{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2023:KFHR2ESPPXNJ2GWEEBUOBVJJBE","short_pith_number":"pith:KFHR2ESP","canonical_record":{"source":{"id":"2303.11917","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T15:08:35Z","cross_cats_sorted":[],"title_canon_sha256":"35efe147e5833c790ea78ffdce2e4f9087e2a4335d586e6a4804736691bdc1b7","abstract_canon_sha256":"002e868e2058165c54b4d4b9f28e7a082ab7ce7f22027984df3b1411507e314c"},"schema_version":"1.0"},"canonical_sha256":"514f1d124f7dda9d1ac42068e0d529092fc2535cf10e1c62aa8c3a61a063bec0","source":{"kind":"arxiv","id":"2303.11917","version":2},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11917","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11917v2","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11917","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_12","alias_value":"KFHR2ESPPXNJ","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_16","alias_value":"KFHR2ESPPXNJ2GWE","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_8","alias_value":"KFHR2ESP","created_at":"2026-07-05T06:45:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2023:KFHR2ESPPXNJ2GWEEBUOBVJJBE","target":"record","payload":{"canonical_record":{"source":{"id":"2303.11917","kind":"arxiv","version":2},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T15:08:35Z","cross_cats_sorted":[],"title_canon_sha256":"35efe147e5833c790ea78ffdce2e4f9087e2a4335d586e6a4804736691bdc1b7","abstract_canon_sha256":"002e868e2058165c54b4d4b9f28e7a082ab7ce7f22027984df3b1411507e314c"},"schema_version":"1.0"},"canonical_sha256":"514f1d124f7dda9d1ac42068e0d529092fc2535cf10e1c62aa8c3a61a063bec0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T06:45:15.250310Z","signature_b64":"c6o6zKE92FaFnqSfqcaPMQcleU51CAiuZI3trSSaej8OUTI6j9HFE6bPhlVnLM6vIsAukums29AIk6Xy7jhcDQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"514f1d124f7dda9d1ac42068e0d529092fc2535cf10e1c62aa8c3a61a063bec0","last_reissued_at":"2026-07-05T06:45:15.249796Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T06:45:15.249796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2303.11917","source_version":2,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:45:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"6XG4FxiqCBAKwlusOfPM9spDIMgS4dLrU6Gmve1is4yZKHiBWPTTT3m/tftj7lI2XrDbG4PXm74nLFN1McHjCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:08:31.181601Z"},"content_sha256":"889249e23e7b443ce8ced5ca39c5d070710e9cc8be4ea7d7afca6a8a48959bf9","schema_version":"1.0","event_id":"sha256:889249e23e7b443ce8ced5ca39c5d070710e9cc8be4ea7d7afca6a8a48959bf9"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2023:KFHR2ESPPXNJ2GWEEBUOBVJJBE","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Bo Li, Dingkang Yang, Hao Huang, Jiafeng Wang, Kaixun Jiang, Wenqiang Zhang, Yan Wang, Zhaoyu Chen","submitted_at":"2023-03-21T15:08:35Z","abstract_excerpt":"Although Deep Neural Networks (DNNs) have demonstrated excellent performance, they are vulnerable to adversarial patches that introduce perceptible and localized perturbations to the input. Generating adversarial patches on images has received much attention, while adversarial patches on videos have not been well investigated. Further, decision-based attacks, where attackers only access the predicted hard labels by querying threat models, have not been well explored on video models either, even if they are practical in real-world video recognition scenes. The absence of such studies leads to a"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11917","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2303.11917/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T06:45:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"pOlMi8C13grDtiSbfPDxQU/hCBJuu2sAIC2EDQtNcNsF1JWXk1ExY9EZyl+UaUR9Z0x+nw29Tnhc6wtzeMi2CA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:08:31.182248Z"},"content_sha256":"61adb5629c4dabce5325a9335307d07d3372b6ad3f78ec635266ea5d9c0e1b20","schema_version":"1.0","event_id":"sha256:61adb5629c4dabce5325a9335307d07d3372b6ad3f78ec635266ea5d9c0e1b20"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/bundle.json","state_url":"https://pith.science/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:08:31Z","links