{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:LLDBWYFJFYEYZNAQVU4XXOX3N7","short_pith_number":"pith:LLDBWYFJ","canonical_record":{"source":{"id":"2408.10647","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T08:40:39Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"503f556a8d98423ab88abb472f842a70535ff76641a7331493bed50bd7be29aa","abstract_canon_sha256":"13a634c94039c735d24bf0a6c6eae01ca6e179d6472d3f119f0f3cc4659c8879"},"schema_version":"1.0"},"canonical_sha256":"5ac61b60a92e098cb410ad397bbafb6ffab998d275dece78e8dacc9d3b6edde0","source":{"kind":"arxiv","id":"2408.10647","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10647","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10647v1","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10647","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_12","alias_value":"LLDBWYFJFYEY","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_16","alias_value":"LLDBWYFJFYEYZNAQ","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_8","alias_value":"LLDBWYFJ","created_at":"2026-07-05T08:57:15Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:LLDBWYFJFYEYZNAQVU4XXOX3N7","target":"record","payload":{"canonical_record":{"source":{"id":"2408.10647","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T08:40:39Z","cross_cats_sorted":["cs.AI","cs.CR"],"title_canon_sha256":"503f556a8d98423ab88abb472f842a70535ff76641a7331493bed50bd7be29aa","abstract_canon_sha256":"13a634c94039c735d24bf0a6c6eae01ca6e179d6472d3f119f0f3cc4659c8879"},"schema_version":"1.0"},"canonical_sha256":"5ac61b60a92e098cb410ad397bbafb6ffab998d275dece78e8dacc9d3b6edde0","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:57:15.142332Z","signature_b64":"QBRC29x8WLMzZrzvIKLDHfZCZwl9yyyOtqm1iAoTaEfnerBU4KMLGpob4dWDfhztfpBS7DbqzW5dXcb8Pi9BCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5ac61b60a92e098cb410ad397bbafb6ffab998d275dece78e8dacc9d3b6edde0","last_reissued_at":"2026-07-05T08:57:15.141939Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:57:15.141939Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2408.10647","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"tj9l3JVzP06SkxX/UHtCPhL5TKJuihoP+JY2vqS6DMT6j/SbH1wg/Sy1R5EBeNh6GeQ3XG00Tvj87G2wfPlnDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:23:49.779714Z"},"content_sha256":"236047b1b6f4ee641a99bf9ba6114b1cd47e6d5f16d8fb3d7bf865ca307d2393","schema_version":"1.0","event_id":"sha256:236047b1b6f4ee641a99bf9ba6114b1cd47e6d5f16d8fb3d7bf865ca307d2393"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:LLDBWYFJFYEYZNAQVU4XXOX3N7","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Privacy-preserving Universal Adversarial Defense for Black-box Models","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":["cs.AI","cs.CR"],"primary_cat":"cs.LG","authors_text":"Cong Wu, Jing Chen, Kun He, Qiao Li, Qingchuang Zhao, Ruiying Du, Xinxin Wang, Yang Liu, Zijun Zhang","submitted_at":"2024-08-20T08:40:39Z","abstract_excerpt":"Deep neural networks (DNNs) are increasingly used in critical applications such as identity authentication and autonomous driving, where robustness against adversarial attacks is crucial. These attacks can exploit minor perturbations to cause significant prediction errors, making it essential to enhance the resilience of DNNs. Traditional defense methods often rely on access to detailed model information, which raises privacy concerns, as model owners may be reluctant to share such data. In contrast, existing black-box defense methods fail to offer a universal defense against various types of "},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10647","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2408.10647/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:57:15Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"KSphxeq5kr4LrzWznvW+bcTbflv83Xv7E+pcYd6JbZWTy7URKt37v5MSq17HgRbMr5pt+rMrmX5Jmn08Yv7mDQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-12T22:23:49.780209Z"},"content_sha256":"83df99826ee8061e11c7e303be0969cfb15c7ccc91559708d918dd16eabc5ae7","schema_version":"1.0","event_id":"sha256:83df99826ee8061e11c7e303be0969cfb15c7ccc91559708d918dd16eabc5ae7"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/bundle.json","state_url":"https://pith.science/