{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:JDSA5GOSA7YKQ7MTDNYGSRNV7F","short_pith_number":"pith:JDSA5GOS","canonical_record":{"source":{"id":"2006.06356","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-11T12:19:39Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"d934dc488fbd29b3b574c730fbedb86c150e2e51e2f807e0c41187d7361a3bc5","abstract_canon_sha256":"1962e05ec4478ccfbf5d42a50b4e275083b73fa3fe380ba6e96ec7f73ece7650"},"schema_version":"1.0"},"canonical_sha256":"48e40e99d207f0a87d931b706945b5f976e6b6908d8a9e69f966e1b7e5608b86","source":{"kind":"arxiv","id":"2006.06356","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.06356","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"arxiv_version","alias_value":"2006.06356v3","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.06356","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_12","alias_value":"JDSA5GOSA7YK","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_16","alias_value":"JDSA5GOSA7YKQ7MT","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_8","alias_value":"JDSA5GOS","created_at":"2026-07-05T02:51:07Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:JDSA5GOSA7YKQ7MTDNYGSRNV7F","target":"record","payload":{"canonical_record":{"source":{"id":"2006.06356","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-11T12:19:39Z","cross_cats_sorted":["cs.CV","eess.IV"],"title_canon_sha256":"d934dc488fbd29b3b574c730fbedb86c150e2e51e2f807e0c41187d7361a3bc5","abstract_canon_sha256":"1962e05ec4478ccfbf5d42a50b4e275083b73fa3fe380ba6e96ec7f73ece7650"},"schema_version":"1.0"},"canonical_sha256":"48e40e99d207f0a87d931b706945b5f976e6b6908d8a9e69f966e1b7e5608b86","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T02:51:07.543427Z","signature_b64":"Lvb52cnAzQK1SoSnzeFSLXWH3ICQVOLzYd9MebILSH0V9TbEVRmoKPRFh8buCEngwjjTKdcPcFU+RZcBZRf0Bg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"48e40e99d207f0a87d931b706945b5f976e6b6908d8a9e69f966e1b7e5608b86","last_reissued_at":"2026-07-05T02:51:07.542967Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T02:51:07.542967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2006.06356","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:51:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"u4dlqEHI1fxWc8l8ShzBUwyZQXsZR8c+zS0Kkeh7JEP9+08vTPHt3XaVI5Vuq3WO0ptYBjRYYfqRnkiGiG7oCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T13:15:28.393228Z"},"content_sha256":"e3fb9a1b2714401ed08f94c5aa6450326e3203d766b209b7b8e35e47866d4c9e","schema_version":"1.0","event_id":"sha256:e3fb9a1b2714401ed08f94c5aa6450326e3203d766b209b7b8e35e47866d4c9e"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:JDSA5GOSA7YKQ7MTDNYGSRNV7F","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV","eess.IV"],"primary_cat":"cs.CR","authors_text":"Bart Liefers, Bram van Ginneken, Clara I. S\\'anchez, Cristina Gonz\\'alez-Gonzalo, Florian Dubost, Gerda Bortsova, Ioannis Katramados, Josien P.W. Pluim, Laurens Hogeweg, Marleen de Bruijne, Mitko Veta, Suzanne C. Wetstein","submitted_at":"2020-06-11T12:19:39Z","abstract_excerpt":"Adversarial attacks are considered a potentially serious security threat for machine learning systems. Medical image analysis (MedIA) systems have recently been argued to be vulnerable to adversarial attacks due to strong financial incentives and the associated technological infrastructure.\n  In this paper, we study previously unexplored factors affecting adversarial attack vulnerability of deep learning MedIA systems in three medical domains: ophthalmology, radiology, and pathology. We focus on adversarial black-box settings, in which the attacker does not have full access to the target model"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.06356","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2006.06356/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T02:51:07Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FJ9kZb2GHe3KAItpGqAgF77JIJMT4hGpSYJQa+ZPCXOKXeUvN4Rx3hPrqJlQ5nuQWnQxE4GTCkbUYm+2vWFLAw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T13:15:28.393605Z"},"content_sha256":"5cd9d67d6400de445651a5117ebbcd8c2c665ea9a5270df91bcdcf6ff99b8318","schema_version":"1.0","event_id":"sha256:5cd9d67d6400de445651a5117ebbcd8c2c665ea9a5270df91bcdcf6ff99b8318"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/bundle.json","state_url":"https://pith.science/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