{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2021:JGRKUWTMFZ3F6JFH7J7G7L5GQ6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a"},"schema_version":"1.0","source":{"id":"2106.04169","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"arxiv_version","alias_value":"2106.04169v3","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2106.04169","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_12","alias_value":"JGRKUWTMFZ3F","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_16","alias_value":"JGRKUWTMFZ3F6JFH","created_at":"2026-07-05T04:01:41Z"},{"alias_kind":"pith_short_8","alias_value":"JGRKUWTM","created_at":"2026-07-05T04:01:41Z"}],"graph_snapshots":[{"event_id":"sha256:c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7","target":"graph","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2106.04169/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision transformers (ViTs) process input images as sequences of patches via self-attention; a radically different architecture than convolutional neural networks (CNNs). This makes it interesting to study the adversarial feature space of ViT models and their transferability. In particular, we observe that adversarial patterns found via conventional adversarial attacks show very \\emph{low} black-box transferability even for large ViT models. We show that this phenomenon is only due to the sub-optimal attack procedures that do not leverage the true representation potential of ViTs. A deep ViT is","authors_text":"Fahad Shahbaz Khan, Fatih Porikli, Kanchana Ranasinghe, Muzammal Naseer, Salman Khan","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title":"On Improving Adversarial Transferability of Vision Transformers"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2106.04169","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2","target":"record","created_at":"2026-07-05T04:01:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"5779b3e81323267bdff9e5f4969d5a2e61b9571613f433701db5f32ed0a3f065","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2021-06-08T08:20:38Z","title_canon_sha256":"85c9a04c3092e8f53b7da8d761c52d20581388cd70c3266626ac1ee5ecf1220a"},"schema_version":"1.0","source":{"id":"2106.04169","kind":"arxiv","version":3}},"canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"49a2aa5a6c2e765f24a7fa7e6fafa687a99c0ffcb04cc83f69a9152398ba5486","first_computed_at":"2026-07-05T04:01:41.838339Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:01:41.838339Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"fPNW6S2uvYgXrJj3qWQzas66rSCXaFJ2qvPX4PUsZpCFP9E2YcDJEUUJiBE5pc4/o5hjx0IPgqHiBuTl/k9rAA==","signature_status":"signed_v1","signed_at":"2026-07-05T04:01:41.838805Z","signed_message":"canonical_sha256_bytes"},"source_id":"2106.04169","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8f6b2c4f9ca5408657a71ca8bdace3a7d31450ffedb53e96794697cb7c4004a2","sha256:c47b4e08fd685f9b88200b789573bf32e2357b1f8783c361b63377caf7c5bff7"],"state_sha256":"11165a08004cd8df274c6509872ae89cf5c81851851e1d9dbe6a77d10ae0b7d3"}