{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:KQGVHQL6TOHWT4TPHEPZRC3CI2","short_pith_number":"pith:KQGVHQL6","schema_version":"1.0","canonical_sha256":"540d53c17e9b8f69f26f391f988b6246b1d471730e3655760587b5d0d9257e66","source":{"kind":"arxiv","id":"2207.05382","version":1},"attestation_state":"computed","paper":{"title":"Frequency Domain Model Augmentation for Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Boheng Zeng, Jian Zhang, Jingkuan Song, Lianli Gao, Qilong Zhang, Xianglong Liu, Yuyang Long","submitted_at":"2022-07-12T08:26:21Z","abstract_excerpt":"For black-box attacks, the gap between the substitute model and the victim model is usually large, which manifests as a weak attack performance. Motivated by the observation that the transferability of adversarial examples can be improved by attacking diverse models simultaneously, model augmentation methods which simulate different models by using transformed images are proposed. However, existing transformations for spatial domain do not translate to significantly diverse augmented models. To tackle this issue, we propose a novel spectrum simulation attack to craft more transferable adversar"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2207.05382","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2022-07-12T08:26:21Z","cross_cats_sorted":[],"title_canon_sha256":"4bfc65d46906617bacfa453d0f7a9fee89c9be63cb0d34d0388ab8a61de3a2de","abstract_canon_sha256":"0e3aad2d4d88e345348af3af118355ab7c2c99ddc703829f506e7e44cb36a99b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:39:41.996189Z","signature_b64":"dGfU57rA89zcoewzOA3hV6mn/RrqgM14M46V4AAu2eg1L0Nw3YTiicDGTn8Ooq2D36B9gT48MQq/u4UmxXAPDg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"540d53c17e9b8f69f26f391f988b6246b1d471730e3655760587b5d0d9257e66","last_reissued_at":"2026-07-05T04:39:41.995845Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:39:41.995845Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Frequency Domain Model Augmentation for Adversarial Attack","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CV","authors_text":"Boheng Zeng, Jian Zhang, Jingkuan Song, Lianli Gao, Qilong Zhang, Xianglong Liu, Yuyang Long","submitted_at":"2022-07-12T08:26:21Z","abstract_excerpt":"For black-box attacks, the gap between the substitute model and the victim model is usually large, which manifests as a weak attack performance. Motivated by the observation that the transferability of adversarial examples can be improved by attacking diverse models simultaneously, model augmentation methods which simulate different models by using transformed images are proposed. However, existing transformations for spatial domain do not translate to significantly diverse augmented models. To tackle this issue, we propose a novel spectrum simulation attack to craft more transferable adversar"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2207.05382","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2207.05382/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2207.05382","created_at":"2026-07-05T04:39:41.995902+00:00"},{"alias_kind":"arxiv_version","alias_value":"2207.05382v1","created_at":"2026-07-05T04:39:41.995902+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2207.05382","created_at":"2026-07-05T04:39:41.995902+00:00"},{"alias_kind":"pith_short_12","alias_value":"KQGVHQL6TOHW","created_at":"2026-07-05T04:39:41.995902+00:00"},{"alias_kind":"pith_short_16","alias_value":"KQGVHQL6TOHWT4TP","created_at":"2026-07-05T04:39:41.995902+00:00"},{"alias_kind":"pith_short_8","alias_value":"KQGVHQL6","created_at":"2026-07-05T04:39:41.995902+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2","json":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2.json","graph_json":"https://pith.science/api/pith-number/KQGVHQL6TOHWT4TPHEPZRC3CI2/graph.json","events_json":"https://pith.science/api/pith-number/KQGVHQL6TOHWT4TPHEPZRC3CI2/events.json","paper":"https://pith.science/paper/KQGVHQL6"},"agent_actions":{"view_html":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2","download_json":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2.json","view_paper":"https://pith.science/paper/KQGVHQL6","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2207.05382&json=true","fetch_graph":"https://pith.science/api/pith-number/KQGVHQL6TOHWT4TPHEPZRC3CI2/graph.json","fetch_events":"https://pith.science/api/pith-number/KQGVHQL6TOHWT4TPHEPZRC3CI2/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2/action/timestamp_anchor","attest_storage":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2/action/storage_attestation","attest_author":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2/action/author_attestation","sign_citation":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2/action/citation_signature","submit_replication":"https://pith.science/pith/KQGVHQL6TOHWT4TPHEPZRC3CI2/action/replication_record"}},"created_at":"2026-07-05T04:39:41.995902+00:00","updated_at":"2026-07-05T04:39:41.995902+00:00"}