{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2024:HJOJJ35KK3I52AMPHNODY4CN4K","short_pith_number":"pith:HJOJJ35K","schema_version":"1.0","canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","source":{"kind":"arxiv","id":"2412.14113","version":4},"attestation_state":"computed","paper":{"title":"Adversarial Hubness in Multi-Modal Retrieval","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.CR","authors_text":"Collin Zhang, Fnu Suya, Rishi Jha, Tingwei Zhang, Vitaly Shmatikov","submitted_at":"2024-12-18T17:58:58Z","abstract_excerpt":"Hubness is a phenomenon in high-dimensional vector spaces where a point from the natural distribution is unusually close to many other points. This is a well-known problem in information retrieval that causes some items to accidentally (and incorrectly) appear relevant to many queries.\n  In this paper, we investigate how attackers can exploit hubness to turn any image or audio input in a multi-modal retrieval system into an adversarial hub. Adversarial hubs can be used to inject universal adversarial content (e.g., spam) that will be retrieved in response to thousands of different queries, and"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2412.14113","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-12-18T17:58:58Z","cross_cats_sorted":["cs.IR"],"title_canon_sha256":"ebac14ad0c011f63bc7f1493a7113084a0f6e17dc84d8baea2e813f09e5b4ffa","abstract_canon_sha256":"e4a819e2b2b84144109bb8778cc5f7f10e535202e32371ed2bd431cef7c490f1"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:39:01.635089Z","signature_b64":"Hn4185Ymn7mqH3ZUqJvZ1rrnXF3zsCGp+0RlpjhR59m7I0naghW8+10CaWHW/eorEzGOwDhoNIaX0qqgs0FbBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3a5c94efaa56d1dd018f3b5c3c704de2934cde8afc3aba3b521920e5eafbf427","last_reissued_at":"2026-05-17T23:39:01.634377Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:39:01.634377Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Adversarial Hubness in Multi-Modal Retrieval","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR"],"primary_cat":"cs.CR","authors_text":"Collin Zhang, Fnu Suya, Rishi Jha, Tingwei Zhang, Vitaly Shmatikov","submitted_at":"2024-12-18T17:58:58Z","abstract_excerpt":"Hubness is a phenomenon in high-dimensional vector spaces where a point from the natural distribution is unusually close to many other points. This is a well-known problem in information retrieval that causes some items to accidentally (and incorrectly) appear relevant to many queries.\n  In this paper, we investigate how attackers can exploit hubness to turn any image or audio input in a multi-modal retrieval system into an adversarial hub. Adversarial hubs can be used to inject universal adversarial content (e.g., spam) that will be retrieved in response to thousands of different queries, and"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2412.14113","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2412.14113","created_at":"2026-05-17T23:39:01.634494+00:00"},{"alias_kind":"arxiv_version","alias_value":"2412.14113v4","created_at":"2026-05-17T23:39:01.634494+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2412.14113","created_at":"2026-05-17T23:39:01.634494+00:00"},{"alias_kind":"pith_short_12","alias_value":"HJOJJ35KK3I5","created_at":"2026-05-18T12:33:37.589309+00:00"},{"alias_kind":"pith_short_16","alias_value":"HJOJJ35KK3I52AMP","created_at":"2026-05-18T12:33:37.589309+00:00"},{"alias_kind":"pith_short_8","alias_value":"HJOJJ35K","created_at":"2026-05-18T12:33:37.589309+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":1,"internal_anchor_count":1,"sample":[{"citing_arxiv_id":"2604.27674","citing_title":"One Single Hub Text Breaks CLIP: Identifying Vulnerabilities in Cross-Modal Encoders via Hubness","ref_index":48,"is_internal_anchor":true}]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K","json":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K.json","graph_json":"https://pith.science/api/pith-number/HJOJJ35KK3I52AMPHNODY4CN4K/graph.json","events_json":"https://pith.science/api/pith-number/HJOJJ35KK3I52AMPHNODY4CN4K/events.json","paper":"https://pith.science/paper/HJOJJ35K"},"agent_actions":{"view_html":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K","download_json":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K.json","view_paper":"https://pith.science/paper/HJOJJ35K","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2412.14113&json=true","fetch_graph":"https://pith.science/api/pith-number/HJOJJ35KK3I52AMPHNODY4CN4K/graph.json","fetch_events":"https://pith.science/api/pith-number/HJOJJ35KK3I52AMPHNODY4CN4K/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/action/timestamp_anchor","attest_storage":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/action/storage_attestation","attest_author":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/action/author_attestation","sign_citation":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/action/citation_signature","submit_replication":"https://pith.science/pith/HJOJJ35KK3I52AMPHNODY4CN4K/action/replication_record"}},"created_at":"2026-05-17T23:39:01.634494+00:00","updated_at":"2026-05-17T23:39:01.634494+00:00"}