{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2025:HR5NGLXA6XXM2Q355ABBTXQ6H6","short_pith_number":"pith:HR5NGLXA","canonical_record":{"source":{"id":"2501.08258","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-14T17:10:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"758ffbe649a09ebdc55a6d7d5da93c1039c870cad9c8f48a09b2dd704f6171ed","abstract_canon_sha256":"debc576057199f3d97d01ceb533162a55038d8498a162a8c0b9a6f7ad5f4d302"},"schema_version":"1.0"},"canonical_sha256":"3c7ad32ee0f5eecd437de80219de1e3f92611b23d36161c328c4401c2c20ed5a","source":{"kind":"arxiv","id":"2501.08258","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.08258","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"arxiv_version","alias_value":"2501.08258v2","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.08258","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_12","alias_value":"HR5NGLXA6XXM","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_16","alias_value":"HR5NGLXA6XXM2Q35","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_8","alias_value":"HR5NGLXA","created_at":"2026-07-05T10:01:39Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2025:HR5NGLXA6XXM2Q355ABBTXQ6H6","target":"record","payload":{"canonical_record":{"source":{"id":"2501.08258","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-14T17:10:02Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"758ffbe649a09ebdc55a6d7d5da93c1039c870cad9c8f48a09b2dd704f6171ed","abstract_canon_sha256":"debc576057199f3d97d01ceb533162a55038d8498a162a8c0b9a6f7ad5f4d302"},"schema_version":"1.0"},"canonical_sha256":"3c7ad32ee0f5eecd437de80219de1e3f92611b23d36161c328c4401c2c20ed5a","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T10:01:39.837483Z","signature_b64":"ap6CCmCEMGrq/TRwf9szE9zxc+0pawdVDUYsOcPMdHF2pODcChpQihlkX0tHc5cxh24XjRb9gZxLGV5OMtdjBg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"3c7ad32ee0f5eecd437de80219de1e3f92611b23d36161c328c4401c2c20ed5a","last_reissued_at":"2026-07-05T10:01:39.837102Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T10:01:39.837102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2501.08258","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:01:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uIVuu0zmqYkvQxfgC4qD+qK2nSd034LahQBtnJxmdTSrQ4Flty6cohtKsoGLvkxdYSaRaTksZEEtbGqfOx02Cg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T16:34:21.784333Z"},"content_sha256":"7bf6feffaaf965db2bbc9d8d6d8ab0d1398083f2a09e5fab432f86369c13c023","schema_version":"1.0","event_id":"sha256:7bf6feffaaf965db2bbc9d8d6d8ab0d1398083f2a09e5fab432f86369c13c023"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2025:HR5NGLXA6XXM2Q355ABBTXQ6H6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.CV","authors_text":"Asaf Shabtai, Ben Nassi, Dudi Biton, Jacob Shams, Satoru Koda, Yuval Elovici","submitted_at":"2025-01-14T17:10:02Z","abstract_excerpt":"The traditional learning process of patch-based adversarial attacks, conducted in the digital domain and then applied in the physical domain (e.g., via printed stickers), may suffer from reduced performance due to adversarial patches' limited transferability from the digital domain to the physical domain. Given that previous studies have considered using projectors to apply adversarial attacks, we raise the following question: can adversarial learning (i.e., patch generation) be performed entirely in the physical domain with a projector? In this work, we propose the Physical-domain Adversarial"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.08258","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2501.08258/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T10:01:39Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2QptGJ1fnr8syIKkOMuiA0//5BqZZfSOPbBZ2z/nm4GR/+C4PRyj4aiBjOIZKWr3JsrmTmdPpJX6PE/pwg2yAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T16:34:21.784730Z"},"content_sha256":"fa9837fb9a1752f2bf772cb7016370672e70502afdc473e92a937facbd14b1e9","schema_version":"1.0","event_id":"sha256:fa9837fb9a1752f2bf772cb7016370672e70502afdc473e92a937facbd14b1e9"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/bundle.json","state_url":"https://pith.science/