{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IAWBIE5NGFDERTNXQIKK5UCV2W","short_pith_number":"pith:IAWBIE5N","canonical_record":{"source":{"id":"2405.06049","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-09T18:42:26Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"90673cb7f8a36149dc94cb3db8dd059829694aa9d659604261cb597a5435f5d0","abstract_canon_sha256":"0bf875f3a5e808b9a87510434fb4b71abf0ca47331c50ea62e93cfd115a40258"},"schema_version":"1.0"},"canonical_sha256":"402c1413ad314648cdb78214aed055d5a5dbaa9748dd2b38c5145278af42ac53","source":{"kind":"arxiv","id":"2405.06049","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06049","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06049v1","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06049","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_12","alias_value":"IAWBIE5NGFDE","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_16","alias_value":"IAWBIE5NGFDERTNX","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_8","alias_value":"IAWBIE5N","created_at":"2026-07-05T08:17:34Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IAWBIE5NGFDERTNXQIKK5UCV2W","target":"record","payload":{"canonical_record":{"source":{"id":"2405.06049","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-09T18:42:26Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"90673cb7f8a36149dc94cb3db8dd059829694aa9d659604261cb597a5435f5d0","abstract_canon_sha256":"0bf875f3a5e808b9a87510434fb4b71abf0ca47331c50ea62e93cfd115a40258"},"schema_version":"1.0"},"canonical_sha256":"402c1413ad314648cdb78214aed055d5a5dbaa9748dd2b38c5145278af42ac53","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:17:34.730309Z","signature_b64":"UOPm0WxerRxSGlSLa+feYBvsIftcq3NmbSuzoy4SwMJ0cL6MURTmRCW2M/agRHDdnYMj+k2L6DYHbdsujzWiCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"402c1413ad314648cdb78214aed055d5a5dbaa9748dd2b38c5145278af42ac53","last_reissued_at":"2026-07-05T08:17:34.729901Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:17:34.729901Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.06049","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/hhLc1E6B1bz+O5zfMfxsLpHODXVbNeKm+1c7OzLMyHfyK1lNKAOurmqe3tPl2B3cNjZ0kEovX7nlYinohvCBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T09:05:19.738669Z"},"content_sha256":"22fdca9fc82b02d108694c8ab34726f3b16e4300e9abea048ee34ad2db9af6cf","schema_version":"1.0","event_id":"sha256:22fdca9fc82b02d108694c8ab34726f3b16e4300e9abea048ee34ad2db9af6cf"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IAWBIE5NGFDERTNXQIKK5UCV2W","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"BB-Patch: BlackBox Adversarial Patch-Attack using Zeroth-Order Optimization","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Arun Balaji Buduru, Satyadwyoom Kumar, Saurabh Gupta","submitted_at":"2024-05-09T18:42:26Z","abstract_excerpt":"Deep Learning has become popular due to its vast applications in almost all domains. However, models trained using deep learning are prone to failure for adversarial samples and carry a considerable risk in sensitive applications. Most of these adversarial attack strategies assume that the adversary has access to the training data, the model parameters, and the input during deployment, hence, focus on perturbing the pixel level information present in the input image.\n  Adversarial Patches were introduced to the community which helped in bringing out the vulnerability of deep learning models in"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06049","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.06049/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:17:34Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"5vuhLM9yGSbouSjMRNtC1F2DCLXeFIn3HPqCNOmymZc/coMEjSfFm+E1FER1LgvYzneipHnMs5chmIWk3M+wAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-19T09:05:19.739265Z"},"content_sha256":"7a26db2d3e672d162ae306b7d4bdde6551fbe5d3a41e19e78610b68d26120177","schema_version":"1.0","event_id":"sha256:7a26db2d3e672d162ae306b7d4bdde6551fbe5d3a41e19e78610b68d26120177"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/bundle.json","state_url":"https://pith.science/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-19T09:05:19Z","links":{"resolver":"https://pith.science/pith/IAWBIE5NGFDERTNXQIKK5UCV2W","bundle":"https://pith.science/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/bundle.json","state":"https://pith.science/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IAWBIE5NGFDERTNXQIKK5UCV2W/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IAWBIE5NGFDERTNXQIKK5UCV2W","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0bf875f3a5e808b9a87510434fb4b71abf0ca47331c50ea62e93cfd115a40258","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-09T18:42:26Z","title_canon_sha256":"90673cb7f8a36149dc94cb3db8dd059829694aa9d659604261cb597a5435f5d0"},"schema_version":"1.0","source":{"id":"2405.06049","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.06049","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"arxiv_version","alias_value":"2405.06049v1","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.06049","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_12","alias_value":"IAWBIE5NGFDE","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_16","alias_value":"IAWBIE5NGFDERTNX","created_at":"2026-07-05T08:17:34Z"},{"alias_kind":"pith_short_8","alias_value":"IAWBIE5N","created_at":"2026-07-05T08:17:34Z"}],"graph_snapshots":[{"event_id":"sha256:7a26db2d3e672d162ae306b7d4bdde6551fbe5d3a41e19e78610b68d26120177","target":"graph","created_at":"2026-07-05T08:17:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.06049/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep Learning has become popular due to its vast applications in almost all domains. However, models trained using deep learning are prone to failure for adversarial samples and carry a considerable risk in sensitive applications. Most of these adversarial attack strategies assume that the adversary has access to the training data, the model parameters, and the input during deployment, hence, focus on perturbing the pixel level information present in the input image.\n  Adversarial Patches were introduced to the community which helped in bringing out the vulnerability of deep learning models in","authors_text":"Arun Balaji Buduru, Satyadwyoom Kumar, Saurabh Gupta","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-09T18:42:26Z","title":"BB-Patch: BlackBox Adversarial Patch-Attack using Zeroth-Order Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.06049","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:22fdca9fc82b02d108694c8ab34726f3b16e4300e9abea048ee34ad2db9af6cf","target":"record","created_at":"2026-07-05T08:17:34Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0bf875f3a5e808b9a87510434fb4b71abf0ca47331c50ea62e93cfd115a40258","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-09T18:42:26Z","title_canon_sha256":"90673cb7f8a36149dc94cb3db8dd059829694aa9d659604261cb597a5435f5d0"},"schema_version":"1.0","source":{"id":"2405.06049","kind":"arxiv","version":1}},"canonical_sha256":"402c1413ad314648cdb78214aed055d5a5dbaa9748dd2b38c5145278af42ac53","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"402c1413ad314648cdb78214aed055d5a5dbaa9748dd2b38c5145278af42ac53","first_computed_at":"2026-07-05T08:17:34.729901Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:17:34.729901Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UOPm0WxerRxSGlSLa+feYBvsIftcq3NmbSuzoy4SwMJ0cL6MURTmRCW2M/agRHDdnYMj+k2L6DYHbdsujzWiCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:17:34.730309Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.06049","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:22fdca9fc82b02d108694c8ab34726f3b16e4300e9abea048ee34ad2db9af6cf","sha256:7a26db2d3e672d162ae306b7d4bdde6551fbe5d3a41e19e78610b68d26120177"],"state_sha256":"8c3b18211dc6e50271b5b9e06a3fc67ca4fef6fdeeceb15feb4cd99f0f4275ba"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xzeh6cbnBbUmn1kSC76bVWyQCndK/53jEY/jKnlwO6J8DAGBSkjDfDqx/MuEpkovPLF67KZxmw/R4f0ehToBAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-19T09:05:19.743063Z","bundle_sha256":"66290539774d44905dc997db0ba1d70326b7f4b28ad5c94fcd133a8010427e62"}}