{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2020:LFYR47CKDSCLGIPKDH77BVRWF6","short_pith_number":"pith:LFYR47CK","canonical_record":{"source":{"id":"2011.01183","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-02T18:19:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"7f714a558185b1fe2910787b9608cc03045db0dd42e74cd9a62201fef9b88e55","abstract_canon_sha256":"c1032545130553cecaa1ce1cea38f0dd204571c54f464bf5edf154877e74b3fa"},"schema_version":"1.0"},"canonical_sha256":"59711e7c4a1c84b321ea19fff0d6362fbc34e534f5aa6db412718efe8b22e977","source":{"kind":"arxiv","id":"2011.01183","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01183","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01183v3","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01183","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_12","alias_value":"LFYR47CKDSCL","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_16","alias_value":"LFYR47CKDSCLGIPK","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_8","alias_value":"LFYR47CK","created_at":"2026-07-05T04:55:47Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2020:LFYR47CKDSCLGIPKDH77BVRWF6","target":"record","payload":{"canonical_record":{"source":{"id":"2011.01183","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-02T18:19:44Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"7f714a558185b1fe2910787b9608cc03045db0dd42e74cd9a62201fef9b88e55","abstract_canon_sha256":"c1032545130553cecaa1ce1cea38f0dd204571c54f464bf5edf154877e74b3fa"},"schema_version":"1.0"},"canonical_sha256":"59711e7c4a1c84b321ea19fff0d6362fbc34e534f5aa6db412718efe8b22e977","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:55:47.996825Z","signature_b64":"cyilL8cOgGvnQCWrGhVfVqU+ALXqx+l16p+W9O6F5AkI8Xs7V/ZM2+awWzT3zsgAnRfHux+ZFSuipoVtbB29Cw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"59711e7c4a1c84b321ea19fff0d6362fbc34e534f5aa6db412718efe8b22e977","last_reissued_at":"2026-07-05T04:55:47.996476Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:55:47.996476Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2011.01183","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KCVRSucwdBRQ5dhYfVYwmCPI0lgBY6B1oqNLevrQ47NB9bT928T3dY3fqpljBxf+s4gpu7lDZ3f68+5MDIznAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T14:26:15.497012Z"},"content_sha256":"9bdf5e9de5c78a850b91560cd36fcb11d7ac58f7548585bfb9129261535d4f05","schema_version":"1.0","event_id":"sha256:9bdf5e9de5c78a850b91560cd36fcb11d7ac58f7548585bfb9129261535d4f05"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2020:LFYR47CKDSCLGIPKDH77BVRWF6","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Adversarial Examples in Constrained Domains","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CR","authors_text":"Gunjan Verma, Michael Weisman, Nicolas Papernot, Patrick McDaniel, Ryan Sheatsley","submitted_at":"2020-11-02T18:19:44Z","abstract_excerpt":"Machine learning algorithms have been shown to be vulnerable to adversarial manipulation through systematic modification of inputs (e.g., adversarial examples) in domains such as image recognition. Under the default threat model, the adversary exploits the unconstrained nature of images; each feature (pixel) is fully under control of the adversary. However, it is not clear how these attacks translate to constrained domains that limit which and how features can be modified by the adversary (e.g., network intrusion detection). In this paper, we explore whether constrained domains are less vulner"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01183","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2011.01183/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:55:47Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"RXPAWZ+DkOsxjpp8VIrci6QMFHr48ctdsGCdu+amskJC0YT7Oy3RVLVSINzcussH3CTiOzXFQ0dR/90xtaPHBA==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-17T14:26:15.497550Z"},"content_sha256":"3ad711fcd94993e4e29eb3536eb105725650c2a6d115407a33d8bb66bbfb5e6f","schema_version":"1.0","event_id":"sha256:3ad711fcd94993e4e29eb3536eb105725650c2a6d115407a33d8bb66bbfb5e6f"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LFYR47CKDSCLGIPKDH77BVRWF6/bundle.json","state_url":"https://pith.science/pith/LFYR47CKDSCLGIPKDH77BVRWF6/