T13:15:28Z","links":{"resolver":"https://pith.science/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F","bundle":"https://pith.science/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/bundle.json","state":"https://pith.science/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JDSA5GOSA7YKQ7MTDNYGSRNV7F/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:JDSA5GOSA7YKQ7MTDNYGSRNV7F","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1962e05ec4478ccfbf5d42a50b4e275083b73fa3fe380ba6e96ec7f73ece7650","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-11T12:19:39Z","title_canon_sha256":"d934dc488fbd29b3b574c730fbedb86c150e2e51e2f807e0c41187d7361a3bc5"},"schema_version":"1.0","source":{"id":"2006.06356","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2006.06356","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"arxiv_version","alias_value":"2006.06356v3","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2006.06356","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_12","alias_value":"JDSA5GOSA7YK","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_16","alias_value":"JDSA5GOSA7YKQ7MT","created_at":"2026-07-05T02:51:07Z"},{"alias_kind":"pith_short_8","alias_value":"JDSA5GOS","created_at":"2026-07-05T02:51:07Z"}],"graph_snapshots":[{"event_id":"sha256:5cd9d67d6400de445651a5117ebbcd8c2c665ea9a5270df91bcdcf6ff99b8318","target":"graph","created_at":"2026-07-05T02:51:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2006.06356/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial attacks are considered a potentially serious security threat for machine learning systems. Medical image analysis (MedIA) systems have recently been argued to be vulnerable to adversarial attacks due to strong financial incentives and the associated technological infrastructure.\n  In this paper, we study previously unexplored factors affecting adversarial attack vulnerability of deep learning MedIA systems in three medical domains: ophthalmology, radiology, and pathology. We focus on adversarial black-box settings, in which the attacker does not have full access to the target model","authors_text":"Bart Liefers, Bram van Ginneken, Clara I. S\\'anchez, Cristina Gonz\\'alez-Gonzalo, Florian Dubost, Gerda Bortsova, Ioannis Katramados, Josien P.W. Pluim, Laurens Hogeweg, Marleen de Bruijne, Mitko Veta, Suzanne C. Wetstein","cross_cats":["cs.CV","eess.IV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-11T12:19:39Z","title":"Adversarial Attack Vulnerability of Medical Image Analysis Systems: Unexplored Factors"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2006.06356","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e3fb9a1b2714401ed08f94c5aa6450326e3203d766b209b7b8e35e47866d4c9e","target":"record","created_at":"2026-07-05T02:51:07Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1962e05ec4478ccfbf5d42a50b4e275083b73fa3fe380ba6e96ec7f73ece7650","cross_cats_sorted":["cs.CV","eess.IV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-06-11T12:19:39Z","title_canon_sha256":"d934dc488fbd29b3b574c730fbedb86c150e2e51e2f807e0c41187d7361a3bc5"},"schema_version":"1.0","source":{"id":"2006.06356","kind":"arxiv","version":3}},"canonical_sha256":"48e40e99d207f0a87d931b706945b5f976e6b6908d8a9e69f966e1b7e5608b86","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"48e40e99d207f0a87d931b706945b5f976e6b6908d8a9e69f966e1b7e5608b86","first_computed_at":"2026-07-05T02:51:07.542967Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T02:51:07.542967Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"Lvb52cnAzQK1SoSnzeFSLXWH3ICQVOLzYd9MebILSH0V9TbEVRmoKPRFh8buCEngwjjTKdcPcFU+RZcBZRf0Bg==","signature_status":"signed_v1","signed_at":"2026-07-05T02:51:07.543427Z","signed_message":"canonical_sha256_bytes"},"source_id":"2006.06356","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e3fb9a1b2714401ed08f94c5aa6450326e3203d766b209b7b8e35e47866d4c9e","sha256:5cd9d67d6400de445651a5117ebbcd8c2c665ea9a5270df91bcdcf6ff99b8318"],"state_sha256":"7aec8393179d19aa1cf5511b5ec9303105825a6d7edcf58ddd8ba232f16816fb"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6r5CW9FLpQXIa+5ptXHMf2l44aej+e22UguqNe389NHpTd05BgEuy0Tkw+29NFGU+zg9d+NhMu2eTo4UBKJtCA==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T13:15:28.396313Z","bundle_sha256":"f202a291fda7b336a184e319ced0db1e88521ae05a93ff6a03f061b498594bb5"}}