{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2018:I6IQL4IADDZ3NHQPPLZ6DV2LF5","short_pith_number":"pith:I6IQL4IA","canonical_record":{"source":{"id":"1809.07016","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-19T05:01:06Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"256cfc6de9551e833dfa6156cec6f6b5301cce5ee535a2f28e73c39ad166eeac","abstract_canon_sha256":"2714cc9a2194c2574f0dc287b8644018968815cd37de5eac7d983048b716a25b"},"schema_version":"1.0"},"canonical_sha256":"479105f10018f3b69e0f7af3e1d74b2f6226875d5050f557760bf8a6c469e617","source":{"kind":"arxiv","id":"1809.07016","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.07016","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"arxiv_version","alias_value":"1809.07016v4","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.07016","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"pith_short_12","alias_value":"I6IQL4IADDZ3","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"I6IQL4IADDZ3NHQP","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"I6IQL4IA","created_at":"2026-05-18T12:32:28Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2018:I6IQL4IADDZ3NHQPPLZ6DV2LF5","target":"record","payload":{"canonical_record":{"source":{"id":"1809.07016","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-19T05:01:06Z","cross_cats_sorted":["cs.CV","cs.LG"],"title_canon_sha256":"256cfc6de9551e833dfa6156cec6f6b5301cce5ee535a2f28e73c39ad166eeac","abstract_canon_sha256":"2714cc9a2194c2574f0dc287b8644018968815cd37de5eac7d983048b716a25b"},"schema_version":"1.0"},"canonical_sha256":"479105f10018f3b69e0f7af3e1d74b2f6226875d5050f557760bf8a6c469e617","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:40:49.515786Z","signature_b64":"sQp9psMGaJ6+Eh2HPTJAShvr2U0pzdUMPVj87TweRlSwQxEV1154ir7vlria0i8s0gpCq7TDCTXJdXZqFLIwBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"479105f10018f3b69e0f7af3e1d74b2f6226875d5050f557760bf8a6c469e617","last_reissued_at":"2026-05-17T23:40:49.515122Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:40:49.515122Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1809.07016","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:40:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"r5dz08aE5NLWB/KkxxALE3/phtbBE7qLxP57WbSbO6T2j+x8AV6uVckWgzVv5z1K74KuIWQAeWpUFcUsX/OWAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T23:10:36.188831Z"},"content_sha256":"decc7b0f85917ca9af654fb67d279e0d0fc10c8bcd54261a2e6b997c98a9ffb7","schema_version":"1.0","event_id":"sha256:decc7b0f85917ca9af654fb67d279e0d0fc10c8bcd54261a2e6b997c98a9ffb7"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2018:I6IQL4IADDZ3NHQPPLZ6DV2LF5","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Generating 3D Adversarial Point Clouds","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","cs.LG"],"primary_cat":"cs.CR","authors_text":"Bo Li, Charles R. Qi, Chong Xiang","submitted_at":"2018-09-19T05:01:06Z","abstract_excerpt":"Deep neural networks are known to be vulnerable to adversarial examples which are carefully crafted instances to cause the models to make wrong predictions. While adversarial examples for 2D images and CNNs have been extensively studied, less attention has been paid to 3D data such as point clouds. Given many safety-critical 3D applications such as autonomous driving, it is important to study how adversarial point clouds could affect current deep 3D models. In this work, we propose several novel algorithms to craft adversarial point clouds against PointNet, a widely used deep neural network fo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.07016","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:40:49Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BsRluwplbV4ucM2rJ/wAdnYFnTmROlw8TuPrXGsZ0r6r31XuZW+/pyKhmKn8i0nd8w/H7Ze6gQEKvOWHMiK5AQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T23:10:36.189486Z"},"content_sha256":"ae42f30b75181375791fc660ad8b64ab53f08b94420b619478e5e30a03733418","schema_version":"1.0","event_id":"sha256:ae42f30b75181375791fc660ad8b64ab53f08b94420b619478e5e30a03733418"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/bundle.json","state_url":"https://pith.science/