{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:JUA73VFTRI6NVTDSRE2ZRTXTHV","short_pith_number":"pith:JUA73VFT","canonical_record":{"source":{"id":"1906.11897","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T11:04:57Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"39656e172d53cf2ce8ea4baa63a280e2315f4aaa623114ce2a3605a2c12277d9","abstract_canon_sha256":"c984d3fb27987c8e60d589f8b8231cd666d0cfcdcc06e884d75a433e047e68d3"},"schema_version":"1.0"},"canonical_sha256":"4d01fdd4b38a3cdacc72893598cef33d699ca35c13c546056965a1c520baeddd","source":{"kind":"arxiv","id":"1906.11897","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.11897","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"arxiv_version","alias_value":"1906.11897v1","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.11897","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"pith_short_12","alias_value":"JUA73VFTRI6N","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"JUA73VFTRI6NVTDS","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"JUA73VFT","created_at":"2026-05-18T12:33:21Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:JUA73VFTRI6NVTDSRE2ZRTXTHV","target":"record","payload":{"canonical_record":{"source":{"id":"1906.11897","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T11:04:57Z","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"title_canon_sha256":"39656e172d53cf2ce8ea4baa63a280e2315f4aaa623114ce2a3605a2c12277d9","abstract_canon_sha256":"c984d3fb27987c8e60d589f8b8231cd666d0cfcdcc06e884d75a433e047e68d3"},"schema_version":"1.0"},"canonical_sha256":"4d01fdd4b38a3cdacc72893598cef33d699ca35c13c546056965a1c520baeddd","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:42:01.712938Z","signature_b64":"kaNFRGLLvJxoX4/IgnyIlEdQxg7yEGSdgf0VgtihNYznwh69yNSIblym5aTrfPctL+Y1qLBSZrlAOjiWs1ZECw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4d01fdd4b38a3cdacc72893598cef33d699ca35c13c546056965a1c520baeddd","last_reissued_at":"2026-05-17T23:42:01.712263Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:42:01.712263Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1906.11897","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"FQ7syu8MX3h4evp0WI07+aBlxGJfwe9C//jSTDwACFTUsP6PMZ6dsuyRBjAE94Ui8n8OdMA4AD/KpZ3ONvmLAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T17:21:58.924292Z"},"content_sha256":"8689f1c6cb14067d66de2a8fd790bc46ae96bed0a93106e6a9a2861e1a82a626","schema_version":"1.0","event_id":"sha256:8689f1c6cb14067d66de2a8fd790bc46ae96bed0a93106e6a9a2861e1a82a626"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:JUA73VFTRI6NVTDSRE2ZRTXTHV","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"On Physical Adversarial Patches for Object Detection","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG","stat.ML"],"primary_cat":"cs.CV","authors_text":"Mark Lee, Zico Kolter","submitted_at":"2019-06-20T11:04:57Z","abstract_excerpt":"In this paper, we demonstrate a physical adversarial patch attack against object detectors, notably the YOLOv3 detector. Unlike previous work on physical object detection attacks, which required the patch to overlap with the objects being misclassified or avoiding detection, we show that a properly designed patch can suppress virtually all the detected objects in the image. That is, we can place the patch anywhere in the image, causing all existing objects in the image to be missed entirely by the detector, even those far away from the patch itself. This in turn opens up new lines of physical "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.11897","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-05-17T23:42:01Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"xdljD6SXq91rdA1KvXB8eihcbqBiXK6lFxqttd15dqcA7iIocSNdTMOlwxbAXDYIHqc0sFcW+hwOwlgmp+bTBQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-05-25T17:21:58.925004Z"},"content_sha256":"00dd68cd92dbb233c804ce497c5367de53957ef65f76214524fa9ad2670bf852","schema_version":"1.0","event_id":"sha256:00dd68cd92dbb233c804ce497c5367de53957ef65f76214524fa9ad2670bf852"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/bundle.json","state_url":"https://pith.science/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-05-25T