},"schema_version":"1.0"},"canonical_sha256":"3eb4cb6ebc0f13703a27677742cdc0ca5a5e764658da5dee278fba46f6eb440c","source":{"kind":"arxiv","id":"2111.10759","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.10759","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"arxiv_version","alias_value":"2111.10759v3","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.10759","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_12","alias_value":"H22MW3V4B4JX","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_16","alias_value":"H22MW3V4B4JXAORH","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_8","alias_value":"H22MW3V4","created_at":"2026-07-05T04:55:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:H22MW3V4B4JXAORHM53UFTOAZJ","target":"record","payload":{"canonical_record":{"source":{"id":"2111.10759","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-21T08:13:21Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"d1397443031234561ca6d6426b30b86cc01f912f09d2ab8611e8a4decdb53463","abstract_canon_sha256":"0186234ee667780719b36c6aab55905da2749ad78304694d4afe63510393d3f4"},"schema_version":"1.0"},"canonical_sha256":"3eb4cb6ebc0f13703a27677742cdc0ca5a5e764658da5dee278fba46f6eb440c","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:55:15.480063Z","signature_b64":"NEjF3b6vjofO89ofOw+Hz/mLsfEHJP8f5Ihip44POSFTZqVhElEG06qaBBXJtjKnTwphXN8HJpej7rITNgE/Dg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3eb4cb6ebc0f13703a27677742cdc0ca5a5e764658da5dee278fba46f6eb440c","last_reissued_at":"2026-07-05T04:55:15.479579Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:55:15.479579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.10759","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"p0AiYcgkro/4QqlRd/UskITvE/UCdX719GES5Fw5DedpOGgfkM2VspDhy6XKo2Q+R59kA3HGKQo4H4yRlgYpAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:11:37.409154Z"},"content_sha256":"ba355c838c4713cd5529ce24b3cb54fa09817f6d9af6f82748787fe693594b0e","schema_version":"1.0","event_id":"sha256:ba355c838c4713cd5529ce24b3cb54fa09817f6d9af6f82748787fe693594b0e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:H22MW3V4B4JXAORHM53UFTOAZJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Alon Zolfi, Asaf Shabtai, Shai Avidan, Yuval Elovici","submitted_at":"2021-11-21T08:13:21Z","abstract_excerpt":"Deep learning-based facial recognition (FR) models have demonstrated state-of-the-art performance in the past few years, even when wearing protective medical face masks became commonplace during the COVID-19 pandemic. Given the outstanding performance of these models, the machine learning research community has shown increasing interest in challenging their robustness. Initially, researchers presented adversarial attacks in the digital domain, and later the attacks were transferred to the physical domain. However, in many cases, attacks in the physical domain are conspicuous, and thus may rais"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.10759","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.10759/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EacL5uA+OOFii3ixF+LOvCxGes5gaWfR+u+JCTaIoEmM1mEe8JyULDtcQeffC/pg6tAluvoArEnMjXmLcac3Bg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-14T14:11:37.409722Z"},"content_sha256":"2c3b532db1feccd714bc4a0e710d394df54df68fef4603fbe39019e8b7bd738a","schema_version":"1.0","event_id":"sha256:2c3b532db1feccd714bc4a0e710d394df54df68fef4603fbe39019e8b7bd738a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/H22MW3V4B4JXAORHM53UFTOAZJ/bundle.json","state_url":"https://pith.science/pith/H22MW3V4B4JXAORHM53UFTOAZJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/H22MW3V4B4JXAORHM53UFTOAZJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-14T14:11:37Z","links":{"resolver":"https://pith.science/pith/H22MW3V4B4JXAORHM53UFTOAZJ","bundle":"https://pith.science/pith/H22MW3V4B4JXAORHM53UFTOAZJ/bundle.json","state":"https://pith.science/pith/H22MW3V4B4JXAORHM53UFTOAZJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/H22MW3V4B4JXAORHM53UFTOAZJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:H22MW3V4B4JXAORHM53UFTOAZJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0186234ee667780719b36c6aab55905da2749ad78304694d4afe63510393d3f4","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-21T08:13:21Z","title_canon_sha256":"d1397443031234561ca6d6426b30b86cc01f912f09d2ab8611e8a4decdb53463"},"schema_version":"1.0","source":{"id":"2111.10759","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.10759","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"arxiv_version","alias_value":"2111.10759v3","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.10759","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_12","alias_value":"H22MW3V4B4JX","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_16","alias_value":"H22MW3V4B4JXAORH","created_at":"2026-07-05T04:55:15Z"},{"alias_kind":"pith_short_8","alias_value":"H22MW3V4","created_at":"2026-07-05T04:55:15Z"}],"graph_snapshots":[{"event_id":"sha256:2c3b532db1feccd714bc4a0e710d394df54df68fef4603fbe39019e8b7bd738a","target":"graph","created_at":"2026-07-05T04:55:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.10759/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep learning-based facial recognition (FR) models have demonstrated state-of-the-art performance in the past few years, even when wearing protective medical face masks became commonplace during the COVID-19 pandemic. Given the outstanding performance of these models, the machine learning research community has shown increasing interest in challenging their robustness. Initially, researchers presented adversarial attacks in the digital domain, and later the attacks were transferred to the physical domain. However, in many cases, attacks in the physical domain are conspicuous, and thus may rais","authors_text":"Alon Zolfi, Asaf Shabtai, Shai Avidan, Yuval Elovici","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-21T08:13:21Z","title":"Adversarial Mask: Real-World Universal Adversarial Attack on Face Recognition Model"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.10759","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba355c838c4713cd5529ce24b3cb54fa09817f6d9af6f82748787fe693594b0e","target":"record","created_at":"2026-07-05T04:55:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0186234ee667780719b36c6aab55905da2749ad78304694d4afe63510393d3f4","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-21T08:13:21Z","title_canon_sha256":"d1397443031234561ca6d6426b30b86cc01f912f09d2ab8611e8a4decdb53463"},"schema_version":"1.0","source":{"id":"2111.10759","kind":"arxiv","version":3}},"canonical_sha256":"3eb4cb6ebc0f13703a27677742cdc0ca5a5e764658da5dee278fba46f6eb440c","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3eb4cb6ebc0f13703a27677742cdc0ca5a5e764658da5dee278fba46f6eb440c","first_computed_at":"2026-07-05T04:55:15.479579Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:55:15.479579Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"NEjF3b6vjofO89ofOw+Hz/mLsfEHJP8f5Ihip44POSFTZqVhElEG06qaBBXJtjKnTwphXN8HJpej7rITNgE/Dg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:55:15.480063Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.10759","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba355c838c4713cd5529ce24b3cb54fa09817f6d9af6f82748787fe693594b0e","sha256:2c3b532db1feccd714bc4a0e710d394df54df68fef4603fbe39019e8b7bd738a"],"state_sha256":"e2aea5224c44fa8c2cc13f25286e52d5786853e5e7588ea0eed0d7696ee9f972"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"3PACyjcu9hRvt+Xs2W0ELCRna0ynN2Mbs1HCIkjKusWQXpfkgMDxC/I9n9YxR0DLViJmzVbHFUVLGlsSlaOPBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-14T14:11:37.415265Z","bundle_sha256":"1651c57023f75ebfcc0a24be17dd798c25d588486ba1f60d1247f9479e21ff47"}}