{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2016:IZNS2GURQDXAMNDTFETADEJNC2","short_pith_number":"pith:IZNS2GUR","canonical_record":{"source":{"id":"1608.00853","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2016-08-02T14:57:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8b885d3659e51d2843ec86916897aa8ba25700dac1110a676c8ea3d8d1ae4ea","abstract_canon_sha256":"c8b47d792d2d48aa83060195f85d2fca6bfae9287ca4bd1d7a244847ff53ed28"},"schema_version":"1.0"},"canonical_sha256":"465b2d1a9180ee063473292601912d169bd7f1fa8f5d47c57b4746f6eae0bdc3","source":{"kind":"arxiv","id":"1608.00853","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.00853","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"arxiv_version","alias_value":"1608.00853v1","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.00853","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"pith_short_12","alias_value":"IZNS2GURQDXA","created_at":"2026-05-18T12:30:22Z"},{"alias_kind":"pith_short_16","alias_value":"IZNS2GURQDXAMNDT","created_at":"2026-05-18T12:30:22Z"},{"alias_kind":"pith_short_8","alias_value":"IZNS2GUR","created_at":"2026-05-18T12:30:22Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2016:IZNS2GURQDXAMNDTFETADEJNC2","target":"record","payload":{"canonical_record":{"source":{"id":"1608.00853","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2016-08-02T14:57:18Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"f8b885d3659e51d2843ec86916897aa8ba25700dac1110a676c8ea3d8d1ae4ea","abstract_canon_sha256":"c8b47d792d2d48aa83060195f85d2fca6bfae9287ca4bd1d7a244847ff53ed28"},"schema_version":"1.0"},"canonical_sha256":"465b2d1a9180ee063473292601912d169bd7f1fa8f5d47c57b4746f6eae0bdc3","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-18T01:10:00.741365Z","signature_b64":"L0JXRGZnaW3R7TBPDrp5XkShAfoDsxFasGPKMLatGqD/1QB/spNr+OymPAVs3x4qMOe+eBw2Sf3WByZFMvEWBA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"465b2d1a9180ee063473292601912d169bd7f1fa8f5d47c57b4746f6eae0bdc3","last_reissued_at":"2026-05-18T01:10:00.740653Z","signature_status":"signed_v1","first_computed_at":"2026-05-18T01:10:00.740653Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1608.00853","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:10:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PQD3xKx+RvrpZZvOiNOcgNuxfkcBrD9Vs0sOE+jEI7NmAObRIAGOHJvthFyYXZdH+MQllgtBCb5bQgSQ4s4mCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T14:52:48.281576Z"},"content_sha256":"6862bb7fabe56202fa06db9fb9f77a45869da4682f9ecfeb1d6790083a019f8c","schema_version":"1.0","event_id":"sha256:6862bb7fabe56202fa06db9fb9f77a45869da4682f9ecfeb1d6790083a019f8c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2016:IZNS2GURQDXAMNDTFETADEJNC2","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A study of the effect of JPG compression on adversarial images","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Daniel M. Roy, Gintare Karolina Dziugaite, Zoubin Ghahramani","submitted_at":"2016-08-02T14:57:18Z","abstract_excerpt":"Neural network image classifiers are known to be vulnerable to adversarial images, i.e., natural images which have been modified by an adversarial perturbation specifically designed to be imperceptible to humans yet fool the classifier. Not only can adversarial images be generated easily, but these images will often be adversarial for networks trained on disjoint subsets of data or with different architectures. Adversarial images represent a potential security risk as well as a serious machine learning challenge---it is clear that vulnerable neural networks perceive images very differently fro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.00853","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-18T01:10:00Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kWwL2kIavO3UVkglouohq0Bde2jtESsMn5t+nrS3eTccwmPgl0Kf+bJCaddiXm0LidjNzYEcwmJ+4HHWJWWEDg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-10T14:52:48.281921Z"},"content_sha256":"3678e9ef63d466b0e175f7801b375671cd6e8cc32081a7b4713f904b82c9483c","schema_version":"1.0","event_id":"sha256:3678e9ef63d466b0e175f7801b375671cd6e8cc32081a7b4713f904b82c9483c"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/IZNS2GURQDXAMNDTFETADEJNC2/bundle.json","state_url":"https://pith.science