{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:JFSBWMKSTYBZTBUB4IQX44VIWH","short_pith_number":"pith:JFSBWMKS","canonical_record":{"source":{"id":"2302.05086","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-10T07:08:13Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"4928052e17f93f0f1b4f8d2b18134e13499c21fd71157bda9a2e1e998f6e61c6","abstract_canon_sha256":"f8e47becb6c65f272bef1b22058bf8c0835ffeb13a1617aff58d2fbad91e2106"},"schema_version":"1.0"},"canonical_sha256":"49641b31529e03998681e2217e72a8b1c72f68b42d62124b7d359bb197a47f59","source":{"kind":"arxiv","id":"2302.05086","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.05086","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"arxiv_version","alias_value":"2302.05086v3","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.05086","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_12","alias_value":"JFSBWMKSTYBZ","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_16","alias_value":"JFSBWMKSTYBZTBUB","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_8","alias_value":"JFSBWMKS","created_at":"2026-07-05T06:32:36Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:JFSBWMKSTYBZTBUB4IQX44VIWH","target":"record","payload":{"canonical_record":{"source":{"id":"2302.05086","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-10T07:08:13Z","cross_cats_sorted":["cs.CV"],"title_canon_sha256":"4928052e17f93f0f1b4f8d2b18134e13499c21fd71157bda9a2e1e998f6e61c6","abstract_canon_sha256":"f8e47becb6c65f272bef1b22058bf8c0835ffeb13a1617aff58d2fbad91e2106"},"schema_version":"1.0"},"canonical_sha256":"49641b31529e03998681e2217e72a8b1c72f68b42d62124b7d359bb197a47f59","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:32:36.569845Z","signature_b64":"n5dUUiamS2TsneqN0EM9VTohijpOrpjcIl9D4HOwG2catX60mGgNmKS3EOOStr8zMgMSwev+4eWCuQv1BskODA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"49641b31529e03998681e2217e72a8b1c72f68b42d62124b7d359bb197a47f59","last_reissued_at":"2026-07-05T06:32:36.569363Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:32:36.569363Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2302.05086","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"m/Wgazw3bmvZ9D73AT0iG5VPY8ZUt0jp2bucp1KIBcmf6Ba+s7r6Qc/4Lm+lVirZ5YaV/MfBcvMYQVHBtjFMBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:46:26.266958Z"},"content_sha256":"b0ad84fa5d38de685a2af6c4c91fbb92f558ea8a9520b7323b93b9c9f2ebf1da","schema_version":"1.0","event_id":"sha256:b0ad84fa5d38de685a2af6c4c91fbb92f558ea8a9520b7323b93b9c9f2ebf1da"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:JFSBWMKSTYBZTBUB4IQX44VIWH","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CV"],"primary_cat":"cs.LG","authors_text":"Hao Chen, Qizhang Li, Wangmeng Zuo, Yiwen Guo","submitted_at":"2023-02-10T07:08:13Z","abstract_excerpt":"The transferability of adversarial examples across deep neural networks (DNNs) is the crux of many black-box attacks. Many prior efforts have been devoted to improving the transferability via increasing the diversity in inputs of some substitute models. In this paper, by contrast, we opt for the diversity in substitute models and advocate to attack a Bayesian model for achieving desirable transferability. Deriving from the Bayesian formulation, we develop a principled strategy for possible finetuning, which can be combined with many off-the-shelf Gaussian posterior approximations over DNN para"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.05086","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2302.05086/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:32:36Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"eXegnBllkrWdhB6zo3TXpMlr6yQ9tTYnYQ88WcGdtm1MnUofxQb5smVKHfYbad0a7sVYp/G4r8CAmfn5VIgPBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T17:46:26.267894Z"},"content_sha256":"0ff85db8dd27f85ba4d9d22e3e09224e5d326cf8e0278ffcb548e29a4c0c002e","schema_version":"1.0","event_id":"sha256:0ff85db8dd27f85ba4d9d22e3e09224e5d326cf8e0278ffcb548e29a4c0c002e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/bundle.json","state_url":"https://pith.science/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T17:46:26