{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:IM2FFNFKDTWY35L5DEK6ZU4N6O","short_pith_number":"pith:IM2FFNFK","canonical_record":{"source":{"id":"2010.01329","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2020-10-03T11:25:47Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"a77cc79c2cfb67f9e5b6da4f7780d23ca762ece4defac0e64f771f3de38cda16","abstract_canon_sha256":"f9169eb3b6aabfbf09050dcf704144c0a94772c8d8cd47ddb13a1fc51b7685e0"},"schema_version":"1.0"},"canonical_sha256":"433452b4aa1ced8df57d1915ecd38df3ac29b3895410e36dfabfe9440db52d52","source":{"kind":"arxiv","id":"2010.01329","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.01329","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"arxiv_version","alias_value":"2010.01329v1","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.01329","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_12","alias_value":"IM2FFNFKDTWY","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_16","alias_value":"IM2FFNFKDTWY35L5","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_8","alias_value":"IM2FFNFK","created_at":"2026-07-05T01:40:04Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:IM2FFNFKDTWY35L5DEK6ZU4N6O","target":"record","payload":{"canonical_record":{"source":{"id":"2010.01329","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2020-10-03T11:25:47Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"a77cc79c2cfb67f9e5b6da4f7780d23ca762ece4defac0e64f771f3de38cda16","abstract_canon_sha256":"f9169eb3b6aabfbf09050dcf704144c0a94772c8d8cd47ddb13a1fc51b7685e0"},"schema_version":"1.0"},"canonical_sha256":"433452b4aa1ced8df57d1915ecd38df3ac29b3895410e36dfabfe9440db52d52","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:40:04.282234Z","signature_b64":"WTp1TOrl0NbHHasufJtTN9TTUjKcolopDewkbnn57czGVT9byTnbVxCnX4kd9pXTbNkkfx83ffHnt4Pp6b90DQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"433452b4aa1ced8df57d1915ecd38df3ac29b3895410e36dfabfe9440db52d52","last_reissued_at":"2026-07-05T01:40:04.281806Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:40:04.281806Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2010.01329","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:40:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fmBOgo2xQcd/JEU5sPD1sXUcVccLD3ubgcua4okUCH6gFk5Wzfh82UlFVuFvFGlCFJYkFw/U/ERyOj5ACxKmAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:47:06.342328Z"},"content_sha256":"a90a8be29ae3cb0dea7b5ea939fffb6d27cf050718094a6b66fddd397f046493","schema_version":"1.0","event_id":"sha256:a90a8be29ae3cb0dea7b5ea939fffb6d27cf050718094a6b66fddd397f046493"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:IM2FFNFKDTWY35L5DEK6ZU4N6O","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Multi-Step Adversarial Perturbations on Recommender Systems Embeddings","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.IR","authors_text":"Alejandro Bellog\\'in, Felice Antonio Merra, Tommaso Di Noia, Vito Walter Anelli, Yashar Deldjoo","submitted_at":"2020-10-03T11:25:47Z","abstract_excerpt":"Recommender systems (RSs) have attained exceptional performance in learning users' preferences and helping them in finding the most suitable products. Recent advances in adversarial machine learning (AML) in the computer vision domain have raised interests in the security of state-of-the-art model-based recommenders. Recently, worrying deterioration of recommendation accuracy has been acknowledged on several state-of-the-art model-based recommenders (e.g., BPR-MF) when machine-learned adversarial perturbations contaminate model parameters. However, while the single-step fast gradient sign meth"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.01329","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2010.01329/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:40:04Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Kh15k7RR7XuzHHJ/sVS1bDgYH0GQ3R5WSeCioHL05SVY/GQbDaplCRV20vS6t1gptygDxdKyRKU0D652ScibDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-03T21:47:06.343250Z"},"content_sha256":"178c62b54490e81864c533f103b8aa7aefa3e8f3ae1fad0e01e1aedecdb27359","schema_version":"1.0","event_id":"sha256:178c62b54490e81864c533f103b8aa7aefa3e8f3ae1fad0e01e1aedecdb27359"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/bundle.json","state_url":"https://pith.science