{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KAP5BQGKN24LCJYVYNGCEIILZY","short_pith_number":"pith:KAP5BQGK","canonical_record":{"source":{"id":"2405.14169","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-23T04:52:02Z","cross_cats_sorted":[],"title_canon_sha256":"8b5f2d0cce1934915186ab17bfab4fd0ec54bde00b0844825dab9a89988efb57","abstract_canon_sha256":"0439aee22043f06bcf8507af795f6f20f11caef83d281cb4a550f7621c746946"},"schema_version":"1.0"},"canonical_sha256":"501fd0c0ca6eb8b12715c34c22210bce2aa9e6a331679abdde18747d12ad32c9","source":{"kind":"arxiv","id":"2405.14169","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.14169","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"arxiv_version","alias_value":"2405.14169v1","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.14169","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_12","alias_value":"KAP5BQGKN24L","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_16","alias_value":"KAP5BQGKN24LCJYV","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_8","alias_value":"KAP5BQGK","created_at":"2026-07-05T08:22:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KAP5BQGKN24LCJYVYNGCEIILZY","target":"record","payload":{"canonical_record":{"source":{"id":"2405.14169","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-23T04:52:02Z","cross_cats_sorted":[],"title_canon_sha256":"8b5f2d0cce1934915186ab17bfab4fd0ec54bde00b0844825dab9a89988efb57","abstract_canon_sha256":"0439aee22043f06bcf8507af795f6f20f11caef83d281cb4a550f7621c746946"},"schema_version":"1.0"},"canonical_sha256":"501fd0c0ca6eb8b12715c34c22210bce2aa9e6a331679abdde18747d12ad32c9","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:22:10.968628Z","signature_b64":"xzippJqfFrsxRH1HvN7H/fY/VHnAHFq1A3f8Zlk3Qw90tGZ4Ar2or2OQmAP1blNE2z0qCfokVTCEgcUX+bPxDA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"501fd0c0ca6eb8b12715c34c22210bce2aa9e6a331679abdde18747d12ad32c9","last_reissued_at":"2026-07-05T08:22:10.968144Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:22:10.968144Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.14169","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:22:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"GYwkl4IEzYMQ05eNIsiZvkDFmRWghsucvTZmasrcGCykz6iULmknydy2l274tTPgRL3G3thqc+IhdnogObO+BQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T21:35:50.793911Z"},"content_sha256":"5b94e514cf49f8c2cdd7d0294258c694ccd96b1938efbca9ce34a17e95c54720","schema_version":"1.0","event_id":"sha256:5b94e514cf49f8c2cdd7d0294258c694ccd96b1938efbca9ce34a17e95c54720"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KAP5BQGKN24LCJYVYNGCEIILZY","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Transferable Attacks Against Vision-LLMs in Autonomous Driving with Typography","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Aishan Liu, Jie Zhang, Jin Song Dong, Nhat Chung, Qing Guo, Sensen Gao, Tuan-Anh Vu, Yun Lin","submitted_at":"2024-05-23T04:52:02Z","abstract_excerpt":"Vision-Large-Language-Models (Vision-LLMs) are increasingly being integrated into autonomous driving (AD) systems due to their advanced visual-language reasoning capabilities, targeting the perception, prediction, planning, and control mechanisms. However, Vision-LLMs have demonstrated susceptibilities against various types of adversarial attacks, which would compromise their reliability and safety. To further explore the risk in AD systems and the transferability of practical threats, we propose to leverage typographic attacks against AD systems relying on the decision-making capabilities of "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.14169","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.14169/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:22:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"XnRFkUoa+rDY1a8vRmcCMvu4rgtgLkCDQoEzP3koBDKWRtTCQrAhh5tw5ne95fW/+1a1q5BwYNgcq3nOlZc9BA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-14T21:35:50.794294Z"},"content_sha256":"cc0a786403d0cb87f29f2ab63c8cb0b5f6558fad3110bd7271bdb78e963a6414","schema_version":"1.0","event_id":"sha256:cc0a786403d0cb87f29f2ab63c8cb0b5f6558fad3110bd7271bdb78e963a6414"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KAP5BQGKN24LCJYVYNGCEIILZY/bundle.json","state_url":"https://pith.science/pith/KAP5BQGKN24LCJYVYNGCEIILZY/