{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:HHZ2YWKMSHGNNYWBRRKD77RI4A","short_pith_number":"pith:HHZ2YWKM","canonical_record":{"source":{"id":"2111.11056","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-22T08:54:34Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"76b5ac6af8ceb4d61d18cd2aafcfbd0eeabf4f00a2cefc271ae23dd4bb7b8479","abstract_canon_sha256":"36dd94204b79e0df20f32acc15c1778ee23841da3513ae16391f9c1de0224c56"},"schema_version":"1.0"},"canonical_sha256":"39f3ac594c91ccd6e2c18c543ffe28e01196a3fca64a8bfc5ccceb40f45b8d6f","source":{"kind":"arxiv","id":"2111.11056","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.11056","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"arxiv_version","alias_value":"2111.11056v1","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.11056","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_12","alias_value":"HHZ2YWKMSHGN","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_16","alias_value":"HHZ2YWKMSHGNNYWB","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_8","alias_value":"HHZ2YWKM","created_at":"2026-07-05T03:33:59Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:HHZ2YWKMSHGNNYWBRRKD77RI4A","target":"record","payload":{"canonical_record":{"source":{"id":"2111.11056","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-22T08:54:34Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"76b5ac6af8ceb4d61d18cd2aafcfbd0eeabf4f00a2cefc271ae23dd4bb7b8479","abstract_canon_sha256":"36dd94204b79e0df20f32acc15c1778ee23841da3513ae16391f9c1de0224c56"},"schema_version":"1.0"},"canonical_sha256":"39f3ac594c91ccd6e2c18c543ffe28e01196a3fca64a8bfc5ccceb40f45b8d6f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T03:33:59.375355Z","signature_b64":"VcvmhfAVx34KnDQUljKMGj9t+chy9urH0cqZNu6F9Pypl7CW6QJePJUi1TIo+oMTObg7CK14Z7IZQE9BRINrAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"39f3ac594c91ccd6e2c18c543ffe28e01196a3fca64a8bfc5ccceb40f45b8d6f","last_reissued_at":"2026-07-05T03:33:59.374945Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T03:33:59.374945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2111.11056","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uqikThaSaBNI4qOxOmAxcVCZ+XE5dkYQv31xFEoRwiyPor1soMVC0wDaXdxcHx+hGsTzgIuAMimTjiZfo2KQAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:35:10.749835Z"},"content_sha256":"286ec7fd59a236aab9e3533e9401fa66bac5833f508b339e7a468dcffac4f3df","schema_version":"1.0","event_id":"sha256:286ec7fd59a236aab9e3533e9401fa66bac5833f508b339e7a468dcffac4f3df"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:HHZ2YWKMSHGNNYWBRRKD77RI4A","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Arnout Van Messem, Maura Pintor, Utku Ozbulak, Wesley De Neve","submitted_at":"2021-11-22T08:54:34Z","abstract_excerpt":"Although ImageNet was initially proposed as a dataset for performance benchmarking in the domain of computer vision, it also enabled a variety of other research efforts. Adversarial machine learning is one such research effort, employing deceptive inputs to fool models in making wrong predictions. To evaluate attacks and defenses in the field of adversarial machine learning, ImageNet remains one of the most frequently used datasets. However, a topic that is yet to be investigated is the nature of the classes into which adversarial examples are misclassified. In this paper, we perform a detaile"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.11056","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2111.11056/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T03:33:59Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"dGBOSPEnvMW6uIWNwSQmOISkD0Mkagm0EO5lMLo/ZbcvAFQl6lw45jLPRMj9RVORjjKsQLS9gTqwqgKETzRDBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T22:35:10.750338Z"},"content_sha256":"be1fabdae52e72070d5f72adc12258bb3c04c1214932fc4ef38afb35415165dd","schema_version":"1.0","event_id":"sha256:be1fabdae52e72070d5f72adc12258bb3c04c1214932fc4ef38afb35415165dd"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/bundle.json","state_url":"https://pith.science/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T22:35:10Z","