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LFYR47CKDSCLGIPKDH77BVRWF6/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-17T14:26:15Z","links":{"resolver":"https://pith.science/pith/LFYR47CKDSCLGIPKDH77BVRWF6","bundle":"https://pith.science/pith/LFYR47CKDSCLGIPKDH77BVRWF6/bundle.json","state":"https://pith.science/pith/LFYR47CKDSCLGIPKDH77BVRWF6/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LFYR47CKDSCLGIPKDH77BVRWF6/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2020:LFYR47CKDSCLGIPKDH77BVRWF6","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"c1032545130553cecaa1ce1cea38f0dd204571c54f464bf5edf154877e74b3fa","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-02T18:19:44Z","title_canon_sha256":"7f714a558185b1fe2910787b9608cc03045db0dd42e74cd9a62201fef9b88e55"},"schema_version":"1.0","source":{"id":"2011.01183","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2011.01183","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"arxiv_version","alias_value":"2011.01183v3","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2011.01183","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_12","alias_value":"LFYR47CKDSCL","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_16","alias_value":"LFYR47CKDSCLGIPK","created_at":"2026-07-05T04:55:47Z"},{"alias_kind":"pith_short_8","alias_value":"LFYR47CK","created_at":"2026-07-05T04:55:47Z"}],"graph_snapshots":[{"event_id":"sha256:3ad711fcd94993e4e29eb3536eb105725650c2a6d115407a33d8bb66bbfb5e6f","target":"graph","created_at":"2026-07-05T04:55:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2011.01183/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Machine learning algorithms have been shown to be vulnerable to adversarial manipulation through systematic modification of inputs (e.g., adversarial examples) in domains such as image recognition. Under the default threat model, the adversary exploits the unconstrained nature of images; each feature (pixel) is fully under control of the adversary. However, it is not clear how these attacks translate to constrained domains that limit which and how features can be modified by the adversary (e.g., network intrusion detection). In this paper, we explore whether constrained domains are less vulner","authors_text":"Gunjan Verma, Michael Weisman, Nicolas Papernot, Patrick McDaniel, Ryan Sheatsley","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-02T18:19:44Z","title":"Adversarial Examples in Constrained Domains"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2011.01183","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:9bdf5e9de5c78a850b91560cd36fcb11d7ac58f7548585bfb9129261535d4f05","target":"record","created_at":"2026-07-05T04:55:47Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"c1032545130553cecaa1ce1cea38f0dd204571c54f464bf5edf154877e74b3fa","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2020-11-02T18:19:44Z","title_canon_sha256":"7f714a558185b1fe2910787b9608cc03045db0dd42e74cd9a62201fef9b88e55"},"schema_version":"1.0","source":{"id":"2011.01183","kind":"arxiv","version":3}},"canonical_sha256":"59711e7c4a1c84b321ea19fff0d6362fbc34e534f5aa6db412718efe8b22e977","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"59711e7c4a1c84b321ea19fff0d6362fbc34e534f5aa6db412718efe8b22e977","first_computed_at":"2026-07-05T04:55:47.996476Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:55:47.996476Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"cyilL8cOgGvnQCWrGhVfVqU+ALXqx+l16p+W9O6F5AkI8Xs7V/ZM2+awWzT3zsgAnRfHux+ZFSuipoVtbB29Cw==","signature_status":"signed_v1","signed_at":"2026-07-05T04:55:47.996825Z","signed_message":"canonical_sha256_bytes"},"source_id":"2011.01183","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:9bdf5e9de5c78a850b91560cd36fcb11d7ac58f7548585bfb9129261535d4f05","sha256:3ad711fcd94993e4e29eb3536eb105725650c2a6d115407a33d8bb66bbfb5e6f"],"state_sha256":"4bc2a6a7a6711f8eb9c61cf73dd7f5dd0dc7a0f6ab1a1711e11303a987504e4d"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"PUpdiuHreGrFwpcqR1KCBxthtToSdq4zYb9mP9Ivy4YL1+B+W+F9rf5plH1eqNd2iZn0Mier6u26YRYAZuijBQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-17T14:26:15.501324Z","bundle_sha256":"112b5f9e595be0d2ece8a9b5a48cb193623c4128c04dd4a7d7402172cdc0e90e"}}