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KAP5BQGKN24LCJYVYNGCEIILZY/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-14T21:35:50Z","links":{"resolver":"https://pith.science/pith/KAP5BQGKN24LCJYVYNGCEIILZY","bundle":"https://pith.science/pith/KAP5BQGKN24LCJYVYNGCEIILZY/bundle.json","state":"https://pith.science/pith/KAP5BQGKN24LCJYVYNGCEIILZY/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KAP5BQGKN24LCJYVYNGCEIILZY/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KAP5BQGKN24LCJYVYNGCEIILZY","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"0439aee22043f06bcf8507af795f6f20f11caef83d281cb4a550f7621c746946","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-23T04:52:02Z","title_canon_sha256":"8b5f2d0cce1934915186ab17bfab4fd0ec54bde00b0844825dab9a89988efb57"},"schema_version":"1.0","source":{"id":"2405.14169","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.14169","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"arxiv_version","alias_value":"2405.14169v1","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.14169","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_12","alias_value":"KAP5BQGKN24L","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_16","alias_value":"KAP5BQGKN24LCJYV","created_at":"2026-07-05T08:22:10Z"},{"alias_kind":"pith_short_8","alias_value":"KAP5BQGK","created_at":"2026-07-05T08:22:10Z"}],"graph_snapshots":[{"event_id":"sha256:cc0a786403d0cb87f29f2ab63c8cb0b5f6558fad3110bd7271bdb78e963a6414","target":"graph","created_at":"2026-07-05T08:22:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.14169/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Vision-Large-Language-Models (Vision-LLMs) are increasingly being integrated into autonomous driving (AD) systems due to their advanced visual-language reasoning capabilities, targeting the perception, prediction, planning, and control mechanisms. However, Vision-LLMs have demonstrated susceptibilities against various types of adversarial attacks, which would compromise their reliability and safety. To further explore the risk in AD systems and the transferability of practical threats, we propose to leverage typographic attacks against AD systems relying on the decision-making capabilities of ","authors_text":"Aishan Liu, Jie Zhang, Jin Song Dong, Nhat Chung, Qing Guo, Sensen Gao, Tuan-Anh Vu, Yun Lin","cross_cats":[],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-23T04:52:02Z","title":"Towards Transferable Attacks Against Vision-LLMs in Autonomous Driving with Typography"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.14169","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:5b94e514cf49f8c2cdd7d0294258c694ccd96b1938efbca9ce34a17e95c54720","target":"record","created_at":"2026-07-05T08:22:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"0439aee22043f06bcf8507af795f6f20f11caef83d281cb4a550f7621c746946","cross_cats_sorted":[],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.CV","submitted_at":"2024-05-23T04:52:02Z","title_canon_sha256":"8b5f2d0cce1934915186ab17bfab4fd0ec54bde00b0844825dab9a89988efb57"},"schema_version":"1.0","source":{"id":"2405.14169","kind":"arxiv","version":1}},"canonical_sha256":"501fd0c0ca6eb8b12715c34c22210bce2aa9e6a331679abdde18747d12ad32c9","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"501fd0c0ca6eb8b12715c34c22210bce2aa9e6a331679abdde18747d12ad32c9","first_computed_at":"2026-07-05T08:22:10.968144Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:22:10.968144Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"xzippJqfFrsxRH1HvN7H/fY/VHnAHFq1A3f8Zlk3Qw90tGZ4Ar2or2OQmAP1blNE2z0qCfokVTCEgcUX+bPxDA==","signature_status":"signed_v1","signed_at":"2026-07-05T08:22:10.968628Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.14169","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:5b94e514cf49f8c2cdd7d0294258c694ccd96b1938efbca9ce34a17e95c54720","sha256:cc0a786403d0cb87f29f2ab63c8cb0b5f6558fad3110bd7271bdb78e963a6414"],"state_sha256":"976fd1fff0d263e069e8da99c7c0723334a1028d77858e46093e250277b96e55"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Xt3f80K4I6VvExLatfhWfGPZuMeXDnpIWnwAA1j9QUpuR79Y875rX6TRYaBRDF3AY+sLJ3gfx6eB2B9hrgCGBg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-14T21:35:50.797531Z","bundle_sha256":"72c7a999205edfa7b1e99df091b7a76a433d1ebb71f8ad4c2fafedd4483fda95"}}