/pith/IZNS2GURQDXAMNDTFETADEJNC2/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/IZNS2GURQDXAMNDTFETADEJNC2/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-10T14:52:48Z","links":{"resolver":"https://pith.science/pith/IZNS2GURQDXAMNDTFETADEJNC2","bundle":"https://pith.science/pith/IZNS2GURQDXAMNDTFETADEJNC2/bundle.json","state":"https://pith.science/pith/IZNS2GURQDXAMNDTFETADEJNC2/state.json","well_known_bundle":"https://pith.science/.well-known/pith/IZNS2GURQDXAMNDTFETADEJNC2/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2016:IZNS2GURQDXAMNDTFETADEJNC2","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c8b47d792d2d48aa83060195f85d2fca6bfae9287ca4bd1d7a244847ff53ed28","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2016-08-02T14:57:18Z","title_canon_sha256":"f8b885d3659e51d2843ec86916897aa8ba25700dac1110a676c8ea3d8d1ae4ea"},"schema_version":"1.0","source":{"id":"1608.00853","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1608.00853","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"arxiv_version","alias_value":"1608.00853v1","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1608.00853","created_at":"2026-05-18T01:10:00Z"},{"alias_kind":"pith_short_12","alias_value":"IZNS2GURQDXA","created_at":"2026-05-18T12:30:22Z"},{"alias_kind":"pith_short_16","alias_value":"IZNS2GURQDXAMNDT","created_at":"2026-05-18T12:30:22Z"},{"alias_kind":"pith_short_8","alias_value":"IZNS2GUR","created_at":"2026-05-18T12:30:22Z"}],"graph_snapshots":[{"event_id":"sha256:3678e9ef63d466b0e175f7801b375671cd6e8cc32081a7b4713f904b82c9483c","target":"graph","created_at":"2026-05-18T01:10:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"Neural network image classifiers are known to be vulnerable to adversarial images, i.e., natural images which have been modified by an adversarial perturbation specifically designed to be imperceptible to humans yet fool the classifier. Not only can adversarial images be generated easily, but these images will often be adversarial for networks trained on disjoint subsets of data or with different architectures. Adversarial images represent a potential security risk as well as a serious machine learning challenge---it is clear that vulnerable neural networks perceive images very differently fro","authors_text":"Daniel M. Roy, Gintare Karolina Dziugaite, Zoubin Ghahramani","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2016-08-02T14:57:18Z","title":"A study of the effect of JPG compression on adversarial images"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1608.00853","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:6862bb7fabe56202fa06db9fb9f77a45869da4682f9ecfeb1d6790083a019f8c","target":"record","created_at":"2026-05-18T01:10:00Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c8b47d792d2d48aa83060195f85d2fca6bfae9287ca4bd1d7a244847ff53ed28","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2016-08-02T14:57:18Z","title_canon_sha256":"f8b885d3659e51d2843ec86916897aa8ba25700dac1110a676c8ea3d8d1ae4ea"},"schema_version":"1.0","source":{"id":"1608.00853","kind":"arxiv","version":1}},"canonical_sha256":"465b2d1a9180ee063473292601912d169bd7f1fa8f5d47c57b4746f6eae0bdc3","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"465b2d1a9180ee063473292601912d169bd7f1fa8f5d47c57b4746f6eae0bdc3","first_computed_at":"2026-05-18T01:10:00.740653Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-18T01:10:00.740653Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"L0JXRGZnaW3R7TBPDrp5XkShAfoDsxFasGPKMLatGqD/1QB/spNr+OymPAVs3x4qMOe+eBw2Sf3WByZFMvEWBA==","signature_status":"signed_v1","signed_at":"2026-05-18T01:10:00.741365Z","signed_message":"canonical_sha256_bytes"},"source_id":"1608.00853","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:6862bb7fabe56202fa06db9fb9f77a45869da4682f9ecfeb1d6790083a019f8c","sha256:3678e9ef63d466b0e175f7801b375671cd6e8cc32081a7b4713f904b82c9483c"],"state_sha256":"f3b08cc8a832f24d08f66f64e7dc21533ea774d2f8c7349ae4149d7354b8efc9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XUmKTEF/DUJkTeoLL61EqN4ExZSFYy5PKeGBcmgUC9TNcrzebFuOgzKRex3LaX4SYMZ83p8TRMQBSIUN8bMUAQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-10T14:52:48.283878Z","bundle_sha256":"fc246762c41b68a2933cbf6536b03edf25f281627b17d4242c662129fadd2273"}}