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-12T22:23:49Z","links":{"resolver":"https://pith.science/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7","bundle":"https://pith.science/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/bundle.json","state":"https://pith.science/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LLDBWYFJFYEYZNAQVU4XXOX3N7/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:LLDBWYFJFYEYZNAQVU4XXOX3N7","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"13a634c94039c735d24bf0a6c6eae01ca6e179d6472d3f119f0f3cc4659c8879","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T08:40:39Z","title_canon_sha256":"503f556a8d98423ab88abb472f842a70535ff76641a7331493bed50bd7be29aa"},"schema_version":"1.0","source":{"id":"2408.10647","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2408.10647","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"arxiv_version","alias_value":"2408.10647v1","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2408.10647","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_12","alias_value":"LLDBWYFJFYEY","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_16","alias_value":"LLDBWYFJFYEYZNAQ","created_at":"2026-07-05T08:57:15Z"},{"alias_kind":"pith_short_8","alias_value":"LLDBWYFJ","created_at":"2026-07-05T08:57:15Z"}],"graph_snapshots":[{"event_id":"sha256:83df99826ee8061e11c7e303be0969cfb15c7ccc91559708d918dd16eabc5ae7","target":"graph","created_at":"2026-07-05T08:57:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2408.10647/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Deep neural networks (DNNs) are increasingly used in critical applications such as identity authentication and autonomous driving, where robustness against adversarial attacks is crucial. These attacks can exploit minor perturbations to cause significant prediction errors, making it essential to enhance the resilience of DNNs. Traditional defense methods often rely on access to detailed model information, which raises privacy concerns, as model owners may be reluctant to share such data. In contrast, existing black-box defense methods fail to offer a universal defense against various types of ","authors_text":"Cong Wu, Jing Chen, Kun He, Qiao Li, Qingchuang Zhao, Ruiying Du, Xinxin Wang, Yang Liu, Zijun Zhang","cross_cats":["cs.AI","cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T08:40:39Z","title":"Privacy-preserving Universal Adversarial Defense for Black-box Models"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2408.10647","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:236047b1b6f4ee641a99bf9ba6114b1cd47e6d5f16d8fb3d7bf865ca307d2393","target":"record","created_at":"2026-07-05T08:57:15Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"13a634c94039c735d24bf0a6c6eae01ca6e179d6472d3f119f0f3cc4659c8879","cross_cats_sorted":["cs.AI","cs.CR"],"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2024-08-20T08:40:39Z","title_canon_sha256":"503f556a8d98423ab88abb472f842a70535ff76641a7331493bed50bd7be29aa"},"schema_version":"1.0","source":{"id":"2408.10647","kind":"arxiv","version":1}},"canonical_sha256":"5ac61b60a92e098cb410ad397bbafb6ffab998d275dece78e8dacc9d3b6edde0","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5ac61b60a92e098cb410ad397bbafb6ffab998d275dece78e8dacc9d3b6edde0","first_computed_at":"2026-07-05T08:57:15.141939Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:57:15.141939Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"QBRC29x8WLMzZrzvIKLDHfZCZwl9yyyOtqm1iAoTaEfnerBU4KMLGpob4dWDfhztfpBS7DbqzW5dXcb8Pi9BCg==","signature_status":"signed_v1","signed_at":"2026-07-05T08:57:15.142332Z","signed_message":"canonical_sha256_bytes"},"source_id":"2408.10647","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:236047b1b6f4ee641a99bf9ba6114b1cd47e6d5f16d8fb3d7bf865ca307d2393","sha256:83df99826ee8061e11c7e303be0969cfb15c7ccc91559708d918dd16eabc5ae7"],"state_sha256":"a0a69a078a175f1850376303294b7932f7bcc8985c412016b7fc4270fb9d0288"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UaTYhXu0SxH4ZH6+4BPedgM3b6q/S0C8htOjuC6eou+C7PKI79nGQjpeWI8ehk5HijbEvSnSKF0OY9eIK57QCg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-12T22:23:49.786605Z","bundle_sha256":"ce25354b2138640c3fdd072bfe13d2bedb6746644c0d207f60d59ff7842b2c46"}}