{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:KZX7NCND6OVN7YNUZPFVQ3RF3X","short_pith_number":"pith:KZX7NCND","canonical_record":{"source":{"id":"1910.11099","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-18T02:20:17Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"4cec77743ac6d973a53df61861d8f13f638ae2925127f457d27d1e278883eb15","abstract_canon_sha256":"b890db361970318792c826bf60d3d0013769b7d14aa5b5fe7ff9f177d6b5f098"},"schema_version":"1.0"},"canonical_sha256":"566ff689a3f3aadfe1b4cbcb586e25ddd91a460fdac1b20232f6011447bf369b","source":{"kind":"arxiv","id":"1910.11099","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.11099","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"arxiv_version","alias_value":"1910.11099v3","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.11099","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_12","alias_value":"KZX7NCND6OVN","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_16","alias_value":"KZX7NCND6OVN7YNU","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_8","alias_value":"KZX7NCND","created_at":"2026-07-05T01:16:10Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:KZX7NCND6OVN7YNUZPFVQ3RF3X","target":"record","payload":{"canonical_record":{"source":{"id":"1910.11099","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-18T02:20:17Z","cross_cats_sorted":["cs.AI","cs.LG"],"title_canon_sha256":"4cec77743ac6d973a53df61861d8f13f638ae2925127f457d27d1e278883eb15","abstract_canon_sha256":"b890db361970318792c826bf60d3d0013769b7d14aa5b5fe7ff9f177d6b5f098"},"schema_version":"1.0"},"canonical_sha256":"566ff689a3f3aadfe1b4cbcb586e25ddd91a460fdac1b20232f6011447bf369b","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T01:16:10.241159Z","signature_b64":"LhLWawblD1Xyi0u7E1X1B3Ync+4YAy4BlGPOEpTHd2sIwfncBNSPoYmIIKfvPlQMQG79bIWC75Omthhi/PtnAA==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"566ff689a3f3aadfe1b4cbcb586e25ddd91a460fdac1b20232f6011447bf369b","last_reissued_at":"2026-07-05T01:16:10.240706Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T01:16:10.240706Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1910.11099","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:16:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/LEAvAZPaUTgns9rFUglRTbpmqzZ2y9siO+usr31+c/3W6tnJsh53EdB3B5hG0GxXFsSggXsPPjEHlTPu4lOCw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:30:24.696383Z"},"content_sha256":"2241a8110c351bc85e7a8c398c2ddb97b4182c03d4696322735da4e972fea905","schema_version":"1.0","event_id":"sha256:2241a8110c351bc85e7a8c398c2ddb97b4182c03d4696322735da4e972fea905"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:KZX7NCND6OVN7YNUZPFVQ3RF3X","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial T-shirt! Evading Person Detectors in A Physical World","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.AI","cs.LG"],"primary_cat":"cs.CV","authors_text":"Gaoyuan Zhang, Hongge Chen, Kaidi Xu, Mengshu Sun, Pin-Yu Chen, Quanfu Fan, Sijia Liu, Xue Lin, Yanzhi Wang","submitted_at":"2019-10-18T02:20:17Z","abstract_excerpt":"It is known that deep neural networks (DNNs) are vulnerable to adversarial attacks. The so-called physical adversarial examples deceive DNN-based decisionmakers by attaching adversarial patches to real objects. However, most of the existing works on physical adversarial attacks focus on static objects such as glass frames, stop signs and images attached to cardboard. In this work, we proposed adversarial T-shirts, a robust physical adversarial example for evading person detectors even if it could undergo non-rigid deformation due to a moving person's pose changes. To the best of our knowledge,"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.11099","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1910.11099/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T01:16:10Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"ViFcmvNvHSs8roAZQ01xDObmiouMz+BfDjZVD6RsvJhOrnpuRYOEpjGjIixgtmvP3eTPUvWI+6YB9BEaiIeuDA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-13T09:30:24.697168Z"},"content_sha256":"765c40a030c97d613ba846946582c1c68c24649a36fd1dc5f123e1584f93f7e2","schema_version":"1.0","event_id":"sha256:765c40a030c97d613ba846946582c1c68c24649a36fd1dc5f123e1584f93f7e2"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/bundle.json","state_url":"https://pith.science