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T23:10:36Z","links":{"resolver":"https://pith.science/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5","bundle":"https://pith.science/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/bundle.json","state":"https://pith.science/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/state.json","well_known_bundle":"https://pith.science/.well-known/pith/I6IQL4IADDZ3NHQPPLZ6DV2LF5/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2018:I6IQL4IADDZ3NHQPPLZ6DV2LF5","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2714cc9a2194c2574f0dc287b8644018968815cd37de5eac7d983048b716a25b","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-19T05:01:06Z","title_canon_sha256":"256cfc6de9551e833dfa6156cec6f6b5301cce5ee535a2f28e73c39ad166eeac"},"schema_version":"1.0","source":{"id":"1809.07016","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1809.07016","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"arxiv_version","alias_value":"1809.07016v4","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1809.07016","created_at":"2026-05-17T23:40:49Z"},{"alias_kind":"pith_short_12","alias_value":"I6IQL4IADDZ3","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_16","alias_value":"I6IQL4IADDZ3NHQP","created_at":"2026-05-18T12:32:28Z"},{"alias_kind":"pith_short_8","alias_value":"I6IQL4IA","created_at":"2026-05-18T12:32:28Z"}],"graph_snapshots":[{"event_id":"sha256:ae42f30b75181375791fc660ad8b64ab53f08b94420b619478e5e30a03733418","target":"graph","created_at":"2026-05-17T23:40:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Deep neural networks are known to be vulnerable to adversarial examples which are carefully crafted instances to cause the models to make wrong predictions. While adversarial examples for 2D images and CNNs have been extensively studied, less attention has been paid to 3D data such as point clouds. Given many safety-critical 3D applications such as autonomous driving, it is important to study how adversarial point clouds could affect current deep 3D models. In this work, we propose several novel algorithms to craft adversarial point clouds against PointNet, a widely used deep neural network fo","authors_text":"Bo Li, Charles R. Qi, Chong Xiang","cross_cats":["cs.CV","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-19T05:01:06Z","title":"Generating 3D Adversarial Point Clouds"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1809.07016","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:decc7b0f85917ca9af654fb67d279e0d0fc10c8bcd54261a2e6b997c98a9ffb7","target":"record","created_at":"2026-05-17T23:40:49Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2714cc9a2194c2574f0dc287b8644018968815cd37de5eac7d983048b716a25b","cross_cats_sorted":["cs.CV","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2018-09-19T05:01:06Z","title_canon_sha256":"256cfc6de9551e833dfa6156cec6f6b5301cce5ee535a2f28e73c39ad166eeac"},"schema_version":"1.0","source":{"id":"1809.07016","kind":"arxiv","version":4}},"canonical_sha256":"479105f10018f3b69e0f7af3e1d74b2f6226875d5050f557760bf8a6c469e617","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"479105f10018f3b69e0f7af3e1d74b2f6226875d5050f557760bf8a6c469e617","first_computed_at":"2026-05-17T23:40:49.515122Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:40:49.515122Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"sQp9psMGaJ6+Eh2HPTJAShvr2U0pzdUMPVj87TweRlSwQxEV1154ir7vlria0i8s0gpCq7TDCTXJdXZqFLIwBA==","signature_status":"signed_v1","signed_at":"2026-05-17T23:40:49.515786Z","signed_message":"canonical_sha256_bytes"},"source_id":"1809.07016","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:decc7b0f85917ca9af654fb67d279e0d0fc10c8bcd54261a2e6b997c98a9ffb7","sha256:ae42f30b75181375791fc660ad8b64ab53f08b94420b619478e5e30a03733418"],"state_sha256":"d5e56eaa9cd480704ccb0f07b5b9fd78c3b5a22af7d7fa706c4683b9413d69e9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"lSnd9AEWl6jMrVNIOTjV68CykdFHzTxgH9mIs+hXi9yynbBo0neFaOyNgwiye85fGEvlXqM8JaSaEp1iZZtYAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T23:10:36.193044Z","bundle_sha256":"4c91ffbbad07bb786b0af318438b9b65663783677af99da6c8e73b53db3ddda9"}}