{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2021:JGRKUWTMFZ3F6JFH7J7G7L5GQ6","short_pith_number":"pith:JGRKUWTM","canonical_record":{"source":{"id":"2106.04169","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a","abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065"},"schema_version":"1.0"},"canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","source":{"kind":"arxiv","id":"2106.04169","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"arxiv_version","alias_value":"2106.04169v3","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_12","alias_value":"JGRKUWTMFZ3F","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_16","alias_value":"JGRKUWTMFZ3F6JFH","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_8","alias_value":"JGRKUWTM","created_at":"2026-07-05T04:01:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2021:JGRKUWTMFZ3F6JFH7J7G7L5GQ6","target":"record","payload":{"canonical_record":{"source":{"id":"2106.04169","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a","abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065"},"schema_version":"1.0"},"canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:01:41.838805Z","signature_b64":"fPNW6S2uvYgXrJj3qWQzas66rSCXaFJ2qvPX4PUsZpCFP9E2YcDJEUUJiBE5pc4/o5hjx0IPgqHiBuTl/k9rAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","last_reissued_at":"2026-07-05T04:01:41.838339Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:01:41.838339Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2106.04169","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"BrdqvwxJzKoSFGUHO22fyDM9hJHI6a5wm4ZebBqi0hdnXGqUna2LLoDyM1w26BnaSbr6yNP1OXQIu9F9kjr3Aw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:18:41.015617Z"},"content_sha256":"8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2","schema_version":"1.0","event_id":"sha256:8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2021:JGRKUWTMFZ3F6JFH7J7G7L5GQ6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Improving Adversarial Transferability of Vision Transformers","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CV","authors_text":"Fahad Shahbaz Khan, Fatih Porikli, Kanchana Ranasinghe, Muzammal Naseer, Salman Khan","submitted_at":"2021-06-08T08:20:38Z","abstract_excerpt":"Vision transformers (ViTs) process input images as sequences of patches via self-attention; a radically different architecture than convolutional neural networks (CNNs). This makes it interesting to study the adversarial feature space of ViT models and their transferability. In particular, we observe that adversarial patterns found via conventional adversarial attacks show very \\emph{low} black-box transferability even for large ViT models. We show that this phenomenon is only due to the sub-optimal attack procedures that do not leverage the true representation potential of ViTs. A deep ViT is"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.04169","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2106.04169/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:01:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"fMNWwsBGTBebtT6Yrd34ixS+1mRCGZssZqBoe6sQ5lCmP4jnvPGvbea64uWHMqZ0m8kDWQgp6vUVkODj2KgvCA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T20:18:41.016249Z"},"content_sha256":"c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7","schema_version":"1.0","event_id":"sha256:c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/bundle.json","state_url":"https://pith.science/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T20:18:41Z","links":{"resolver":"https://pith.science/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6","bundle":"https://pith.science/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/bundle.json","state":"https://pith.science/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JGRKUWTMFZ3F6JFH7J7G7L5GQ6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:JGRKUWTMFZ3F6JFH7J7G7L5GQ6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a"},"schema_version":"1.0","source":{"id":"2106.04169","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"arxiv_version","alias_value":"2106.04169v3","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_12","alias_value":"JGRKUWTMFZ3F","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_16","alias_value":"JGRKUWTMFZ3F6JFH","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_8","alias_value":"JGRKUWTM","created_at":"2026-07-05T04:01:41Z"}],"graph_snapshots":[{"event_id":"sha256:c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7","target":"graph","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.04169/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision transformers (ViTs) process input images as sequences of patches via self-attention; a radically different architecture than convolutional neural networks (CNNs). This makes it interesting to study the adversarial feature space of ViT models and their transferability. In particular, we observe that adversarial patterns found via conventional adversarial attacks show very \\emph{low} black-box transferability even for large ViT models. We show that this phenomenon is only due to the sub-optimal attack procedures that do not leverage the true representation potential of ViTs. A deep ViT is","authors_text":"Fahad Shahbaz Khan, Fatih Porikli, Kanchana Ranasinghe, Muzammal Naseer, Salman Khan","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title":"On Improving Adversarial Transferability of Vision Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.04169","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2","target":"record","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a"},"schema_version":"1.0","source":{"id":"2106.04169","kind":"arxiv","version":3}},"canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","first_computed_at":"2026-07-05T04:01:41.838339Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:01:41.838339Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fPNW6S2uvYgXrJj3qWQzas66rSCXaFJ2qvPX4PUsZpCFP9E2YcDJEUUJiBE5pc4/o5hjx0IPgqHiBuTl/k9rAA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:01:41.838805Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.04169","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2","sha256:c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7"],"state_sha256":"11165a08004cd8df274c6509872ae89cf5c81851851e1d9dbe6a77d10ae0b7d3"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ENOVuxmwe1ZftHaj9PerVi5Ajic6cH2Dm4iRRSnB2OdmMk9LifjIz7PIIAmAy/n7ZkCUAVbLA4aFXzy8evJGBw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T20:18:41.021667Z","bundle_sha256":"beb613b810b48440442ee982ab962e0ed4c440d4e465fb901363af7f359829b0"}}