{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:KFB2VV2TDXDOC36R5BVGTDVTMD","short_pith_number":"pith:KFB2VV2T","canonical_record":{"source":{"id":"2402.11940","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-19T08:27:23Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"22fff444fefd90adecb31a00ffae56055de24ec67d83b6619b93abe8da8a8078","abstract_canon_sha256":"ee1cbebb6c848b2d51e281382a64138369806ed9154cfeb5431e7f66ffba3299"},"schema_version":"1.0"},"canonical_sha256":"5143aad7531dc6e16fd1e86a698eb360f0a8a1dd670e9b7aac38d68a69ef3196","source":{"kind":"arxiv","id":"2402.11940","version":4},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.11940","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.11940v4","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.11940","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_12","alias_value":"KFB2VV2TDXDO","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_16","alias_value":"KFB2VV2TDXDOC36R","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_8","alias_value":"KFB2VV2T","created_at":"2026-07-05T09:47:54Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:KFB2VV2TDXDOC36R5BVGTDVTMD","target":"record","payload":{"canonical_record":{"source":{"id":"2402.11940","kind":"arxiv","version":4},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-19T08:27:23Z","cross_cats_sorted":["cs.CR","cs.LG"],"title_canon_sha256":"22fff444fefd90adecb31a00ffae56055de24ec67d83b6619b93abe8da8a8078","abstract_canon_sha256":"ee1cbebb6c848b2d51e281382a64138369806ed9154cfeb5431e7f66ffba3299"},"schema_version":"1.0"},"canonical_sha256":"5143aad7531dc6e16fd1e86a698eb360f0a8a1dd670e9b7aac38d68a69ef3196","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T09:47:54.454452Z","signature_b64":"14uJ1tVXcUIE1eyAGrY0N7XNgYuCmWNpJ682tvy/u/UE0niBGaJTQvvcvWrMI3UBewA6V4kKt22htCED14z3Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5143aad7531dc6e16fd1e86a698eb360f0a8a1dd670e9b7aac38d68a69ef3196","last_reissued_at":"2026-07-05T09:47:54.454003Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T09:47:54.454003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2402.11940","source_version":4,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"bsfT9Bp1I2KTysi5RGfp0UGNH6XuF/zXY438PSsF6+7fALjW0lfiIQu5Aaq5QVGlXBYH815bt39gr9ZgWjjyBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:51:54.715855Z"},"content_sha256":"42062c2f1a59d469b2796205e260118816d06231f7e89f7e8ce8b165c5b2de8f","schema_version":"1.0","event_id":"sha256:42062c2f1a59d469b2796205e260118816d06231f7e89f7e8ce8b165c5b2de8f"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:KFB2VV2TDXDOC36R5BVGTDVTMD","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AICAttack: Adversarial Image Captioning Attack with Attention-Based Optimization","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.CR","cs.LG"],"primary_cat":"cs.CV","authors_text":"Jiyao Li, Mingze Ni, Tianqing Zhu, Wei Liu, Yifei Dong","submitted_at":"2024-02-19T08:27:23Z","abstract_excerpt":"Recent advances in deep learning research have shown remarkable achievements across many tasks in computer vision (CV) and natural language processing (NLP). At the intersection of CV and NLP is the problem of image captioning, where the related models' robustness against adversarial attacks has not been well studied. This paper presents a novel adversarial attack strategy, AICAttack (Attention-based Image Captioning Attack), designed to attack image captioning models through subtle perturbations on images. Operating within a black-box attack scenario, our algorithm requires no access to the t"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.11940","kind":"arxiv","version":4},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2402.11940/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T09:47:54Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YBOkhYIalstmcuXGyqJaAQ5lQVpO6ZH5jUkr3ubSgbRhD0M0aey4Q8FjnTnHVuKSlyaHr9kWVO0pij+Zy+qMAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-05T07:51:54.716792Z"},"content_sha256":"b82541c8c5a79f5c73ba95951fbb0cfbf60ad2424e7589a96c70c022163eff9e","schema_version":"1.0","event_id":"sha256:b82541c8c5a79f5c73ba95951fbb0cfbf60ad2424e7589a96c70c022163eff9e"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/bundle.json","state_url":"https://pith.science/