Z","links":{"resolver":"https://pith.science/pith/JFSBWMKSTYBZTBUB4IQX44VIWH","bundle":"https://pith.science/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/bundle.json","state":"https://pith.science/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JFSBWMKSTYBZTBUB4IQX44VIWH/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:JFSBWMKSTYBZTBUB4IQX44VIWH","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"f8e47becb6c65f272bef1b22058bf8c0835ffeb13a1617aff58d2fbad91e2106","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-10T07:08:13Z","title_canon_sha256":"4928052e17f93f0f1b4f8d2b18134e13499c21fd71157bda9a2e1e998f6e61c6"},"schema_version":"1.0","source":{"id":"2302.05086","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2302.05086","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"arxiv_version","alias_value":"2302.05086v3","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2302.05086","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_12","alias_value":"JFSBWMKSTYBZ","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_16","alias_value":"JFSBWMKSTYBZTBUB","created_at":"2026-07-05T06:32:36Z"},{"alias_kind":"pith_short_8","alias_value":"JFSBWMKS","created_at":"2026-07-05T06:32:36Z"}],"graph_snapshots":[{"event_id":"sha256:0ff85db8dd27f85ba4d9d22e3e09224e5d326cf8e0278ffcb548e29a4c0c002e","target":"graph","created_at":"2026-07-05T06:32:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2302.05086/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"The transferability of adversarial examples across deep neural networks (DNNs) is the crux of many black-box attacks. Many prior efforts have been devoted to improving the transferability via increasing the diversity in inputs of some substitute models. In this paper, by contrast, we opt for the diversity in substitute models and advocate to attack a Bayesian model for achieving desirable transferability. Deriving from the Bayesian formulation, we develop a principled strategy for possible finetuning, which can be combined with many off-the-shelf Gaussian posterior approximations over DNN para","authors_text":"Hao Chen, Qizhang Li, Wangmeng Zuo, Yiwen Guo","cross_cats":["cs.CV"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-10T07:08:13Z","title":"Making Substitute Models More Bayesian Can Enhance Transferability of Adversarial Examples"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2302.05086","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:b0ad84fa5d38de685a2af6c4c91fbb92f558ea8a9520b7323b93b9c9f2ebf1da","target":"record","created_at":"2026-07-05T06:32:36Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"f8e47becb6c65f272bef1b22058bf8c0835ffeb13a1617aff58d2fbad91e2106","cross_cats_sorted":["cs.CV"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2023-02-10T07:08:13Z","title_canon_sha256":"4928052e17f93f0f1b4f8d2b18134e13499c21fd71157bda9a2e1e998f6e61c6"},"schema_version":"1.0","source":{"id":"2302.05086","kind":"arxiv","version":3}},"canonical_sha256":"49641b31529e03998681e2217e72a8b1c72f68b42d62124b7d359bb197a47f59","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"49641b31529e03998681e2217e72a8b1c72f68b42d62124b7d359bb197a47f59","first_computed_at":"2026-07-05T06:32:36.569363Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:32:36.569363Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"n5dUUiamS2TsneqN0EM9VTohijpOrpjcIl9D4HOwG2catX60mGgNmKS3EOOStr8zMgMSwev+4eWCuQv1BskODA==","signature_status":"signed_v1","signed_at":"2026-07-05T06:32:36.569845Z","signed_message":"canonical_sha256_bytes"},"source_id":"2302.05086","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:b0ad84fa5d38de685a2af6c4c91fbb92f558ea8a9520b7323b93b9c9f2ebf1da","sha256:0ff85db8dd27f85ba4d9d22e3e09224e5d326cf8e0278ffcb548e29a4c0c002e"],"state_sha256":"fbfd202caf84f750ce72419c12da7613350838cc9c5f12cf1ffca1eac698b5a2"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ZYEdw0x4ZzCkT+066NWWCxmF54A8z1fr2uvAChDFR630oi3WSBmM5ASqSZ/ZunEZCws+9p10WkOzqMraY4/RDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T17:46:26.274827Z","bundle_sha256":"1beb6f156cebbe4bf6fddd10759f87a8028215c6a2cd43d43eb9aad434066530"}}