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T16:34:21Z","links":{"resolver":"https://pith.science/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6","bundle":"https://pith.science/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/bundle.json","state":"https://pith.science/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/HR5NGLXA6XXM2Q355ABBTXQ6H6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:HR5NGLXA6XXM2Q355ABBTXQ6H6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"debc576057199f3d97d01ceb533162a55038d8498a162a8c0b9a6f7ad5f4d302","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-14T17:10:02Z","title_canon_sha256":"758ffbe649a09ebdc55a6d7d5da93c1039c870cad9c8f48a09b2dd704f6171ed"},"schema_version":"1.0","source":{"id":"2501.08258","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2501.08258","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"arxiv_version","alias_value":"2501.08258v2","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2501.08258","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_12","alias_value":"HR5NGLXA6XXM","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_16","alias_value":"HR5NGLXA6XXM2Q35","created_at":"2026-07-05T10:01:39Z"},{"alias_kind":"pith_short_8","alias_value":"HR5NGLXA","created_at":"2026-07-05T10:01:39Z"}],"graph_snapshots":[{"event_id":"sha256:fa9837fb9a1752f2bf772cb7016370672e70502afdc473e92a937facbd14b1e9","target":"graph","created_at":"2026-07-05T10:01:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2501.08258/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The traditional learning process of patch-based adversarial attacks, conducted in the digital domain and then applied in the physical domain (e.g., via printed stickers), may suffer from reduced performance due to adversarial patches' limited transferability from the digital domain to the physical domain. Given that previous studies have considered using projectors to apply adversarial attacks, we raise the following question: can adversarial learning (i.e., patch generation) be performed entirely in the physical domain with a projector? In this work, we propose the Physical-domain Adversarial","authors_text":"Asaf Shabtai, Ben Nassi, Dudi Biton, Jacob Shams, Satoru Koda, Yuval Elovici","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-14T17:10:02Z","title":"Towards an End-to-End (E2E) Adversarial Learning and Application in the Physical World"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2501.08258","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:7bf6feffaaf965db2bbc9d8d6d8ab0d1398083f2a09e5fab432f86369c13c023","target":"record","created_at":"2026-07-05T10:01:39Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"debc576057199f3d97d01ceb533162a55038d8498a162a8c0b9a6f7ad5f4d302","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2025-01-14T17:10:02Z","title_canon_sha256":"758ffbe649a09ebdc55a6d7d5da93c1039c870cad9c8f48a09b2dd704f6171ed"},"schema_version":"1.0","source":{"id":"2501.08258","kind":"arxiv","version":2}},"canonical_sha256":"3c7ad32ee0f5eecd437de80219de1e3f92611b23d36161c328c4401c2c20ed5a","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"3c7ad32ee0f5eecd437de80219de1e3f92611b23d36161c328c4401c2c20ed5a","first_computed_at":"2026-07-05T10:01:39.837102Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:01:39.837102Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ap6CCmCEMGrq/TRwf9szE9zxc+0pawdVDUYsOcPMdHF2pODcChpQihlkX0tHc5cxh24XjRb9gZxLGV5OMtdjBg==","signature_status":"signed_v1","signed_at":"2026-07-05T10:01:39.837483Z","signed_message":"canonical_sha256_bytes"},"source_id":"2501.08258","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:7bf6feffaaf965db2bbc9d8d6d8ab0d1398083f2a09e5fab432f86369c13c023","sha256:fa9837fb9a1752f2bf772cb7016370672e70502afdc473e92a937facbd14b1e9"],"state_sha256":"e0e3e93cf58c42dc02c2cd904fcd9a801cfcb206dc3515eff9dea0c26a74e49f"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"t5r1UjTHz9PI4jz0VOeSo1ntiR7HfPW3g+6344fNuqYKykvn34i0EyXgqjppmBA4l9fAjsqcgs3Vr/oZyNmmDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T16:34:21.787975Z","bundle_sha256":"de6736ff0f874dcc8756064209d89849c8f119810aa36a0988668fb42a6ba38a"}}