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-05T07:51:54Z","links":{"resolver":"https://pith.science/pith/KFB2VV2TDXDOC36R5BVGTDVTMD","bundle":"https://pith.science/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/bundle.json","state":"https://pith.science/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KFB2VV2TDXDOC36R5BVGTDVTMD/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:KFB2VV2TDXDOC36R5BVGTDVTMD","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"ee1cbebb6c848b2d51e281382a64138369806ed9154cfeb5431e7f66ffba3299","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-19T08:27:23Z","title_canon_sha256":"22fff444fefd90adecb31a00ffae56055de24ec67d83b6619b93abe8da8a8078"},"schema_version":"1.0","source":{"id":"2402.11940","kind":"arxiv","version":4}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2402.11940","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"arxiv_version","alias_value":"2402.11940v4","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2402.11940","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_12","alias_value":"KFB2VV2TDXDO","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_16","alias_value":"KFB2VV2TDXDOC36R","created_at":"2026-07-05T09:47:54Z"},{"alias_kind":"pith_short_8","alias_value":"KFB2VV2T","created_at":"2026-07-05T09:47:54Z"}],"graph_snapshots":[{"event_id":"sha256:b82541c8c5a79f5c73ba95951fbb0cfbf60ad2424e7589a96c70c022163eff9e","target":"graph","created_at":"2026-07-05T09:47:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2402.11940/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Recent advances in deep learning research have shown remarkable achievements across many tasks in computer vision (CV) and natural language processing (NLP). At the intersection of CV and NLP is the problem of image captioning, where the related models' robustness against adversarial attacks has not been well studied. This paper presents a novel adversarial attack strategy, AICAttack (Attention-based Image Captioning Attack), designed to attack image captioning models through subtle perturbations on images. Operating within a black-box attack scenario, our algorithm requires no access to the t","authors_text":"Jiyao Li, Mingze Ni, Tianqing Zhu, Wei Liu, Yifei Dong","cross_cats":["cs.CR","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-19T08:27:23Z","title":"AICAttack: Adversarial Image Captioning Attack with Attention-Based Optimization"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2402.11940","kind":"arxiv","version":4},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:42062c2f1a59d469b2796205e260118816d06231f7e89f7e8ce8b165c5b2de8f","target":"record","created_at":"2026-07-05T09:47:54Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"ee1cbebb6c848b2d51e281382a64138369806ed9154cfeb5431e7f66ffba3299","cross_cats_sorted":["cs.CR","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2024-02-19T08:27:23Z","title_canon_sha256":"22fff444fefd90adecb31a00ffae56055de24ec67d83b6619b93abe8da8a8078"},"schema_version":"1.0","source":{"id":"2402.11940","kind":"arxiv","version":4}},"canonical_sha256":"5143aad7531dc6e16fd1e86a698eb360f0a8a1dd670e9b7aac38d68a69ef3196","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5143aad7531dc6e16fd1e86a698eb360f0a8a1dd670e9b7aac38d68a69ef3196","first_computed_at":"2026-07-05T09:47:54.454003Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T09:47:54.454003Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"14uJ1tVXcUIE1eyAGrY0N7XNgYuCmWNpJ682tvy/u/UE0niBGaJTQvvcvWrMI3UBewA6V4kKt22htCED14z3Cg==","signature_status":"signed_v1","signed_at":"2026-07-05T09:47:54.454452Z","signed_message":"canonical_sha256_bytes"},"source_id":"2402.11940","source_kind":"arxiv","source_version":4}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:42062c2f1a59d469b2796205e260118816d06231f7e89f7e8ce8b165c5b2de8f","sha256:b82541c8c5a79f5c73ba95951fbb0cfbf60ad2424e7589a96c70c022163eff9e"],"state_sha256":"40eb706eb269b4aca023a4587475750c75a4a4ecede3d648f37175a50fd59db9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"TOTRe6l6dH5yLgDY7ueELkZHas7vYBJmPnbQK57uy3bfqc6K0yOWM+gFCujxrq3vGqkXmPNn++2XwfUqb/OMCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-05T07:51:54.724674Z","bundle_sha256":"f6bfecdc8c7f7814f93ceb083a9da427e7b8effe4d4e9b5a33b564fd5c10bfe3"}}