":{"resolver":"https://pith.science/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE","bundle":"https://pith.science/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/bundle.json","state":"https://pith.science/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KFHR2ESPPXNJ2GWEEBUOBVJJBE/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2023:KFHR2ESPPXNJ2GWEEBUOBVJJBE","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"002e868e2058165c54b4d4b9f28e7a082ab7ce7f22027984df3b1411507e314c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T15:08:35Z","title_canon_sha256":"35efe147e5833c790ea78ffdce2e4f9087e2a4335d586e6a4804736691bdc1b7"},"schema_version":"1.0","source":{"id":"2303.11917","kind":"arxiv","version":2}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2303.11917","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"arxiv_version","alias_value":"2303.11917v2","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2303.11917","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_12","alias_value":"KFHR2ESPPXNJ","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_16","alias_value":"KFHR2ESPPXNJ2GWE","created_at":"2026-07-05T06:45:15Z"},{"alias_kind":"pith_short_8","alias_value":"KFHR2ESP","created_at":"2026-07-05T06:45:15Z"}],"graph_snapshots":[{"event_id":"sha256:61adb5629c4dabce5325a9335307d07d3372b6ad3f78ec635266ea5d9c0e1b20","target":"graph","created_at":"2026-07-05T06:45:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2303.11917/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Although Deep Neural Networks (DNNs) have demonstrated excellent performance, they are vulnerable to adversarial patches that introduce perceptible and localized perturbations to the input. Generating adversarial patches on images has received much attention, while adversarial patches on videos have not been well investigated. Further, decision-based attacks, where attackers only access the predicted hard labels by querying threat models, have not been well explored on video models either, even if they are practical in real-world video recognition scenes. The absence of such studies leads to a","authors_text":"Bo Li, Dingkang Yang, Hao Huang, Jiafeng Wang, Kaixun Jiang, Wenqiang Zhang, Yan Wang, Zhaoyu Chen","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T15:08:35Z","title":"Efficient Decision-based Black-box Patch Attacks on Video Recognition"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2303.11917","kind":"arxiv","version":2},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:889249e23e7b443ce8ced5ca39c5d070710e9cc8be4ea7d7afca6a8a48959bf9","target":"record","created_at":"2026-07-05T06:45:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"002e868e2058165c54b4d4b9f28e7a082ab7ce7f22027984df3b1411507e314c","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2023-03-21T15:08:35Z","title_canon_sha256":"35efe147e5833c790ea78ffdce2e4f9087e2a4335d586e6a4804736691bdc1b7"},"schema_version":"1.0","source":{"id":"2303.11917","kind":"arxiv","version":2}},"canonical_sha256":"514f1d124f7dda9d1ac42068e0d529092fc2535cf10e1c62aa8c3a61a063bec0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"514f1d124f7dda9d1ac42068e0d529092fc2535cf10e1c62aa8c3a61a063bec0","first_computed_at":"2026-07-05T06:45:15.249796Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T06:45:15.249796Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"c6o6zKE92FaFnqSfqcaPMQcleU51CAiuZI3trSSaej8OUTI6j9HFE6bPhlVnLM6vIsAukums29AIk6Xy7jhcDQ==","signature_status":"signed_v1","signed_at":"2026-07-05T06:45:15.250310Z","signed_message":"canonical_sha256_bytes"},"source_id":"2303.11917","source_kind":"arxiv","source_version":2}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:889249e23e7b443ce8ced5ca39c5d070710e9cc8be4ea7d7afca6a8a48959bf9","sha256:61adb5629c4dabce5325a9335307d07d3372b6ad3f78ec635266ea5d9c0e1b20"],"state_sha256":"518be52b3e607889fd4c07dadc2c11a9e300d5d2057eccef7ef02a3e9a9833da"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"EnYD9mPX/a5V1Ouw+hb/njjVcrEe6wVa5p7AD6mlzFLc+vPTZxNJCNQvPymY7ZZtUatpNSZIWIDLDHMt+w9kDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:08:31.186452Z","bundle_sha256":"fea9c9b5f2a9fddb1ec9527736510e5aeb7f5eef29aeba2543ee2f58c5ae1ce2"}}