17:21:58Z","links":{"resolver":"https://pith.science/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV","bundle":"https://pith.science/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/bundle.json","state":"https://pith.science/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/state.json","well_known_bundle":"https://pith.science/.well-known/pith/JUA73VFTRI6NVTDSRE2ZRTXTHV/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:JUA73VFTRI6NVTDSRE2ZRTXTHV","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c984d3fb27987c8e60d589f8b8231cd666d0cfcdcc06e884d75a433e047e68d3","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T11:04:57Z","title_canon_sha256":"39656e172d53cf2ce8ea4baa63a280e2315f4aaa623114ce2a3605a2c12277d9"},"schema_version":"1.0","source":{"id":"1906.11897","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1906.11897","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"arxiv_version","alias_value":"1906.11897v1","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1906.11897","created_at":"2026-05-17T23:42:01Z"},{"alias_kind":"pith_short_12","alias_value":"JUA73VFTRI6N","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_16","alias_value":"JUA73VFTRI6NVTDS","created_at":"2026-05-18T12:33:21Z"},{"alias_kind":"pith_short_8","alias_value":"JUA73VFT","created_at":"2026-05-18T12:33:21Z"}],"graph_snapshots":[{"event_id":"sha256:00dd68cd92dbb233c804ce497c5367de53957ef65f76214524fa9ad2670bf852","target":"graph","created_at":"2026-05-17T23:42:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"paper":{"abstract_excerpt":"In this paper, we demonstrate a physical adversarial patch attack against object detectors, notably the YOLOv3 detector. Unlike previous work on physical object detection attacks, which required the patch to overlap with the objects being misclassified or avoiding detection, we show that a properly designed patch can suppress virtually all the detected objects in the image. That is, we can place the patch anywhere in the image, causing all existing objects in the image to be missed entirely by the detector, even those far away from the patch itself. This in turn opens up new lines of physical ","authors_text":"Mark Lee, Zico Kolter","cross_cats":["cs.CR","cs.LG","stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T11:04:57Z","title":"On Physical Adversarial Patches for Object Detection"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1906.11897","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:8689f1c6cb14067d66de2a8fd790bc46ae96bed0a93106e6a9a2861e1a82a626","target":"record","created_at":"2026-05-17T23:42:01Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c984d3fb27987c8e60d589f8b8231cd666d0cfcdcc06e884d75a433e047e68d3","cross_cats_sorted":["cs.CR","cs.LG","stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-06-20T11:04:57Z","title_canon_sha256":"39656e172d53cf2ce8ea4baa63a280e2315f4aaa623114ce2a3605a2c12277d9"},"schema_version":"1.0","source":{"id":"1906.11897","kind":"arxiv","version":1}},"canonical_sha256":"4d01fdd4b38a3cdacc72893598cef33d699ca35c13c546056965a1c520baeddd","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"4d01fdd4b38a3cdacc72893598cef33d699ca35c13c546056965a1c520baeddd","first_computed_at":"2026-05-17T23:42:01.712263Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-05-17T23:42:01.712263Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"kaNFRGLLvJxoX4/IgnyIlEdQxg7yEGSdgf0VgtihNYznwh69yNSIblym5aTrfPctL+Y1qLBSZrlAOjiWs1ZECw==","signature_status":"signed_v1","signed_at":"2026-05-17T23:42:01.712938Z","signed_message":"canonical_sha256_bytes"},"source_id":"1906.11897","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:8689f1c6cb14067d66de2a8fd790bc46ae96bed0a93106e6a9a2861e1a82a626","sha256:00dd68cd92dbb233c804ce497c5367de53957ef65f76214524fa9ad2670bf852"],"state_sha256":"d9b0cd775b3521b0a0acc07af2845bb60ea7a58430e8024391127ca53930fa97"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"2lXaq3QVewuR4jGYDYkxfYYylBIgnEShFzStbhf/SpUmWtgAbNIHPMpDHd+Hu8495csSENjhiqHuM/n0AU4gAg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-05-25T17:21:58.929347Z","bundle_sha256":"3601a44017dad1f0d06775a0d30b6fa7aeb70505f12e38bbd10d9fd6bd43ce42"}}