{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:IUMO54CHH6AIWOSCEM2E3AU2JW","short_pith_number":"pith:IUMO54CH","canonical_record":{"source":{"id":"2312.12556","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"math.NA","submitted_at":"2023-12-19T19:52:41Z","cross_cats_sorted":["cs.NA"],"title_canon_sha256":"2eef320ea1b35b8b5cac91ab7a2b2699d2b7f580430a35f802d804c0a6445366","abstract_canon_sha256":"dbbb889090b72b91409b1eefacac09b7c2c5ebff13ad8aa1cb4f53974ee720dd"},"schema_version":"1.0"},"canonical_sha256":"4518eef0473f808b3a4223344d829a4d85a9aaaf26c3ea33afb18e34a77c759e","source":{"kind":"arxiv","id":"2312.12556","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.12556","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"arxiv_version","alias_value":"2312.12556v2","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.12556","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_12","alias_value":"IUMO54CHH6AI","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_16","alias_value":"IUMO54CHH6AIWOSC","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_8","alias_value":"IUMO54CH","created_at":"2026-07-05T11:56:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:IUMO54CHH6AIWOSCEM2E3AU2JW","target":"record","payload":{"canonical_record":{"source":{"id":"2312.12556","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"math.NA","submitted_at":"2023-12-19T19:52:41Z","cross_cats_sorted":["cs.NA"],"title_canon_sha256":"2eef320ea1b35b8b5cac91ab7a2b2699d2b7f580430a35f802d804c0a6445366","abstract_canon_sha256":"dbbb889090b72b91409b1eefacac09b7c2c5ebff13ad8aa1cb4f53974ee720dd"},"schema_version":"1.0"},"canonical_sha256":"4518eef0473f808b3a4223344d829a4d85a9aaaf26c3ea33afb18e34a77c759e","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:56:47.756900Z","signature_b64":"o9Z1oZOhwO032sXHijGePze6vi9eHNmdDFTfQuqofNyr/bvKs7jJDnYJPmKMly8eQGJA+4juj3dfMRiJUl76BA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4518eef0473f808b3a4223344d829a4d85a9aaaf26c3ea33afb18e34a77c759e","last_reissued_at":"2026-07-05T11:56:47.756406Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:56:47.756406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2312.12556","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:56:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"uTKwZlUwW211MixawUUp6n3GDaXOJqMpSFV5gp8mzr7QwQsG7jxMzPUaerMzVANDYd5s/QijbI5Vp2HlqP9jDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T13:25:50.681647Z"},"content_sha256":"db306ae4cb69e9552b87c74ac0a4d3e7bceb85da06942a98279ca40d14881bd8","schema_version":"1.0","event_id":"sha256:db306ae4cb69e9552b87c74ac0a4d3e7bceb85da06942a98279ca40d14881bd8"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:IUMO54CHH6AIWOSCEM2E3AU2JW","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Tensor Train Decomposition for Adversarial Attacks on Computer Vision Models","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.NA"],"primary_cat":"math.NA","authors_text":"Andrei Chertkov, Ivan Oseledets","submitted_at":"2023-12-19T19:52:41Z","abstract_excerpt":"Deep neural networks (DNNs) are widely used today, but they are vulnerable to adversarial attacks. To develop effective methods of defense, it is important to understand the potential weak spots of DNNs. Often attacks are organized taking into account the architecture of models (white-box approach) and based on gradient methods, but for real-world DNNs this approach in most cases is impossible. At the same time, several gradient-free optimization algorithms are used to attack black-box models. However, classical methods are often ineffective in the multidimensional case. To organize black-box "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.12556","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2312.12556/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T11:56:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XBmifIHS/Tksls7a8O4mz3cOxlFCaAAjSeGPoE3G7bg7WnkoY5HWNSaKYxexkUE9AjqwUmpTSU5Nra19xXtgCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-20T13:25:50.682587Z"},"content_sha256":"da4c4c8fc5d87036318c18f1b993283f28ea807e84a8bb2ddb5c76685454540a","schema_version":"1.0","event_id":"sha256:da4c4c8fc5d87036318c18f1b993283f28ea807e84a8bb2ddb5c76685454540a"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/bundle.json","