/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-03T21:47:06Z","links":{"resolver":"https://pith.science/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O","bundle":"https://pith.science/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/bundle.json","state":"https://pith.science/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IM2FFNFKDTWY35L5DEK6ZU4N6O/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:IM2FFNFKDTWY35L5DEK6ZU4N6O","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f9169eb3b6aabfbf09050dcf704144c0a94772c8d8cd47ddb13a1fc51b7685e0","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2020-10-03T11:25:47Z","title_canon_sha256":"a77cc79c2cfb67f9e5b6da4f7780d23ca762ece4defac0e64f771f3de38cda16"},"schema_version":"1.0","source":{"id":"2010.01329","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2010.01329","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"arxiv_version","alias_value":"2010.01329v1","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2010.01329","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_12","alias_value":"IM2FFNFKDTWY","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_16","alias_value":"IM2FFNFKDTWY35L5","created_at":"2026-07-05T01:40:04Z"},{"alias_kind":"pith_short_8","alias_value":"IM2FFNFK","created_at":"2026-07-05T01:40:04Z"}],"graph_snapshots":[{"event_id":"sha256:178c62b54490e81864c533f103b8aa7aefa3e8f3ae1fad0e01e1aedecdb27359","target":"graph","created_at":"2026-07-05T01:40:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2010.01329/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recommender systems (RSs) have attained exceptional performance in learning users' preferences and helping them in finding the most suitable products. Recent advances in adversarial machine learning (AML) in the computer vision domain have raised interests in the security of state-of-the-art model-based recommenders. Recently, worrying deterioration of recommendation accuracy has been acknowledged on several state-of-the-art model-based recommenders (e.g., BPR-MF) when machine-learned adversarial perturbations contaminate model parameters. However, while the single-step fast gradient sign meth","authors_text":"Alejandro Bellog\\'in, Felice Antonio Merra, Tommaso Di Noia, Vito Walter Anelli, Yashar Deldjoo","cross_cats":["cs.CR"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2020-10-03T11:25:47Z","title":"Multi-Step Adversarial Perturbations on Recommender Systems Embeddings"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2010.01329","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:a90a8be29ae3cb0dea7b5ea939fffb6d27cf050718094a6b66fddd397f046493","target":"record","created_at":"2026-07-05T01:40:04Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f9169eb3b6aabfbf09050dcf704144c0a94772c8d8cd47ddb13a1fc51b7685e0","cross_cats_sorted":["cs.CR"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.IR","submitted_at":"2020-10-03T11:25:47Z","title_canon_sha256":"a77cc79c2cfb67f9e5b6da4f7780d23ca762ece4defac0e64f771f3de38cda16"},"schema_version":"1.0","source":{"id":"2010.01329","kind":"arxiv","version":1}},"canonical_sha256":"433452b4aa1ced8df57d1915ecd38df3ac29b3895410e36dfabfe9440db52d52","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"433452b4aa1ced8df57d1915ecd38df3ac29b3895410e36dfabfe9440db52d52","first_computed_at":"2026-07-05T01:40:04.281806Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:40:04.281806Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"WTp1TOrl0NbHHasufJtTN9TTUjKcolopDewkbnn57czGVT9byTnbVxCnX4kd9pXTbNkkfx83ffHnt4Pp6b90DQ==","signature_status":"signed_v1","signed_at":"2026-07-05T01:40:04.282234Z","signed_message":"canonical_sha256_bytes"},"source_id":"2010.01329","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:a90a8be29ae3cb0dea7b5ea939fffb6d27cf050718094a6b66fddd397f046493","sha256:178c62b54490e81864c533f103b8aa7aefa3e8f3ae1fad0e01e1aedecdb27359"],"state_sha256":"149f23784ad2161a0e17b60befbfa98b5fddf9086d2bac3cf47102319eaf81d5"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"vHhxd02GyCFmidk3gdXFw56yHimeCQ+9J8VmeyKH3uNysqljYt/26+D2M68R/wXbEOJic0trhGmrfzZMbNI/AA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-03T21:47:06.350052Z","bundle_sha256":"1e9aad93840da9587daf24d9f9370c95fe237aa6dff64bfcb6c722cb4e2c7b9c"}}