{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:IFZFUVZTM4KJYLJT6BNCQNSPFE","short_pith_number":"pith:IFZFUVZT","canonical_record":{"source":{"id":"2409.06793","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-10T18:02:51Z","cross_cats_sorted":["cs.IR","cs.LG"],"title_canon_sha256":"c72a2c28e24eb33d4456a7b31d9b518cd15001f1038fae41273ad2ae6abdb9bd","abstract_canon_sha256":"d4c080e027e64486b2752656cae8a076eaf01d37a97ea37e5977752cf5288074"},"schema_version":"1.0"},"canonical_sha256":"41725a573367149c2d33f05a28364f29394423ce3becc8f385ca73a1c1aad721","source":{"kind":"arxiv","id":"2409.06793","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.06793","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.06793v2","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.06793","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_12","alias_value":"IFZFUVZTM4KJ","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_16","alias_value":"IFZFUVZTM4KJYLJT","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_8","alias_value":"IFZFUVZT","created_at":"2026-07-05T09:10:50Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:IFZFUVZTM4KJYLJT6BNCQNSPFE","target":"record","payload":{"canonical_record":{"source":{"id":"2409.06793","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-10T18:02:51Z","cross_cats_sorted":["cs.IR","cs.LG"],"title_canon_sha256":"c72a2c28e24eb33d4456a7b31d9b518cd15001f1038fae41273ad2ae6abdb9bd","abstract_canon_sha256":"d4c080e027e64486b2752656cae8a076eaf01d37a97ea37e5977752cf5288074"},"schema_version":"1.0"},"canonical_sha256":"41725a573367149c2d33f05a28364f29394423ce3becc8f385ca73a1c1aad721","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:10:50.099848Z","signature_b64":"lvK9ZO3qJ5qfDtMVzvYa4iL99ECo9De5MNmECwJl6Iu9l3+myrV7Hnte4/UQLvBHjVPcEbTVoxLyun07J9RYCQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"41725a573367149c2d33f05a28364f29394423ce3becc8f385ca73a1c1aad721","last_reissued_at":"2026-07-05T09:10:50.099439Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:10:50.099439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2409.06793","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:10:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vUaE9pNO8w4rM7AXCYsQ8tERPqwNukV03HSPbxs5Ha/z/Fx9L55JjbbYNYW9tGa+n/Cvq8XtGjysoj31GdsPAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:39:21.821201Z"},"content_sha256":"d51a73ba9fdbef76baefc477804e42fb037dd1e036939c5021d6e8b56ed9b469","schema_version":"1.0","event_id":"sha256:d51a73ba9fdbef76baefc477804e42fb037dd1e036939c5021d6e8b56ed9b469"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:IFZFUVZTM4KJYLJT6BNCQNSPFE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attacks to Multi-Modal Models","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.IR","cs.LG"],"primary_cat":"cs.CR","authors_text":"Haibo Yang, Minghong Fang, Xin Hu, Zhihao Dou, Zhuqing Liu","submitted_at":"2024-09-10T18:02:51Z","abstract_excerpt":"Multi-modal models have gained significant attention due to their powerful capabilities. These models effectively align embeddings across diverse data modalities, showcasing superior performance in downstream tasks compared to their unimodal counterparts. Recent study showed that the attacker can manipulate an image or audio file by altering it in such a way that its embedding matches that of an attacker-chosen targeted input, thereby deceiving downstream models. However, this method often underperforms due to inherent disparities in data from different modalities. In this paper, we introduce "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.06793","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2409.06793/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:10:50Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"VqIly9f6D0hQKuFOPtPlKRQvRDEh94wwYrqi1DPQR2ai0EctNCWGG4Mx3PZ+Xt2ZZNGdxR3lT1ezYrfbTF83Dg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T23:39:21.821745Z"},"content_sha256":"6faa20d21a976f365ff8fdbbc7b2f093a8dff5c9735482f3f7d61e377c820969","schema_version":"1.0","event_id":"sha256:6faa20d21a976f365ff8fdbbc7b2f093a8dff5c9735482f3f7d61e377c820969"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/bundle.json","state_url":"https