/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-13T09:30:24Z","links":{"resolver":"https://pith.science/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X","bundle":"https://pith.science/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/bundle.json","state":"https://pith.science/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/state.json","well_known_bundle":"https://pith.science/.well-known/pith/KZX7NCND6OVN7YNUZPFVQ3RF3X/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:KZX7NCND6OVN7YNUZPFVQ3RF3X","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"b890db361970318792c826bf60d3d0013769b7d14aa5b5fe7ff9f177d6b5f098","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-18T02:20:17Z","title_canon_sha256":"4cec77743ac6d973a53df61861d8f13f638ae2925127f457d27d1e278883eb15"},"schema_version":"1.0","source":{"id":"1910.11099","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1910.11099","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"arxiv_version","alias_value":"1910.11099v3","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1910.11099","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_12","alias_value":"KZX7NCND6OVN","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_16","alias_value":"KZX7NCND6OVN7YNU","created_at":"2026-07-05T01:16:10Z"},{"alias_kind":"pith_short_8","alias_value":"KZX7NCND","created_at":"2026-07-05T01:16:10Z"}],"graph_snapshots":[{"event_id":"sha256:765c40a030c97d613ba846946582c1c68c24649a36fd1dc5f123e1584f93f7e2","target":"graph","created_at":"2026-07-05T01:16:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1910.11099/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"It is known that deep neural networks (DNNs) are vulnerable to adversarial attacks. The so-called physical adversarial examples deceive DNN-based decisionmakers by attaching adversarial patches to real objects. However, most of the existing works on physical adversarial attacks focus on static objects such as glass frames, stop signs and images attached to cardboard. In this work, we proposed adversarial T-shirts, a robust physical adversarial example for evading person detectors even if it could undergo non-rigid deformation due to a moving person's pose changes. To the best of our knowledge,","authors_text":"Gaoyuan Zhang, Hongge Chen, Kaidi Xu, Mengshu Sun, Pin-Yu Chen, Quanfu Fan, Sijia Liu, Xue Lin, Yanzhi Wang","cross_cats":["cs.AI","cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-18T02:20:17Z","title":"Adversarial T-shirt! Evading Person Detectors in A Physical World"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1910.11099","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2241a8110c351bc85e7a8c398c2ddb97b4182c03d4696322735da4e972fea905","target":"record","created_at":"2026-07-05T01:16:10Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"b890db361970318792c826bf60d3d0013769b7d14aa5b5fe7ff9f177d6b5f098","cross_cats_sorted":["cs.AI","cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-10-18T02:20:17Z","title_canon_sha256":"4cec77743ac6d973a53df61861d8f13f638ae2925127f457d27d1e278883eb15"},"schema_version":"1.0","source":{"id":"1910.11099","kind":"arxiv","version":3}},"canonical_sha256":"566ff689a3f3aadfe1b4cbcb586e25ddd91a460fdac1b20232f6011447bf369b","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"566ff689a3f3aadfe1b4cbcb586e25ddd91a460fdac1b20232f6011447bf369b","first_computed_at":"2026-07-05T01:16:10.240706Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T01:16:10.240706Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"LhLWawblD1Xyi0u7E1X1B3Ync+4YAy4BlGPOEpTHd2sIwfncBNSPoYmIIKfvPlQMQG79bIWC75Omthhi/PtnAA==","signature_status":"signed_v1","signed_at":"2026-07-05T01:16:10.241159Z","signed_message":"canonical_sha256_bytes"},"source_id":"1910.11099","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2241a8110c351bc85e7a8c398c2ddb97b4182c03d4696322735da4e972fea905","sha256:765c40a030c97d613ba846946582c1c68c24649a36fd1dc5f123e1584f93f7e2"],"state_sha256":"83c848994594acee18617e319557425eed4458b58041461b371cbd18e9f2d9be"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"c8y4YwpGUya9zFfWWJyyGICjmslZPz36v4X7lpeZbViVY00d7Ph0y3vUOXPN7XJem4LVCli5YMgDVry1NdKYDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-13T09:30:24.699986Z","bundle_sha256":"1652befc6aed16b5705f34c2deca6b891deba8679535c4121e39131800daefa8"}}