state_url":"https://pith.science/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-20T13:25:50Z","links":{"resolver":"https://pith.science/pith/IUMO54CHH6AIWOSCEM2E3AU2JW","bundle":"https://pith.science/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/bundle.json","state":"https://pith.science/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IUMO54CHH6AIWOSCEM2E3AU2JW/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:IUMO54CHH6AIWOSCEM2E3AU2JW","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"dbbb889090b72b91409b1eefacac09b7c2c5ebff13ad8aa1cb4f53974ee720dd","cross_cats_sorted":["cs.NA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"math.NA","submitted_at":"2023-12-19T19:52:41Z","title_canon_sha256":"2eef320ea1b35b8b5cac91ab7a2b2699d2b7f580430a35f802d804c0a6445366"},"schema_version":"1.0","source":{"id":"2312.12556","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2312.12556","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"arxiv_version","alias_value":"2312.12556v2","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2312.12556","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_12","alias_value":"IUMO54CHH6AI","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_16","alias_value":"IUMO54CHH6AIWOSC","created_at":"2026-07-05T11:56:47Z"},{"alias_kind":"pith_short_8","alias_value":"IUMO54CH","created_at":"2026-07-05T11:56:47Z"}],"graph_snapshots":[{"event_id":"sha256:da4c4c8fc5d87036318c18f1b993283f28ea807e84a8bb2ddb5c76685454540a","target":"graph","created_at":"2026-07-05T11:56:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2312.12556/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are widely used today, but they are vulnerable to adversarial attacks. To develop effective methods of defense, it is important to understand the potential weak spots of DNNs. Often attacks are organized taking into account the architecture of models (white-box approach) and based on gradient methods, but for real-world DNNs this approach in most cases is impossible. At the same time, several gradient-free optimization algorithms are used to attack black-box models. However, classical methods are often ineffective in the multidimensional case. To organize black-box ","authors_text":"Andrei Chertkov, Ivan Oseledets","cross_cats":["cs.NA"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"math.NA","submitted_at":"2023-12-19T19:52:41Z","title":"Tensor Train Decomposition for Adversarial Attacks on Computer Vision Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2312.12556","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:db306ae4cb69e9552b87c74ac0a4d3e7bceb85da06942a98279ca40d14881bd8","target":"record","created_at":"2026-07-05T11:56:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"dbbb889090b72b91409b1eefacac09b7c2c5ebff13ad8aa1cb4f53974ee720dd","cross_cats_sorted":["cs.NA"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"math.NA","submitted_at":"2023-12-19T19:52:41Z","title_canon_sha256":"2eef320ea1b35b8b5cac91ab7a2b2699d2b7f580430a35f802d804c0a6445366"},"schema_version":"1.0","source":{"id":"2312.12556","kind":"arxiv","version":2}},"canonical_sha256":"4518eef0473f808b3a4223344d829a4d85a9aaaf26c3ea33afb18e34a77c759e","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4518eef0473f808b3a4223344d829a4d85a9aaaf26c3ea33afb18e34a77c759e","first_computed_at":"2026-07-05T11:56:47.756406Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T11:56:47.756406Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"o9Z1oZOhwO032sXHijGePze6vi9eHNmdDFTfQuqofNyr/bvKs7jJDnYJPmKMly8eQGJA+4juj3dfMRiJUl76BA==","signature_status":"signed_v1","signed_at":"2026-07-05T11:56:47.756900Z","signed_message":"canonical_sha256_bytes"},"source_id":"2312.12556","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:db306ae4cb69e9552b87c74ac0a4d3e7bceb85da06942a98279ca40d14881bd8","sha256:da4c4c8fc5d87036318c18f1b993283f28ea807e84a8bb2ddb5c76685454540a"],"state_sha256":"189fdea943c175a50c01296099f64fb9db7f7cb52cc95487e377ff882ac27eff"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"4aFyRYFw/6IDqUaLvAZf+ZTJhYfpITzPcipxDqfDhPb+aAS7gI0HnqF4jFZRJu8BHwcQ+SisBiGUd0CZHwMIBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-20T13:25:50.689320Z","bundle_sha256":"030a1481e14a3f6b693cdac09ed7b4d20c22eca32c63561c8f6c3cde75ec0c9f"}}