links":{"resolver":"https://pith.science/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A","bundle":"https://pith.science/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/bundle.json","state":"https://pith.science/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HHZ2YWKMSHGNNYWBRRKD77RI4A/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:HHZ2YWKMSHGNNYWBRRKD77RI4A","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"36dd94204b79e0df20f32acc15c1778ee23841da3513ae16391f9c1de0224c56","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-22T08:54:34Z","title_canon_sha256":"76b5ac6af8ceb4d61d18cd2aafcfbd0eeabf4f00a2cefc271ae23dd4bb7b8479"},"schema_version":"1.0","source":{"id":"2111.11056","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2111.11056","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"arxiv_version","alias_value":"2111.11056v1","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2111.11056","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_12","alias_value":"HHZ2YWKMSHGN","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_16","alias_value":"HHZ2YWKMSHGNNYWB","created_at":"2026-07-05T03:33:59Z"},{"alias_kind":"pith_short_8","alias_value":"HHZ2YWKM","created_at":"2026-07-05T03:33:59Z"}],"graph_snapshots":[{"event_id":"sha256:be1fabdae52e72070d5f72adc12258bb3c04c1214932fc4ef38afb35415165dd","target":"graph","created_at":"2026-07-05T03:33:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2111.11056/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although ImageNet was initially proposed as a dataset for performance benchmarking in the domain of computer vision, it also enabled a variety of other research efforts. Adversarial machine learning is one such research effort, employing deceptive inputs to fool models in making wrong predictions. To evaluate attacks and defenses in the field of adversarial machine learning, ImageNet remains one of the most frequently used datasets. However, a topic that is yet to be investigated is the nature of the classes into which adversarial examples are misclassified. In this paper, we perform a detaile","authors_text":"Arnout Van Messem, Maura Pintor, Utku Ozbulak, Wesley De Neve","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-22T08:54:34Z","title":"Evaluating Adversarial Attacks on ImageNet: A Reality Check on Misclassification Classes"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2111.11056","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:286ec7fd59a236aab9e3533e9401fa66bac5833f508b339e7a468dcffac4f3df","target":"record","created_at":"2026-07-05T03:33:59Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"36dd94204b79e0df20f32acc15c1778ee23841da3513ae16391f9c1de0224c56","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-11-22T08:54:34Z","title_canon_sha256":"76b5ac6af8ceb4d61d18cd2aafcfbd0eeabf4f00a2cefc271ae23dd4bb7b8479"},"schema_version":"1.0","source":{"id":"2111.11056","kind":"arxiv","version":1}},"canonical_sha256":"39f3ac594c91ccd6e2c18c543ffe28e01196a3fca64a8bfc5ccceb40f45b8d6f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"39f3ac594c91ccd6e2c18c543ffe28e01196a3fca64a8bfc5ccceb40f45b8d6f","first_computed_at":"2026-07-05T03:33:59.374945Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T03:33:59.374945Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"VcvmhfAVx34KnDQUljKMGj9t+chy9urH0cqZNu6F9Pypl7CW6QJePJUi1TIo+oMTObg7CK14Z7IZQE9BRINrAA==","signature_status":"signed_v1","signed_at":"2026-07-05T03:33:59.375355Z","signed_message":"canonical_sha256_bytes"},"source_id":"2111.11056","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:286ec7fd59a236aab9e3533e9401fa66bac5833f508b339e7a468dcffac4f3df","sha256:be1fabdae52e72070d5f72adc12258bb3c04c1214932fc4ef38afb35415165dd"],"state_sha256":"4c17d36705627a63dee17442ea8874d9843341447c523837d61fddd1d08ff969"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+nRQtIuGXim87Dv8ufhUQMyt6O5VRLhgyuHHXE2Zg8+zlnsDiC0Deryfhc7+Jhta0ysIIHiR//3BfWiIx0uQAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T22:35:10.754899Z","bundle_sha256":"4f200ab7afd78b788008c831bfe6cd7d0149396f20ff98828dbd5440eb786e59"}}