://pith.science/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T23:39:21Z","links":{"resolver":"https://pith.science/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE","bundle":"https://pith.science/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/bundle.json","state":"https://pith.science/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IFZFUVZTM4KJYLJT6BNCQNSPFE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:IFZFUVZTM4KJYLJT6BNCQNSPFE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"d4c080e027e64486b2752656cae8a076eaf01d37a97ea37e5977752cf5288074","cross_cats_sorted":["cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-10T18:02:51Z","title_canon_sha256":"c72a2c28e24eb33d4456a7b31d9b518cd15001f1038fae41273ad2ae6abdb9bd"},"schema_version":"1.0","source":{"id":"2409.06793","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2409.06793","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"arxiv_version","alias_value":"2409.06793v2","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2409.06793","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_12","alias_value":"IFZFUVZTM4KJ","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_16","alias_value":"IFZFUVZTM4KJYLJT","created_at":"2026-07-05T09:10:50Z"},{"alias_kind":"pith_short_8","alias_value":"IFZFUVZT","created_at":"2026-07-05T09:10:50Z"}],"graph_snapshots":[{"event_id":"sha256:6faa20d21a976f365ff8fdbbc7b2f093a8dff5c9735482f3f7d61e377c820969","target":"graph","created_at":"2026-07-05T09:10:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2409.06793/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Multi-modal models have gained significant attention due to their powerful capabilities. These models effectively align embeddings across diverse data modalities, showcasing superior performance in downstream tasks compared to their unimodal counterparts. Recent study showed that the attacker can manipulate an image or audio file by altering it in such a way that its embedding matches that of an attacker-chosen targeted input, thereby deceiving downstream models. However, this method often underperforms due to inherent disparities in data from different modalities. In this paper, we introduce ","authors_text":"Haibo Yang, Minghong Fang, Xin Hu, Zhihao Dou, Zhuqing Liu","cross_cats":["cs.IR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-10T18:02:51Z","title":"Adversarial Attacks to Multi-Modal Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2409.06793","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:d51a73ba9fdbef76baefc477804e42fb037dd1e036939c5021d6e8b56ed9b469","target":"record","created_at":"2026-07-05T09:10:50Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"d4c080e027e64486b2752656cae8a076eaf01d37a97ea37e5977752cf5288074","cross_cats_sorted":["cs.IR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-09-10T18:02:51Z","title_canon_sha256":"c72a2c28e24eb33d4456a7b31d9b518cd15001f1038fae41273ad2ae6abdb9bd"},"schema_version":"1.0","source":{"id":"2409.06793","kind":"arxiv","version":2}},"canonical_sha256":"41725a573367149c2d33f05a28364f29394423ce3becc8f385ca73a1c1aad721","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"41725a573367149c2d33f05a28364f29394423ce3becc8f385ca73a1c1aad721","first_computed_at":"2026-07-05T09:10:50.099439Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:10:50.099439Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"lvK9ZO3qJ5qfDtMVzvYa4iL99ECo9De5MNmECwJl6Iu9l3+myrV7Hnte4/UQLvBHjVPcEbTVoxLyun07J9RYCQ==","signature_status":"signed_v1","signed_at":"2026-07-05T09:10:50.099848Z","signed_message":"canonical_sha256_bytes"},"source_id":"2409.06793","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:d51a73ba9fdbef76baefc477804e42fb037dd1e036939c5021d6e8b56ed9b469","sha256:6faa20d21a976f365ff8fdbbc7b2f093a8dff5c9735482f3f7d61e377c820969"],"state_sha256":"421274cefa8d03f9ac079b3166ce4e8a772c0148c764333822ad75d673db32ce"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"0o53B8VRF9iPZlutHZDlvGaBBXAeOBd5h1H58t/dXcJMgvBAx+5V+zT1sJcHkyG2zz37zhdKN54O0VW5AwQjCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T23:39:21.825714Z","bundle_sha256":"1f0a0b189877533c94f590777529391a4e47835f52ed231c5feff88a998edffe"}}