{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:KBBYWGRADV2WQWEFNZJUCQYU2K","short_pith_number":"pith:KBBYWGRA","canonical_record":{"source":{"id":"1909.13857","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-30T17:35:02Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"7e496187b965c63b313adbf6623cf6e6301ef1211ec75aa81654e2287aab70a5","abstract_canon_sha256":"e8030fd7501d21d910df7c9d56aa9e3894bb38174c7090b32e5ef5533ffcafe6"},"schema_version":"1.0"},"canonical_sha256":"50438b1a201d756858856e53414314d293e32618fabf138e030e61c0adba9455","source":{"kind":"arxiv","id":"1909.13857","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.13857","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"arxiv_version","alias_value":"1909.13857v1","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.13857","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_12","alias_value":"KBBYWGRADV2W","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_16","alias_value":"KBBYWGRADV2WQWEF","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_8","alias_value":"KBBYWGRA","created_at":"2026-07-05T00:08:14Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:KBBYWGRADV2WQWEFNZJUCQYU2K","target":"record","payload":{"canonical_record":{"source":{"id":"1909.13857","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-30T17:35:02Z","cross_cats_sorted":["stat.ML"],"title_canon_sha256":"7e496187b965c63b313adbf6623cf6e6301ef1211ec75aa81654e2287aab70a5","abstract_canon_sha256":"e8030fd7501d21d910df7c9d56aa9e3894bb38174c7090b32e5ef5533ffcafe6"},"schema_version":"1.0"},"canonical_sha256":"50438b1a201d756858856e53414314d293e32618fabf138e030e61c0adba9455","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:08:14.776461Z","signature_b64":"O7o+klS1E1uOPdqzQQepzKDNfETVz6cmBOFAjp3EuvPbzk+t7XT1ZmGqbdwQC4hETwx0OGKH0PWhhdoW4wOIDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"50438b1a201d756858856e53414314d293e32618fabf138e030e61c0adba9455","last_reissued_at":"2026-07-05T00:08:14.776018Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:08:14.776018Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.13857","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:08:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"1+Z42YPXCPKEQxGNWyVtmswyiR19bK3oDg9gXmDXdLRKyzG9IvBWMRYifKgUKODA2/7nuog13BtUfY09stcNAA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T22:30:59.569845Z"},"content_sha256":"227918a0a097e0fd02bbea63cfec2b2b759a0b9b37f32f946ae210b3e9a859a4","schema_version":"1.0","event_id":"sha256:227918a0a097e0fd02bbea63cfec2b2b759a0b9b37f32f946ae210b3e9a859a4"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:KBBYWGRADV2WQWEFNZJUCQYU2K","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Black-box Adversarial Attacks with Bayesian Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["stat.ML"],"primary_cat":"cs.LG","authors_text":"Anit Kumar Sahu, Devin Willmott, J. Zico Kolter, Satya Narayan Shukla","submitted_at":"2019-09-30T17:35:02Z","abstract_excerpt":"We focus on the problem of black-box adversarial attacks, where the aim is to generate adversarial examples using information limited to loss function evaluations of input-output pairs. We use Bayesian optimization~(BO) to specifically cater to scenarios involving low query budgets to develop query efficient adversarial attacks. We alleviate the issues surrounding BO in regards to optimizing high dimensional deep learning models by effective dimension upsampling techniques. Our proposed approach achieves performance comparable to the state of the art black-box adversarial attacks albeit with a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.13857","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.13857/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:08:14Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"JXYgyPQmqi9R5do5TqU9preowHuAtmyMTXEMio3D5k3pHl9fyFVmovDIvarSPIuN0LKnTmZoiq5/QiUPX1VZAg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T22:30:59.570779Z"},"content_sha256":"e78aa27b736532e39cb03b314ef54620a1413ced51089b8e19799b0813303e39","schema_version":"1.0","event_id":"sha256:e78aa27b736532e39cb03b314ef54620a1413ced51089b8e19799b0813303e39"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/bundle.json","state_url":"https://pith.science/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T22:30:59Z","links":{"resolver":"https://pith.science/pith/KBBYWGRADV2WQWEFNZJUCQYU2K","bundle":"https://pith.science/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/bundle.json","state":"https://pith.science/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KBBYWGRADV2WQWEFNZJUCQYU2K/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:KBBYWGRADV2WQWEFNZJUCQYU2K","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"e8030fd7501d21d910df7c9d56aa9e3894bb38174c7090b32e5ef5533ffcafe6","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-30T17:35:02Z","title_canon_sha256":"7e496187b965c63b313adbf6623cf6e6301ef1211ec75aa81654e2287aab70a5"},"schema_version":"1.0","source":{"id":"1909.13857","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.13857","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"arxiv_version","alias_value":"1909.13857v1","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.13857","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_12","alias_value":"KBBYWGRADV2W","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_16","alias_value":"KBBYWGRADV2WQWEF","created_at":"2026-07-05T00:08:14Z"},{"alias_kind":"pith_short_8","alias_value":"KBBYWGRA","created_at":"2026-07-05T00:08:14Z"}],"graph_snapshots":[{"event_id":"sha256:e78aa27b736532e39cb03b314ef54620a1413ced51089b8e19799b0813303e39","target":"graph","created_at":"2026-07-05T00:08:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.13857/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"We focus on the problem of black-box adversarial attacks, where the aim is to generate adversarial examples using information limited to loss function evaluations of input-output pairs. We use Bayesian optimization~(BO) to specifically cater to scenarios involving low query budgets to develop query efficient adversarial attacks. We alleviate the issues surrounding BO in regards to optimizing high dimensional deep learning models by effective dimension upsampling techniques. Our proposed approach achieves performance comparable to the state of the art black-box adversarial attacks albeit with a","authors_text":"Anit Kumar Sahu, Devin Willmott, J. Zico Kolter, Satya Narayan Shukla","cross_cats":["stat.ML"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-30T17:35:02Z","title":"Black-box Adversarial Attacks with Bayesian Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.13857","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:227918a0a097e0fd02bbea63cfec2b2b759a0b9b37f32f946ae210b3e9a859a4","target":"record","created_at":"2026-07-05T00:08:14Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"e8030fd7501d21d910df7c9d56aa9e3894bb38174c7090b32e5ef5533ffcafe6","cross_cats_sorted":["stat.ML"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.LG","submitted_at":"2019-09-30T17:35:02Z","title_canon_sha256":"7e496187b965c63b313adbf6623cf6e6301ef1211ec75aa81654e2287aab70a5"},"schema_version":"1.0","source":{"id":"1909.13857","kind":"arxiv","version":1}},"canonical_sha256":"50438b1a201d756858856e53414314d293e32618fabf138e030e61c0adba9455","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"50438b1a201d756858856e53414314d293e32618fabf138e030e61c0adba9455","first_computed_at":"2026-07-05T00:08:14.776018Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:08:14.776018Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"O7o+klS1E1uOPdqzQQepzKDNfETVz6cmBOFAjp3EuvPbzk+t7XT1ZmGqbdwQC4hETwx0OGKH0PWhhdoW4wOIDg==","signature_status":"signed_v1","signed_at":"2026-07-05T00:08:14.776461Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.13857","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:227918a0a097e0fd02bbea63cfec2b2b759a0b9b37f32f946ae210b3e9a859a4","sha256:e78aa27b736532e39cb03b314ef54620a1413ced51089b8e19799b0813303e39"],"state_sha256":"8c6873101324caffbb8988a3f767bc325f18aa740f3293a1e2170fdb7be73f90"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"f3k1uDhRQquq1iffdF3x4s4QBXb20Prdjew8n6QjU2Czz9TRF05A/r//om9MrqvCDeaEDOPaw8iWhUNj+mF/Dg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T22:30:59.580489Z","bundle_sha256":"3fa8e7019f3a47804f15456a50eff785d9f5ed7ee14c2492e5861bdade19fa54"}}